$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00034837-ea26-3fb3-98cc-d0be5ca06a1a.roa File: 00034837-ea26-3fb3-98cc-d0be5ca06a1a.roa (raw, json) Hash identifier: sB8FQ0vUPhD5uyyF0dZxWW8E4u3c2QtzHTKEnCy+zB8= Subject key identifier: 69:68:91:57:0A:62:6B:C8:CE:AD:0E:79:03:E9:EA:10:29:5C:EE:83 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCF4CB86C2D030C3BFA40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00034837-ea26-3fb3-98cc-d0be5ca06a1a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 25668 IP address blocks: 2001:470:1d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cf:4c:b8:6c:2d:03:0c:3b:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=074af284-dda2-4ebc-b03d-4da16db907e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:3f:21:5d:57:ce:c8:22:c3:bb:39:80:57: 0e:e3:37:14:27:6c:a6:8d:3b:c8:ab:23:f5:60:38: 0f:f5:19:e9:53:83:c9:7e:b6:02:e1:b1:36:2a:1d: 4e:99:a2:57:d0:4e:bf:cd:04:8b:10:85:4f:fe:7e: 0f:f4:df:fa:33:c9:ab:26:7c:f9:9a:ba:62:e1:11: 7e:d7:67:fb:e6:db:bc:e9:8b:83:e6:78:5d:df:bf: 37:57:73:91:b9:89:c6:41:ce:be:6a:3c:b0:fd:92: 2c:df:02:dc:a5:ec:4b:68:1c:0e:8a:12:57:7b:68: 1b:1d:58:1c:52:15:3b:18:77:06:a2:3e:9b:25:a5: 5c:96:89:f8:fd:69:48:cf:32:dc:83:30:ad:04:41: 73:74:ad:78:61:4b:ad:d5:d8:d7:58:ef:ad:e1:9b: e4:4d:29:d8:80:18:d1:36:3f:13:5a:7c:ed:4e:36: 84:aa:1c:20:a2:ea:84:1a:f4:58:c7:ef:c1:89:31: a7:8b:a7:49:cc:92:11:d6:9e:b1:18:fe:6e:52:f3: f4:5a:d1:f3:8d:0c:7a:e5:86:55:47:a6:a8:63:6b: 8a:8d:cc:1f:94:e0:37:25:f8:79:26:a5:26:9e:9f: 3b:ab:a8:a0:a4:d2:ff:a9:d5:85:94:d6:f4:e3:99: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:91:57:0A:62:6B:C8:CE:AD:0E:79:03:E9:EA:10:29:5C:EE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00034837-ea26-3fb3-98cc-d0be5ca06a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:41:06:09:1a:2f:92:89:74:1d:73:10:0f:b8:40:28:85:e7: ce:52:03:29:24:e2:2f:e1:0a:4c:ee:24:a5:73:7e:60:6e:15: 56:52:c2:d7:5d:e4:16:7b:6c:bc:5d:03:4d:80:98:3c:36:fb: 01:cd:58:f7:da:e2:03:b6:86:37:86:e8:74:60:fb:b6:7f:5d: 12:25:c4:00:5b:c9:26:62:0a:1b:0f:9a:70:e5:39:42:f3:df: ac:9c:22:29:d2:5c:b0:6e:ef:d8:f7:4a:93:de:f4:a8:45:4c: 6b:85:f3:61:d2:7b:94:3a:3b:d0:7f:7d:cc:6a:ca:1f:4c:9b: 3b:32:ab:93:06:25:60:c5:53:04:1d:bd:7f:85:d0:7d:02:60: 57:37:9e:ca:a0:b0:16:65:48:34:a5:7a:e2:db:27:5a:5e:ac: 19:66:2b:8c:90:83:8d:be:24:ac:24:73:2f:73:e2:5c:87:b9: 19:ab:2d:6b:29:ea:6b:39:41:2a:74:7b:14:2f:9e:bf:71:b6: ef:e6:a3:6c:7d:1e:44:05:34:89:31:8d:11:06:64:7a:d0:54: 1a:3b:1b:b5:65:3a:d4:5e:17:a6:27:50:05:13:0f:ab:a6:61: ca:d7:c2:84:d3:bc:0a:db:1b:a8:eb:87:d7:79:e3:09:b5:95: 44:61:d6:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G89MuGwtAww7+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDc0YWYyODQtZGRhMi00ZWJjLWIwM2QtNGRhMTZkYjkwN2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl10/IV1Xzsgiw7s5gFcO4zcUJ2ymjTvIqyP1 YDgP9RnpU4PJfrYC4bE2Kh1OmaJX0E6/zQSLEIVP/n4P9N/6M8mrJnz5mrpi4RF+ 12f75tu86YuD5nhd3783V3ORuYnGQc6+ajyw/ZIs3wLcpexLaBwOihJXe2gbHVgc UhU7GHcGoj6bJaVclon4/WlIzzLcgzCtBEFzdK14YUut1djXWO+t4ZvkTSnYgBjR Nj8TWnztTjaEqhwgouqEGvRYx+/BiTGni6dJzJIR1p6xGP5uUvP0WtHzjQx65YZV R6aoY2uKjcwflOA3Jfh5JqUmnp87q6igpNL/qdWFlNb045kYowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlokVcKYmvIzq0OeQPp6hApXO6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDAwMzQ4MzctZWEyNi0z ZmIzLTk4Y2MtZDBiZTVjYTA2YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtBBgkaL5KJdB1zEA+4QCiF585SAykk4i/hCkzuJKVzfmBuFVZS wtdd5BZ7bLxdA02AmDw2+wHNWPfa4gO2hjeG6HRg+7Z/XRIlxABbySZiChsPmnDl OULz36ycIinSXLBu79j3SpPe9KhFTGuF82HSe5Q6O9B/fcxqyh9Mmzsyq5MGJWDF UwQdvX+F0H0CYFc3nsqgsBZlSDSleuLbJ1perBlmK4yQg42+JKwkcy9z4lyHuRmr LWsp6ms5QSp0exQvnr9xtu/mo2x9HkQFNIkxjREGZHrQVBo7G7VlOtReF6YnUAUT D6umYcrXwoTTvArbG6jrh9d54wm1lURh1mM= -----END CERTIFICATE-----Generated at Mon Aug 4 11:23:23 2025 by rpki-client