$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa File: 027e8105-6846-3d39-8fe1-c08048af3419.roa (raw, json) Hash identifier: Q89Ja6oAmnEZjkJoeSWkpwiltydiawJdIR9VrZtLMng= Subject key identifier: 9E:BA:F5:44:43:97:A6:8D:A4:E5:78:28:F0:F3:91:17:E3:A6:DC:4D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC12074086BBF94BF8380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 398273 IP address blocks: 2001:470:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c1:20:74:08:6b:bf:94:bf:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a8b2e783-4ffc-4bb4-a174-dc7ba385a81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:97:0f:b4:ad:9d:3f:e8:06:66:fe:8c:21: 1b:b2:80:b4:95:be:aa:cc:5a:77:06:99:cd:d9:00: 5f:65:68:15:64:fb:73:6e:85:6e:f8:06:9d:c5:06: 7c:2d:58:a7:1b:02:65:2f:ec:71:f1:3a:74:ca:d8: 09:15:b3:d4:3b:a9:36:69:43:6c:af:d2:f8:9a:3d: a4:9e:b3:cb:86:92:f1:8f:b8:78:ed:1e:0d:0e:02: 7a:c7:a8:53:42:47:15:3f:31:33:98:20:23:82:4b: 0c:2f:88:20:55:43:db:5a:20:95:f8:fa:6f:e5:04: 82:69:93:2a:e6:a6:30:c2:1c:0e:74:c4:88:f4:ea: 5f:9d:40:2b:da:ee:ed:91:70:9f:a9:ef:a0:bf:fc: ac:0c:a1:d1:08:a8:51:29:e5:65:ea:85:1b:cc:c9: 49:43:57:75:bb:c3:7c:1b:45:81:ea:52:a8:cb:ff: cc:28:5c:35:b2:bd:42:f9:81:ce:b7:f5:c9:a6:86: 39:50:ec:c0:59:75:90:9f:cf:a0:36:2e:aa:06:53: 40:c4:fe:01:72:9a:4a:0e:f2:f9:23:2e:be:44:54: 8f:7e:32:7a:c4:c6:23:38:29:42:fe:76:95:6c:d0: 01:62:a9:3e:96:09:49:d5:b8:0a:89:c7:46:08:da: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BA:F5:44:43:97:A6:8D:A4:E5:78:28:F0:F3:91:17:E3:A6:DC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:60:44:1c:02:64:14:dd:a4:d4:f7:7f:85:c0:98:c1:67:b4: 25:d4:06:67:60:19:d9:4c:f2:60:e4:72:0b:9f:2f:2a:ef:6a: a1:1b:6b:f1:4d:a0:be:49:88:28:ee:5d:ea:36:74:6e:1a:b1: 52:ed:f4:7c:78:82:b3:91:41:f7:aa:64:49:da:55:48:98:30: 2f:15:7c:51:c4:31:f0:6a:f9:3a:ec:e1:a8:a0:b2:2c:3e:e3: 15:65:ec:57:4f:72:9d:b6:98:6d:4f:6a:ed:41:a8:50:23:3d: bc:96:1a:11:48:76:43:c3:ee:c9:2b:c6:3a:13:88:53:bf:bb: 84:e8:b0:e5:7b:b3:ec:5b:b4:c5:89:b8:f8:b4:a5:d2:c1:e4: ce:f2:3b:a2:40:d7:a0:68:de:e4:be:6a:05:a3:06:fe:ae:58: 4c:66:20:1a:42:1c:2f:a2:16:aa:fb:7a:9c:18:48:ad:91:fa: 98:ff:19:fe:c9:17:da:8b:76:cf:20:28:67:49:75:96:45:77: d9:b3:a5:71:d5:04:29:a0:ff:28:d2:48:f4:b4:cc:30:83:fc: 7b:e4:50:9e:e7:2b:ca:2b:53:8b:46:2d:80:0f:f4:b8:ed:9b: 92:6f:7c:0b:c0:47:b3:d9:d7:c1:bc:59:00:9a:b5:3b:34:63: 5a:75:86:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8EgdAhrv5S/g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YThiMmU3ODMtNGZmYy00YmI0LWExNzQtZGM3YmEzODVhODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd2XD7StnT/oBmb+jCEbsoC0lb6qzFp3BpnN 2QBfZWgVZPtzboVu+AadxQZ8LVinGwJlL+xx8Tp0ytgJFbPUO6k2aUNsr9L4mj2k nrPLhpLxj7h47R4NDgJ6x6hTQkcVPzEzmCAjgksML4ggVUPbWiCV+Ppv5QSCaZMq 5qYwwhwOdMSI9OpfnUAr2u7tkXCfqe+gv/ysDKHRCKhRKeVl6oUbzMlJQ1d1u8N8 G0WB6lKoy//MKFw1sr1C+YHOt/XJpoY5UOzAWXWQn8+gNi6qBlNAxP4BcppKDvL5 Iy6+RFSPfjJ6xMYjOClC/naVbNABYqk+lglJ1bgKicdGCNqmswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ669URDl6aNpOV4KPDzkRfjptxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI3ZTgxMDUtNjg0Ni0z ZDM5LThmZTEtYzA4MDQ4YWYzNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJgRBwCZBTdpNT3f4XAmMFntCXUBmdgGdlM8mDkcgufLyrvaqEb a/FNoL5JiCjuXeo2dG4asVLt9Hx4grORQfeqZEnaVUiYMC8VfFHEMfBq+Trs4aig siw+4xVl7FdPcp22mG1Pau1BqFAjPbyWGhFIdkPD7skrxjoTiFO/u4TosOV7s+xb tMWJuPi0pdLB5M7yO6JA16Bo3uS+agWjBv6uWExmIBpCHC+iFqr7epwYSK2R+pj/ Gf7JF9qLds8gKGdJdZZFd9mzpXHVBCmg/yjSSPS0zDCD/HvkUJ7nK8orU4tGLYAP 9Ljtm5JvfAvAR7PZ18G8WQCatTs0Y1p1htc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:53:50 2025 by rpki-client