$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa File: 0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa (raw, json) Hash identifier: aT2ddysg4W6TtaysN0o/ruVPDpC1MXVvccqSq4Sd8Ns= Subject key identifier: BF:3B:BE:3D:12:BB:23:A0:1E:A2:6F:EE:4B:F0:B9:64:FF:D7:33:E7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDA891AD313E042D3E430 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 31151 IP address blocks: 2001:470:2df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:da:89:1a:d3:13:e0:42:d3:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=5ec3fc4a-f527-4e0b-8e5d-8f624c37bfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:da:66:18:cd:d0:d8:8e:2d:ba:8c:ca:3b: 5d:cd:66:58:48:25:52:cd:f5:bb:63:3b:f2:92:b0: 4c:f9:07:a2:38:79:0a:81:13:72:7f:bd:ef:aa:e3: 80:78:dc:ba:82:35:fb:ff:e7:4c:4b:3f:7c:bc:97: b6:a7:af:33:67:9c:72:0b:eb:c8:b5:24:c6:9e:2b: b5:08:48:59:f6:6f:fc:ee:29:25:5c:00:96:23:37: 82:b0:db:63:87:85:bd:ec:45:fb:48:55:77:af:f7: c8:ac:01:a4:e4:e9:1e:d6:d6:db:e1:30:a5:3b:8b: c7:7e:35:7f:60:25:8a:b6:99:83:30:0a:09:c5:c8: d9:a9:07:c3:08:42:b3:c1:4f:88:27:11:ac:1f:35: 9d:f6:68:ab:41:94:8c:1a:dc:60:ee:c5:50:48:71: 4b:da:76:49:74:9a:37:19:1f:fd:cc:63:14:7d:98: 8d:c8:e8:7c:90:3c:fd:e6:a2:48:a2:2d:e3:37:cc: c6:64:18:24:1e:76:9e:38:e5:b4:7a:e5:83:ac:8e: 80:a5:54:be:b5:49:d6:25:4b:5d:d0:b6:96:97:7a: 65:1d:35:b3:f8:86:0d:a5:36:bc:61:3d:34:35:6d: b9:68:8c:14:55:74:0a:ee:2b:88:37:bc:a0:3d:f3: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:BE:3D:12:BB:23:A0:1E:A2:6F:EE:4B:F0:B9:64:FF:D7:33:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:36:78:58:16:99:0d:1f:d5:ad:f4:ed:09:f3:ce:60:22:05: 97:9b:36:95:20:5d:9e:c8:69:7e:7d:b0:cf:64:d7:fc:1e:bc: a6:b9:a7:a2:4a:9b:08:2d:f7:44:5a:f0:ad:7c:df:da:71:b1: 43:cd:88:bb:bf:29:4d:50:0d:36:b6:5f:4b:ad:25:e7:9e:24: e4:0d:ae:dc:c3:de:72:29:a9:f3:bd:a2:07:e6:d7:2c:be:f9: 25:fa:a1:f7:31:4f:2a:83:2c:92:48:57:49:75:5f:0b:98:12: 81:5e:eb:7c:f5:2f:6b:dd:86:87:48:d0:55:eb:df:e0:71:49: 19:b4:48:9e:43:f4:11:79:1d:af:2d:4e:00:d0:31:8c:a9:91: a1:90:94:cf:45:d1:73:a4:d0:3c:af:bc:ea:0b:23:b0:d9:bf: df:48:d0:c9:d1:40:78:65:6e:f6:ac:6d:0b:82:08:37:97:e4: 52:a6:58:45:a6:be:4e:39:eb:c2:47:f4:b4:77:da:f9:11:9f: 9f:cb:dc:61:f3:35:6e:2f:a6:bc:e2:80:f6:6a:04:98:e2:5c: 91:4d:2a:70:e2:d5:a0:08:f1:66:21:5b:4a:c2:d4:36:24:51: fa:c9:09:bd:f3:93:27:3e:47:b6:ee:ce:58:b2:62:0c:97:20: 3d:d2:0d:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9qJGtMT4ELT5DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWVjM2ZjNGEtZjUyNy00ZTBiLThlNWQtOGY2MjRjMzdiZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvaZhjN0NiOLbqMyjtdzWZYSCVSzfW7Yzvy krBM+QeiOHkKgRNyf73vquOAeNy6gjX7/+dMSz98vJe2p68zZ5xyC+vItSTGniu1 CEhZ9m/87iklXACWIzeCsNtjh4W97EX7SFV3r/fIrAGk5Oke1tbb4TClO4vHfjV/ YCWKtpmDMAoJxcjZqQfDCEKzwU+IJxGsHzWd9mirQZSMGtxg7sVQSHFL2nZJdJo3 GR/9zGMUfZiNyOh8kDz95qJIoi3jN8zGZBgkHnaeOOW0euWDrI6ApVS+tUnWJUtd 0LaWl3plHTWz+IYNpTa8YT00NW25aIwUVXQK7iuIN7ygPfPJPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL87vj0SuyOgHqJv7kvwuWT/1zPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDg2OGFjOWQtY2Y2MC0z MDA0LWEyOWYtMTRkOGY5ZTJlMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABU2eFgWmQ0f1a307QnzzmAiBZebNpUgXZ7IaX59sM9k1/wevKa5 p6JKmwgt90Ra8K1839pxsUPNiLu/KU1QDTa2X0utJeeeJOQNrtzD3nIpqfO9ogfm 1yy++SX6ofcxTyqDLJJIV0l1XwuYEoFe63z1L2vdhodI0FXr3+BxSRm0SJ5D9BF5 Ha8tTgDQMYypkaGQlM9F0XOk0DyvvOoLI7DZv99I0MnRQHhlbvasbQuCCDeX5FKm WEWmvk4568JH9LR32vkRn5/L3GHzNW4vprzigPZqBJjiXJFNKnDi1aAI8WYhW0rC 1DYkUfrJCb3zkyc+R7buzliyYgyXID3SDfA= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:06 2025 by rpki-client