$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa File: 088af552-e3aa-3534-9df2-64d1f767c9a6.roa (raw, json) Hash identifier: J5WsHxLOkf2Hv5f5DUSgZEl9HCEaBLNGkgxZzpCWbrs= Subject key identifier: FC:ED:AF:B2:57:AC:FF:24:81:8B:D1:7A:09:63:4C:F7:33:00:7A:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFFF74EBA90A79FBCF0C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 49585 IP address blocks: 2001:470:2a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ff:f7:4e:ba:90:a7:9f:bc:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a5089dc4-3ce6-47e2-8876-44e9bd9c8b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:07:e2:b4:3b:72:d6:7e:a2:98:d8:7a:d1: 51:a2:a2:73:18:4a:06:dc:a9:81:dd:6c:95:40:4b: 7e:0c:fd:64:4a:ad:a0:0b:11:de:9b:e0:79:43:87: 6c:b9:1e:7f:66:04:19:3f:00:2f:2c:92:f9:fc:1c: ad:12:99:20:31:23:fa:56:f9:69:f1:ce:d4:b2:dc: 6c:36:eb:5b:dc:a2:b6:d2:fd:a4:39:da:ab:11:6a: 1c:3c:3b:6b:5b:63:28:82:85:8b:78:22:18:22:a3: 48:dc:33:80:e5:7d:78:a3:23:dc:8b:f2:74:51:4f: 93:ed:5a:a9:5f:76:4c:3e:f6:62:4d:5c:73:8b:e6: b7:6e:61:e0:14:f6:3d:58:2d:f8:f1:76:cd:c1:36: cd:b4:90:77:95:fb:8c:10:4a:13:7b:a9:5b:e6:91: d1:ba:65:dc:87:a7:ba:b5:5a:28:9b:0d:55:eb:a8: da:f4:bb:f8:6f:b5:01:32:95:39:55:ec:d3:38:87: b5:96:fc:a8:4d:bf:43:1a:27:bc:ed:06:09:17:53: ec:c3:5c:44:ad:d6:c1:0d:35:e3:81:9d:6a:97:2a: bc:2b:5c:99:b0:5c:2a:bf:33:17:94:eb:02:cd:06: 1a:30:fb:cb:75:4f:88:5c:36:a4:e1:ea:1a:ed:e6: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:AF:B2:57:AC:FF:24:81:8B:D1:7A:09:63:4C:F7:33:00:7A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/088af552-e3aa-3534-9df2-64d1f767c9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:15:db:03:23:e7:e2:76:8c:cd:fd:9f:50:6a:a7:42:d8:45: 48:e4:9b:0a:29:83:a9:f1:66:bb:52:f9:33:f5:54:89:d8:61: 1a:eb:ca:c8:43:9f:49:24:c0:d1:30:0e:b6:10:3e:82:46:07: cc:29:ea:65:c1:ba:78:cc:24:c7:ad:cc:11:37:69:51:44:39: 1d:22:f4:9d:ee:06:cb:5d:b1:3d:c5:bf:c6:e3:65:e2:87:5c: ad:f9:56:ec:16:8c:16:50:41:6e:7f:46:6b:62:fd:b3:f4:cc: c8:3d:13:ad:75:f0:18:cf:fc:c7:0e:06:2b:d6:30:d8:35:85: aa:80:93:cf:d7:ad:65:10:e9:3c:a0:d6:9a:91:34:c3:48:c2: 5f:53:bc:80:33:ae:d7:b9:3d:f1:28:ef:e9:8b:78:da:fa:cb: b7:69:b3:88:f9:d4:1a:bb:65:0b:17:7b:4b:13:1c:6d:d3:1d: 8e:57:a9:c2:c7:4e:b4:be:82:e8:24:ed:2f:68:ee:6e:2e:0b: 0e:65:0d:f6:51:1b:f3:d3:ff:57:c8:23:e7:4b:9f:bd:5a:c8: 7e:9d:25:39:31:33:d8:ec:58:e4:29:0b:e7:12:1f:43:e9:78: 04:6b:d1:16:ad:77:1b:3c:23:e3:3a:11:ef:2e:a4:64:6a:a0: 64:f1:33:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G//3TrqQp5+88MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTUwODlkYzQtM2NlNi00N2UyLTg4NzYtNDRlOWJkOWM4Yjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+YH4rQ7ctZ+opjYetFRoqJzGEoG3KmB3WyV QEt+DP1kSq2gCxHem+B5Q4dsuR5/ZgQZPwAvLJL5/BytEpkgMSP6Vvlp8c7Ustxs Nutb3KK20v2kOdqrEWocPDtrW2MogoWLeCIYIqNI3DOA5X14oyPci/J0UU+T7Vqp X3ZMPvZiTVxzi+a3bmHgFPY9WC348XbNwTbNtJB3lfuMEEoTe6lb5pHRumXch6e6 tVoomw1V66ja9Lv4b7UBMpU5VezTOIe1lvyoTb9DGie87QYJF1Psw1xErdbBDTXj gZ1qlyq8K1yZsFwqvzMXlOsCzQYaMPvLdU+IXDak4eoa7eZqtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPztr7JXrP8kgYvRegljTPczAHoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDg4YWY1NTItZTNhYS0z NTM0LTlkZjItNjRkMWY3NjdjOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkV2wMj5+J2jM39n1Bqp0LYRUjkmwopg6nxZrtS+TP1VInYYRrr yshDn0kkwNEwDrYQPoJGB8wp6mXBunjMJMetzBE3aVFEOR0i9J3uBstdsT3Fv8bj ZeKHXK35VuwWjBZQQW5/Rmti/bP0zMg9E6118BjP/McOBivWMNg1haqAk8/XrWUQ 6Tyg1pqRNMNIwl9TvIAzrte5PfEo7+mLeNr6y7dps4j51Bq7ZQsXe0sTHG3THY5X qcLHTrS+gugk7S9o7m4uCw5lDfZRG/PT/1fII+dLn71ayH6dJTkxM9jsWOQpC+cS H0PpeARr0Ratdxs8I+M6Ee8upGRqoGTxMy4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:55:53 2025 by rpki-client