$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08a3689f-b279-3dfa-a0e9-4ad839dcb612.roa File: 08a3689f-b279-3dfa-a0e9-4ad839dcb612.roa (raw, json) Hash identifier: GuUdj2tL95PG5NTYklcLFz9LxBsOjuE6qGT+hBOZlJ4= Subject key identifier: AC:93:AD:75:48:76:BA:3F:53:CC:62:1F:E4:1B:73:B2:9D:F6:3D:02 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF04D6561AE725D318F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08a3689f-b279-3dfa-a0e9-4ad839dcb612.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 17117 IP address blocks: 2001:470:13a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f0:4d:65:61:ae:72:5d:31:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=e74b2bca-d5c8-4524-b954-c53ba2231c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:37:b1:6a:d3:96:e4:e8:03:16:d2:58:3c: 99:c2:49:bf:82:46:18:5b:b7:2f:23:23:2f:80:f0: 6f:e3:92:fb:de:c5:3f:96:a3:bf:3e:52:8e:68:84: 72:55:b5:b1:6a:7f:1d:e5:e2:ca:89:4a:1c:1c:05: 2b:61:2d:3c:57:c4:80:f5:e1:30:5b:48:79:00:63: 42:db:26:c3:95:96:78:21:c0:55:6d:59:2b:3d:37: e2:51:29:20:dc:15:b1:ef:84:56:a7:05:25:c6:82: ec:10:1b:c4:e3:89:bf:44:ce:3b:ab:58:84:a1:32: d2:e7:51:75:79:9b:f2:7c:75:00:bf:4f:04:99:8b: 45:50:8c:39:15:ea:1e:f2:4f:15:9b:69:68:e6:a5: 2f:26:88:cb:37:72:a6:d9:e2:35:98:15:3f:57:79: e1:4d:98:8b:f5:57:4a:fd:bc:2a:30:25:2b:66:c4: c3:ff:ad:90:11:50:a6:91:27:c0:a6:85:bf:13:57: fb:c1:b8:5f:54:99:be:ca:c1:85:ce:80:b7:90:1e: d9:e0:42:ff:a2:12:42:95:76:db:52:96:49:e1:75: 18:5c:21:ef:b6:27:ea:01:29:8d:c2:dc:4c:82:65: e6:9a:a7:3e:94:48:b1:a4:27:a4:12:39:2f:cd:30: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:AD:75:48:76:BA:3F:53:CC:62:1F:E4:1B:73:B2:9D:F6:3D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08a3689f-b279-3dfa-a0e9-4ad839dcb612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:13a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:db:ab:81:2e:c0:0b:58:b6:b5:56:4b:97:7e:07:b9:7d: c3:e4:fb:2c:cf:a6:52:1a:2e:66:dd:9a:26:b1:8d:e1:14:05: 54:ca:97:54:f3:0d:f2:74:7f:bc:46:a5:69:4c:36:b9:83:08: e7:c2:3b:27:18:71:4e:ef:a5:a2:0d:a8:27:25:31:b7:1e:09: c3:4f:cb:27:35:1a:61:ec:a5:db:e1:a3:f7:c5:4c:86:0b:38: b0:8a:4c:d2:e9:e2:5f:bc:bf:ef:08:39:22:f4:43:73:4b:99: a9:24:62:ec:45:68:9f:ef:c1:1d:08:00:aa:0c:5a:5e:fe:a0: b3:7d:7f:63:11:a1:df:ca:1f:e5:14:29:0d:3a:9f:aa:4c:3f: ee:11:27:cc:5b:7b:78:61:f8:81:4f:d7:b5:e9:91:67:d0:b7: d1:df:f1:da:26:67:c0:50:ab:28:b3:93:14:9f:ed:b3:ee:bc: 59:95:16:33:7b:bd:8f:2d:d2:b0:88:da:d7:59:08:27:f6:e3: c2:b0:c3:74:c0:ff:a5:6e:e8:32:b5:dc:1b:a3:3a:9e:60:f8: 54:3c:f5:e5:b6:98:df:3a:08:18:c1:df:68:6e:63:1c:65:e2: 40:05:a2:67:f0:c4:81:bb:3d:00:a3:0d:f6:0f:0f:79:b9:be: fb:fe:d6:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/BNZWGucl0xjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTc0YjJiY2EtZDVjOC00NTI0LWI5NTQtYzUzYmEyMjMxYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL03sWrTluToAxbSWDyZwkm/gkYYW7cvIyMv gPBv45L73sU/lqO/PlKOaIRyVbWxan8d5eLKiUocHAUrYS08V8SA9eEwW0h5AGNC 2ybDlZZ4IcBVbVkrPTfiUSkg3BWx74RWpwUlxoLsEBvE44m/RM47q1iEoTLS51F1 eZvyfHUAv08EmYtFUIw5Feoe8k8Vm2lo5qUvJojLN3Km2eI1mBU/V3nhTZiL9VdK /bwqMCUrZsTD/62QEVCmkSfApoW/E1f7wbhfVJm+ysGFzoC3kB7Z4EL/ohJClXbb UpZJ4XUYXCHvtifqASmNwtxMgmXmmqc+lEixpCekEjkvzTBE5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKyTrXVIdro/U8xiH+Qbc7Kd9j0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDhhMzY4OWYtYjI3OS0z ZGZhLWEwZTktNGFkODM5ZGNiNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqz26uBLsALWLa1VkuXfge5fcPk+yzPplIaLmbdmiaxjeEUBVTK l1TzDfJ0f7xGpWlMNrmDCOfCOycYcU7vpaINqCclMbceCcNPyyc1GmHspdvho/fF TIYLOLCKTNLp4l+8v+8IOSL0Q3NLmakkYuxFaJ/vwR0IAKoMWl7+oLN9f2MRod/K H+UUKQ06n6pMP+4RJ8xbe3hh+IFP17XpkWfQt9Hf8domZ8BQqyizkxSf7bPuvFmV FjN7vY8t0rCI2tdZCCf248Kww3TA/6Vu6DK13BujOp5g+FQ89eW2mN86CBjB32hu Yxxl4kAFomfwxIG7PQCjDfYPD3m5vvv+1io= -----END CERTIFICATE-----Generated at Mon Aug 4 07:48:43 2025 by rpki-client