$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa File: 13281c46-3186-389c-b054-cb3e08ef18e6.roa (raw, json) Hash identifier: QTUjSWM4j1CblNLIHENvTe2ctdZeMZzPd5PGusdqF+E= Subject key identifier: 25:96:DE:81:D5:83:83:09:61:E2:33:88:3A:EB:57:68:FF:88:27:DC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF50053784825E0B15080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 40138 IP address blocks: 2001:470:18d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f5:00:53:78:48:25:e0:b1:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=746c6eed-659a-4f05-b747-697643d4f440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:8a:b2:8d:de:c0:d5:4c:fe:86:64:f8:81: dd:0a:73:91:fc:39:ba:61:21:70:36:d0:a9:3e:1a: cc:65:91:ba:5c:54:83:d0:c9:e3:30:f1:30:a0:92: fb:90:a4:cd:de:13:29:15:af:07:19:05:b2:ef:24: 58:74:95:ec:ec:68:15:92:0c:d0:db:bc:d9:1a:12: af:ea:50:b0:69:f7:00:e1:2e:b9:1b:a7:c7:2c:0e: f0:9c:30:86:bb:2c:67:f6:59:55:0b:61:81:a9:fd: d8:4d:b9:be:df:6c:6f:77:85:32:9e:36:d7:a2:38: ab:a3:a3:40:d3:4b:89:ba:0c:c3:f5:3d:0f:51:60: 94:04:19:d5:1e:87:ac:53:e9:11:21:47:3c:f2:d5: 40:3b:61:5f:5e:1f:51:ff:a9:72:f4:c9:ad:78:e3: 9f:d0:ce:43:b6:34:69:84:52:7e:42:11:0c:60:0a: d0:dc:fe:48:af:de:60:dd:c1:a1:3d:76:a7:81:9e: f9:2b:70:c0:f9:e7:65:5d:ab:38:31:0d:26:3b:fc: 65:50:9f:6c:de:ad:27:0d:e7:ea:b2:07:9b:28:f6: dd:2f:00:48:08:e3:d2:73:20:85:85:bd:29:c4:93: 1c:f4:3c:0e:1a:b7:24:07:57:3e:2b:ae:9a:dc:5b: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:DE:81:D5:83:83:09:61:E2:33:88:3A:EB:57:68:FF:88:27:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:18d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1b:c1:45:ec:c2:07:83:67:96:e5:d1:02:af:89:87:15:54: b5:c5:9d:e0:25:d8:9f:6d:65:cd:a2:a4:5a:ab:1f:23:c2:db: 3c:39:2d:55:90:69:f2:b3:54:6d:04:c3:3d:e0:4e:f6:8d:7b: 4f:74:ec:a8:16:21:7d:a6:d9:66:e5:70:4b:b8:dc:cf:fa:84: eb:c9:cb:cf:78:f3:1d:46:60:b1:80:0d:7e:ed:f2:8c:a5:b3: 62:b9:a9:7e:04:95:06:7b:6e:ed:66:88:b8:61:58:5b:d2:5e: 40:16:5e:0c:5b:94:08:db:9c:d3:3c:b2:fb:22:6c:9c:2c:70: fb:fd:87:53:aa:2e:7a:bb:f8:f6:64:7c:19:ad:85:e2:53:65: 6f:0c:a1:9f:31:8b:40:7a:e1:d4:3c:45:0c:a9:1d:a8:82:41: 70:87:36:76:03:55:21:d1:5d:23:2c:ed:a0:6d:c3:08:ce:b0: 61:22:e4:b0:ea:83:07:03:83:e4:59:fd:aa:41:82:bb:45:37: f1:6f:85:5a:71:40:fe:86:e1:a2:a6:22:0d:7e:0c:28:56:de: 47:6a:10:e4:09:6a:14:92:b4:74:a9:ad:43:2f:24:f5:de:92: 36:81:2d:8d:20:33:d8:f9:45:ea:8b:07:77:6c:60:9f:e3:0f: 91:59:fd:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/UAU3hIJeCxUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzQ2YzZlZWQtNjU5YS00ZjA1LWI3NDctNjk3NjQzZDRmNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5WKso3ewNVM/oZk+IHdCnOR/Dm6YSFwNtCp PhrMZZG6XFSD0MnjMPEwoJL7kKTN3hMpFa8HGQWy7yRYdJXs7GgVkgzQ27zZGhKv 6lCwafcA4S65G6fHLA7wnDCGuyxn9llVC2GBqf3YTbm+32xvd4UynjbXojiro6NA 00uJugzD9T0PUWCUBBnVHoesU+kRIUc88tVAO2FfXh9R/6ly9MmteOOf0M5DtjRp hFJ+QhEMYArQ3P5Ir95g3cGhPXangZ75K3DA+edlXas4MQ0mO/xlUJ9s3q0nDefq sgebKPbdLwBICOPScyCFhb0pxJMc9DwOGrckB1c+K66a3FvlcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWW3oHVg4MJYeIziDrrV2j/iCfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTMyODFjNDYtMzE4Ni0z ODljLWIwNTQtY2IzZTA4ZWYxOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUbwUXswgeDZ5bl0QKviYcVVLXFneAl2J9tZc2ipFqrHyPC2zw5 LVWQafKzVG0Ewz3gTvaNe0907KgWIX2m2WblcEu43M/6hOvJy8948x1GYLGADX7t 8oyls2K5qX4ElQZ7bu1miLhhWFvSXkAWXgxblAjbnNM8svsibJwscPv9h1OqLnq7 +PZkfBmtheJTZW8MoZ8xi0B64dQ8RQypHaiCQXCHNnYDVSHRXSMs7aBtwwjOsGEi 5LDqgwcDg+RZ/apBgrtFN/FvhVpxQP6G4aKmIg1+DChW3kdqEOQJahSStHSprUMv JPXekjaBLY0gM9j5ReqLB3dsYJ/jD5FZ/dQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:48:14 2025 by rpki-client