$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16137a39-3104-33ef-90a6-6d25a0b11ee1.roa File: 16137a39-3104-33ef-90a6-6d25a0b11ee1.roa (raw, json) Hash identifier: ngQQvqxPLEI+nehnHQ33PBvsybVEbBLRlq53o/nU8tU= Subject key identifier: 9F:FD:FF:C6:3E:CB:2E:51:64:17:50:26:0C:E2:56:01:41:46:95:59 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCDE0FD4785867511B700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16137a39-3104-33ef-90a6-6d25a0b11ee1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 37189 IP address blocks: 2001:470:18a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cd:e0:fd:47:85:86:75:11:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=47bb09c1-8ed8-4979-be3f-90a08c4f9e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:77:7f:28:c0:8c:d1:21:1d:84:b3:86:8b: 84:c2:91:56:eb:de:03:24:cb:57:6e:a8:8c:13:a2: dd:fb:c2:8b:6b:2e:c2:1b:15:9e:34:80:79:db:8c: 9b:e9:f7:16:b4:5a:8f:d6:a8:1a:6b:d1:7a:2b:52: 25:5c:94:d9:ca:cf:7b:9b:b7:59:e3:6f:a1:04:12: 42:c6:9e:59:25:08:0c:83:79:02:91:f7:a1:83:11: e2:61:c9:2e:30:de:fb:5a:42:15:ac:a2:47:37:7b: f3:bb:c9:32:fc:33:13:75:ac:9e:dd:d3:10:58:15: c6:d2:12:bd:75:b1:64:0f:1d:6d:8d:3a:80:33:f4: f0:00:ce:b6:3c:0f:8a:90:30:a0:65:90:55:9b:81: c1:a3:43:20:35:fd:09:1f:7a:01:78:04:39:5e:37: 30:58:80:8c:95:e6:02:46:a4:93:14:09:a2:3a:30: 4a:05:ab:86:2d:07:a4:f5:2a:6e:82:b5:1a:0d:52: 07:89:61:3b:a9:79:af:3b:0c:ac:98:aa:8f:97:b7: 00:a9:4f:33:81:e2:18:5a:e6:9d:ad:8f:70:85:db: b8:ea:80:4e:11:6a:fc:76:f0:33:42:a6:df:92:a9: 6c:51:f7:ee:f5:5e:6d:c4:67:98:ee:82:0e:00:37: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:FF:C6:3E:CB:2E:51:64:17:50:26:0C:E2:56:01:41:46:95:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16137a39-3104-33ef-90a6-6d25a0b11ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:18a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c9:a2:6f:af:53:7c:f3:e1:58:f0:90:a4:e9:be:37:50:40: 94:77:78:a7:58:f8:04:fc:50:a8:17:8e:25:c9:27:b6:18:f7: 95:b3:7f:74:d8:ac:7f:8d:91:cd:d2:72:cd:81:9d:26:ad:3e: 2c:86:e8:b8:e2:54:f8:0c:c1:61:f8:5c:b2:b9:12:74:1e:18: 7d:0c:89:6a:c5:6d:1a:eb:4b:2c:3d:f1:2d:98:7d:68:5e:89: 90:36:db:09:85:14:69:d5:28:92:3e:d1:2a:2b:13:42:79:fb: 82:31:73:e0:28:eb:42:31:1a:df:b5:23:f4:37:6e:f2:29:58: 0d:96:36:e4:4e:f0:a3:2c:56:d8:60:ff:fd:0a:ee:73:8a:ef: 4b:5b:a9:3d:fb:97:11:2b:a1:42:bb:95:6f:72:54:fe:79:95: 0a:bd:ea:6b:ea:d2:ce:41:21:fc:df:6a:27:b6:1d:6b:cd:6e: 2c:0b:c9:ba:d4:35:50:f3:c7:49:91:00:50:c9:d1:86:67:ad: af:3b:3b:c6:c0:cd:5d:3f:99:48:23:7e:df:64:ed:e7:53:a4: ef:ff:7c:1f:33:b4:b2:0c:85:55:3d:60:a7:cb:7f:bc:e7:cc: cb:24:3e:03:fc:7e:ef:03:8d:a6:58:7d:0c:9e:89:fd:f5:3c: fb:0c:3f:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G83g/UeFhnURtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDdiYjA5YzEtOGVkOC00OTc5LWJlM2YtOTBhMDhjNGY5ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCV3fyjAjNEhHYSzhouEwpFW694DJMtXbqiM E6Ld+8KLay7CGxWeNIB524yb6fcWtFqP1qgaa9F6K1IlXJTZys97m7dZ42+hBBJC xp5ZJQgMg3kCkfehgxHiYckuMN77WkIVrKJHN3vzu8ky/DMTdaye3dMQWBXG0hK9 dbFkDx1tjTqAM/TwAM62PA+KkDCgZZBVm4HBo0MgNf0JH3oBeAQ5XjcwWICMleYC RqSTFAmiOjBKBauGLQek9SpugrUaDVIHiWE7qXmvOwysmKqPl7cAqU8zgeIYWuad rY9whdu46oBOEWr8dvAzQqbfkqlsUffu9V5txGeY7oIOADeykwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ/9/8Y+yy5RZBdQJgziVgFBRpVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTYxMzdhMzktMzEwNC0z M2VmLTkwYTYtNmQyNWEwYjExZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzJom+vU3zz4VjwkKTpvjdQQJR3eKdY+AT8UKgXjiXJJ7YY95Wz f3TYrH+Nkc3Scs2BnSatPiyG6LjiVPgMwWH4XLK5EnQeGH0MiWrFbRrrSyw98S2Y fWheiZA22wmFFGnVKJI+0SorE0J5+4Ixc+Ao60IxGt+1I/Q3bvIpWA2WNuRO8KMs Vthg//0K7nOK70tbqT37lxEroUK7lW9yVP55lQq96mvq0s5BIfzfaie2HWvNbiwL ybrUNVDzx0mRAFDJ0YZnra87O8bAzV0/mUgjft9k7edTpO//fB8ztLIMhVU9YKfL f7znzMskPgP8fu8DjaZYfQyeif31PPsMP8o= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:11 2025 by rpki-client