$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa File: 16abd7fb-439b-3e9c-9788-30c7e57768dd.roa (raw, json) Hash identifier: CZB5sqek4RID1exlNCFdHQFtBjq0iBlmWFwDUpmGB6M= Subject key identifier: 60:39:94:26:56:85:12:5D:D0:91:C1:36:F1:5F:BB:95:16:A4:C7:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDACBCA2FB4B4CFA11360 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 18712 IP address blocks: 2001:470:2e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:da:cb:ca:2f:b4:b4:cf:a1:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=3e9a86a4-8f8e-4eea-8de2-d903350164eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:2e:af:6f:c6:23:2d:bc:b3:5a:78:f8:1d: 2c:45:85:2e:67:08:fe:90:fd:64:f4:92:19:4f:ca: 39:c4:a4:a3:eb:1b:c9:67:38:74:26:fe:8c:9f:5c: e7:21:44:8b:9a:8d:db:e8:b8:6c:3a:1d:39:26:68: e3:c2:de:9a:1b:31:22:35:ce:48:53:fa:c0:af:6b: 46:d7:5f:34:ad:b9:13:37:5d:84:bb:af:ff:0c:89: f8:2d:f7:26:43:fd:56:be:f1:8f:d3:67:8f:b3:f5: 19:7a:31:0a:ac:43:0b:1f:65:36:c0:c7:ec:7d:ba: d4:02:d6:58:52:52:d6:1d:ce:97:1a:72:b5:69:86: ac:89:dd:77:ba:a9:51:54:1d:31:97:de:77:1d:17: 75:32:da:05:65:35:e0:c8:ab:be:18:b2:a5:3c:80: 86:9f:33:44:72:e0:85:7b:2b:66:86:6a:31:fc:44: fb:ca:7c:46:50:66:45:a6:9b:26:fe:bb:5b:94:c0: 6a:6b:f1:f4:c6:dc:0d:9d:54:59:46:95:f6:a1:74: 9b:b3:eb:f7:fd:6e:70:32:3d:b0:25:c8:84:a3:32: 92:e4:e7:b8:61:05:55:d2:dd:41:bc:3e:b3:08:c0: cc:69:23:1b:a3:32:24:c0:9a:06:18:8f:dc:7e:07: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:39:94:26:56:85:12:5D:D0:91:C1:36:F1:5F:BB:95:16:A4:C7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:64:6b:c4:f8:68:5c:e3:59:ef:12:4d:d2:d7:38:d0:69:4c: 2c:38:83:58:3c:58:26:64:d6:32:50:a8:21:9b:fb:8d:97:0e: e4:1b:40:2d:c4:6e:51:f0:5b:84:de:aa:77:a8:61:ab:86:a0: 06:84:a5:cb:ed:cd:90:fd:d4:d8:1b:97:40:f2:89:6a:a3:b1: 2a:10:91:12:cc:ee:f2:b1:72:d5:d7:50:2c:fd:53:ce:40:79: ed:fd:32:10:e4:78:f3:79:3a:bd:66:5e:42:7d:c3:34:b4:22: ca:8a:2b:f4:23:28:82:f4:56:cf:5e:2c:dd:cf:b8:98:b5:cd: da:86:ae:ea:6d:9c:9c:74:13:f2:0a:51:a8:46:ad:0c:b9:af: 56:df:40:f5:b5:13:8a:c0:85:1e:98:7c:93:fa:61:1a:ca:52: e2:7b:f6:f7:e3:1c:82:fd:bc:01:92:24:6e:6f:c9:cc:aa:4f: 0a:4f:1d:2a:5c:aa:90:17:68:0c:20:f2:09:3e:29:b4:ae:98: 6e:46:77:f0:76:58:7d:d0:8b:5c:e6:ac:09:12:44:86:2a:5f: 7f:88:57:c3:1e:74:b3:8e:c6:22:88:78:6f:0b:7c:c0:0e:70: cf:a0:ca:99:f3:28:3d:ed:bd:89:b0:96:16:04:1e:eb:b7:8a: 52:31:14:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9rLyi+0tM+hE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk M2U5YTg2YTQtOGY4ZS00ZWVhLThkZTItZDkwMzM1MDE2NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCEur2/GIy28s1p4+B0sRYUuZwj+kP1k9JIZ T8o5xKSj6xvJZzh0Jv6Mn1znIUSLmo3b6LhsOh05Jmjjwt6aGzEiNc5IU/rAr2tG 1180rbkTN12Eu6//DIn4LfcmQ/1WvvGP02ePs/UZejEKrEMLH2U2wMfsfbrUAtZY UlLWHc6XGnK1aYasid13uqlRVB0xl953HRd1MtoFZTXgyKu+GLKlPICGnzNEcuCF eytmhmox/ET7ynxGUGZFppsm/rtblMBqa/H0xtwNnVRZRpX2oXSbs+v3/W5wMj2w JciEozKS5Oe4YQVV0t1BvD6zCMDMaSMbozIkwJoGGI/cfgex5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGA5lCZWhRJd0JHBNvFfu5UWpMcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTZhYmQ3ZmItNDM5Yi0z ZTljLTk3ODgtMzBjN2U1Nzc2OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9ka8T4aFzjWe8STdLXONBpTCw4g1g8WCZk1jJQqCGb+42XDuQb QC3EblHwW4TeqneoYauGoAaEpcvtzZD91Ngbl0DyiWqjsSoQkRLM7vKxctXXUCz9 U85Aee39MhDkePN5Or1mXkJ9wzS0IsqKK/QjKIL0Vs9eLN3PuJi1zdqGruptnJx0 E/IKUahGrQy5r1bfQPW1E4rAhR6YfJP6YRrKUuJ79vfjHIL9vAGSJG5vycyqTwpP HSpcqpAXaAwg8gk+KbSumG5Gd/B2WH3Qi1zmrAkSRIYqX3+IV8MedLOOxiKIeG8L fMAOcM+gypnzKD3tvYmwlhYEHuu3ilIxFAU= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:34 2025 by rpki-client