$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa File: 1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa (raw, json) Hash identifier: N+9TUKzgoZE4yywqkEP37jGhJxMPxCj4D1aGwmqW2qY= Subject key identifier: 09:83:6A:A2:4E:41:DD:B1:D8:56:D6:16:86:76:E8:7B:8E:CF:25:0E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF8AAAE4017E6E61892C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 21805 IP address blocks: 2001:470:20c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f8:aa:ae:40:17:e6:e6:18:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=90f6c912-4ae1-492b-bd75-9fd05441a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:5b:a3:9e:15:12:fe:54:ec:7d:c4:7e:5f: e5:97:9a:4c:e3:a1:c6:f4:83:90:9f:f0:33:53:14: b9:e9:1c:9b:69:cb:ac:46:ef:3d:c8:0c:9c:5a:64: d8:4c:eb:08:9b:9a:3d:de:8e:02:3d:d8:90:44:38: 30:ee:0b:94:5a:ea:87:96:0d:f3:84:83:2e:7e:e5: ce:d4:72:10:df:a8:92:6b:ee:eb:0c:1a:05:ce:5e: 91:ca:2d:18:3e:8f:02:2d:47:2a:b4:c8:35:50:e3: 12:7f:b8:a7:92:9f:ac:55:05:46:4b:51:e1:f0:f4: a9:04:dd:d3:c9:48:e4:8b:c2:2c:35:2b:25:fd:0a: f6:c6:3a:25:34:97:63:57:b5:a6:c4:fd:1b:22:c0: 5d:d0:a5:c4:d7:ec:38:ba:c1:be:71:ba:57:12:99: e2:b3:8e:9c:46:9c:72:2b:cf:5c:b2:46:c8:83:e3: 13:13:1a:e3:c0:32:c8:a4:3f:12:d9:c9:b9:9f:46: 80:1c:38:5f:9b:25:54:6a:0b:03:8e:bd:f7:23:da: 73:1c:6f:ad:24:c9:ec:c8:be:a2:ce:40:2f:cf:13: 9d:d6:19:27:2b:a1:68:f2:c2:e9:13:0d:9d:60:f8: c9:d5:a2:e8:39:9b:51:4e:ab:dc:b2:28:c4:b7:71: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:6A:A2:4E:41:DD:B1:D8:56:D6:16:86:76:E8:7B:8E:CF:25:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f77b53a-4236-3f0b-a07b-0ab0bf5b57ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:20c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6f:bb:b0:fe:ee:e2:32:64:37:54:ad:42:bb:a3:18:f4:e0: ba:84:a1:a1:1e:1e:f8:0d:8c:00:cd:91:23:b5:74:f1:0c:3a: 05:78:43:53:01:ff:08:43:81:f4:fb:26:ff:45:28:dd:86:b8: b2:84:3d:e1:4e:79:8c:3e:8a:81:4e:f3:a2:8a:17:c7:43:21: 03:4a:22:7a:01:fb:b0:f5:ab:e5:1e:6a:14:24:67:ce:fc:bb: 6c:f5:9b:63:2d:db:58:32:2f:2b:4e:06:6d:db:8a:78:92:ff: 1c:6d:3e:0b:e5:83:72:6b:37:c9:55:cb:f1:74:13:18:aa:3f: 5a:63:e2:7d:68:cb:8c:35:85:63:35:34:a8:a8:b7:17:50:26: 0a:86:b8:77:f9:86:6a:ba:29:b0:6d:60:81:53:76:d9:58:6d: 33:3a:0d:cb:2a:9a:b2:23:a4:71:5e:64:ec:06:f8:86:77:e7: fc:86:dc:ee:b8:1b:18:74:6c:c2:6a:5d:4e:c3:73:2e:2f:c9: b8:ef:22:81:7a:7b:2f:25:18:8f:6c:22:bf:e9:10:80:92:05: b9:cc:d3:13:5e:f8:a9:83:f3:b0:4c:eb:4c:cd:1c:a8:64:cd: 09:06:7d:38:2c:13:60:15:3d:e5:16:a7:d0:16:b2:1b:01:c9: 11:d3:b6:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/iqrkAX5uYYksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTBmNmM5MTItNGFlMS00OTJiLWJkNzUtOWZkMDU0NDFhNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8tbo54VEv5U7H3Efl/ll5pM46HG9IOQn/Az UxS56RybacusRu89yAycWmTYTOsIm5o93o4CPdiQRDgw7guUWuqHlg3zhIMufuXO 1HIQ36iSa+7rDBoFzl6Ryi0YPo8CLUcqtMg1UOMSf7inkp+sVQVGS1Hh8PSpBN3T yUjki8IsNSsl/Qr2xjolNJdjV7WmxP0bIsBd0KXE1+w4usG+cbpXEpnis46cRpxy K89cskbIg+MTExrjwDLIpD8S2cm5n0aAHDhfmyVUagsDjr33I9pzHG+tJMnsyL6i zkAvzxOd1hknK6Fo8sLpEw2dYPjJ1aLoOZtRTqvcsijEt3G1bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmDaqJOQd2x2FbWFoZ26HuOzyUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY3N2I1M2EtNDIzNi0z ZjBiLWEwN2ItMGFiMGJmNWI1N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhvu7D+7uIyZDdUrUK7oxj04LqEoaEeHvgNjADNkSO1dPEMOgV4 Q1MB/whDgfT7Jv9FKN2GuLKEPeFOeYw+ioFO86KKF8dDIQNKInoB+7D1q+UeahQk Z878u2z1m2Mt21gyLytOBm3biniS/xxtPgvlg3JrN8lVy/F0ExiqP1pj4n1oy4w1 hWM1NKiotxdQJgqGuHf5hmq6KbBtYIFTdtlYbTM6DcsqmrIjpHFeZOwG+IZ35/yG 3O64Gxh0bMJqXU7Dcy4vybjvIoF6ey8lGI9sIr/pEICSBbnM0xNe+KmD87BM60zN HKhkzQkGfTgsE2AVPeUWp9AWshsByRHTtmE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:33 2025 by rpki-client