$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa File: 21b3acb0-357c-3d95-928b-9d0c6629e02b.roa (raw, json) Hash identifier: mtaGnNc6EXKlm5fuEdg0ZDJbDQUarV0yQHdd0D+Gsas= Subject key identifier: A3:DE:3C:6C:7E:62:0C:19:BB:33:CE:9D:6E:AE:BB:B9:B5:0A:EC:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDBE40EA0CC683A83ADA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 23252 IP address blocks: 2001:470:2fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:db:e4:0e:a0:cc:68:3a:83:ad:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=858f0869-8776-4a00-95f2-69747ff4fbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:56:8b:1e:b4:7d:d5:7f:fa:53:cc:35:ff: 00:8e:2f:0c:2d:9f:08:de:e2:cc:1d:02:8f:e2:9e: a3:67:97:c2:e3:7e:1a:fd:bd:cc:57:ca:b9:4b:ce: 89:dc:bc:6a:ae:39:78:4d:84:e8:4b:ae:cd:87:15: 77:d0:94:4b:b2:a3:82:48:b9:5e:60:d9:c7:ef:0c: 76:d0:7d:a4:dd:ed:5a:90:29:b8:51:16:f4:c7:75: 91:f0:95:bf:c6:97:5f:28:c5:ac:27:e2:d3:48:a1: b6:7b:3d:ee:d1:cc:51:3b:6c:25:d9:22:f6:0c:17: fa:a5:d2:17:d1:bc:e6:b1:a4:6d:e6:b9:24:d9:50: 59:30:e7:ef:f1:c3:bd:a2:58:7d:0f:3c:f6:47:96: e2:61:27:6e:20:2e:88:17:31:09:85:51:bf:8f:45: 64:7b:3f:c0:a0:a1:eb:61:dc:84:7b:8f:cb:b7:ad: 23:4d:32:bf:f6:8e:79:31:e5:02:5e:5a:88:7e:6b: f3:d1:ff:5a:a6:90:11:36:42:49:b9:5e:7d:65:cd: 18:d3:9e:ee:16:8c:43:21:3b:78:e9:65:00:e2:6e: 83:4f:46:2c:06:e2:fa:8c:45:8c:62:f4:3e:52:88: 07:23:b0:a0:1d:cc:55:7a:4f:48:50:be:32:25:c0: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:3C:6C:7E:62:0C:19:BB:33:CE:9D:6E:AE:BB:B9:B5:0A:EC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2e:38:6b:e1:8c:79:11:2f:88:c2:db:37:6a:6f:7c:4b:54: e1:f4:a7:cb:d0:61:8f:af:6b:de:d2:64:04:f0:d1:00:58:ce: dd:4c:ed:3f:7a:ca:f3:3d:9f:ae:b6:e1:7f:b2:67:f8:4c:f1: c5:42:9d:a1:d8:e3:e5:13:3d:8e:b7:80:1a:4f:75:e9:f3:28: a0:f5:c4:25:97:5d:77:e7:14:80:9e:ff:bd:d8:6e:29:2a:90: a2:68:3e:d6:ec:0c:b6:8e:02:83:a5:3f:93:f2:da:43:b4:f6: 8c:c5:c8:45:64:38:d6:8f:4e:3e:c4:b4:f8:4d:ba:41:cf:d6: ef:5d:b1:5a:e0:3b:9a:03:c2:8d:8e:32:33:01:c7:39:e1:09: 59:e0:32:eb:48:89:a3:e4:4f:2b:60:d8:42:9f:7b:2b:38:3b: 5b:9d:b5:ca:aa:e0:c1:4e:72:3b:bd:de:2f:9c:38:9c:d4:18: 86:92:66:d6:00:ba:3d:a1:3e:9b:f6:51:86:ab:e3:ae:1a:88: b1:c0:bd:c2:2b:11:1b:25:7b:fa:d4:15:9f:2a:bc:2d:53:1c: 0b:71:4a:eb:69:08:2e:58:29:85:a6:3c:40:66:49:a2:b6:c2: f9:ac:18:8c:46:89:95:00:86:4d:49:58:17:8c:b4:2a:97:6f: 4b:ed:f7:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9vkDqDMaDqDraAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODU4ZjA4NjktODc3Ni00YTAwLTk1ZjItNjk3NDdmZjRmYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0lWix60fdV/+lPMNf8Aji8MLZ8I3uLMHQKP 4p6jZ5fC434a/b3MV8q5S86J3Lxqrjl4TYToS67NhxV30JRLsqOCSLleYNnH7wx2 0H2k3e1akCm4URb0x3WR8JW/xpdfKMWsJ+LTSKG2ez3u0cxRO2wl2SL2DBf6pdIX 0bzmsaRt5rkk2VBZMOfv8cO9olh9Dzz2R5biYSduIC6IFzEJhVG/j0Vkez/AoKHr YdyEe4/Lt60jTTK/9o55MeUCXlqIfmvz0f9appARNkJJuV59Zc0Y057uFoxDITt4 6WUA4m6DT0YsBuL6jEWMYvQ+UogHI7CgHcxVek9IUL4yJcDOEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPePGx+YgwZuzPOnW6uu7m1CuwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFiM2FjYjAtMzU3Yy0z ZDk1LTkyOGItOWQwYzY2MjllMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJkuOGvhjHkRL4jC2zdqb3xLVOH0p8vQYY+va97SZATw0QBYzt1M 7T96yvM9n6624X+yZ/hM8cVCnaHY4+UTPY63gBpPdenzKKD1xCWXXXfnFICe/73Y bikqkKJoPtbsDLaOAoOlP5Py2kO09ozFyEVkONaPTj7EtPhNukHP1u9dsVrgO5oD wo2OMjMBxznhCVngMutIiaPkTytg2EKfeys4O1udtcqq4MFOcju93i+cOJzUGIaS ZtYAuj2hPpv2UYar464aiLHAvcIrERsle/rUFZ8qvC1THAtxSutpCC5YKYWmPEBm SaK2wvmsGIxGiZUAhk1JWBeMtCqXb0vt97g= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:17 2025 by rpki-client