$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2650e286-c11a-3677-93a0-ac74a69fde97.roa File: 2650e286-c11a-3677-93a0-ac74a69fde97.roa (raw, json) Hash identifier: 3vaNPZNqcJUhxG9MlYI3WuRgPBUTLieIA6CRJXZjpes= Subject key identifier: 35:77:EB:AF:86:6C:E0:2F:CE:F6:65:59:3F:C1:C0:30:29:2E:A7:F0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD0E014D62195AC69EF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2650e286-c11a-3677-93a0-ac74a69fde97.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 204818 IP address blocks: 2001:470:213::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d0:e0:14:d6:21:95:ac:69:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=06ff2499-cc62-44d6-b383-7b5962d9541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:8b:76:77:34:29:23:43:18:b2:e3:31:1d: 56:ee:8b:99:31:00:c2:df:11:99:03:3e:2a:5b:95: 84:81:e5:23:3a:d8:b5:a0:66:ec:87:18:b2:41:e5: 29:b7:f8:c7:42:ae:a0:f9:a0:e3:ae:a8:a3:b1:82: 97:67:36:b5:e4:e5:c7:a1:00:2b:a8:a1:b4:5b:a9: 7b:dd:f9:ab:67:d5:70:12:a7:f4:c9:e7:9c:f6:b4: 94:45:91:a8:83:32:5e:38:d4:b7:c4:a9:f2:2c:76: 67:2f:ba:2c:74:a9:b0:ac:23:bb:09:e3:63:c0:ed: 2c:af:04:c0:77:94:68:9e:e3:ef:0a:17:3e:95:9e: fb:47:7f:39:42:1a:98:48:ee:52:78:9c:b3:3e:3c: cc:68:54:78:fc:95:c5:72:c8:e7:cd:9a:3c:e2:11: a4:80:00:49:79:30:dc:1d:c8:2c:21:72:a5:e8:e8: 2d:6d:ab:91:53:9a:fb:6b:e6:e0:d7:3e:8f:46:96: d8:f1:af:e3:06:fc:61:69:e1:ca:62:d9:82:66:7e: f8:54:78:5b:d3:64:20:6e:36:2d:a9:56:af:a3:d5: 9b:fd:07:fb:7b:5b:f6:25:74:a5:b2:06:51:e8:3e: be:95:c9:40:2a:45:cd:88:35:7e:71:db:7a:d9:1c: cf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:77:EB:AF:86:6C:E0:2F:CE:F6:65:59:3F:C1:C0:30:29:2E:A7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2650e286-c11a-3677-93a0-ac74a69fde97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:213::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b4:45:0f:81:dd:b0:79:c3:2d:ca:4e:85:75:09:f8:aa:03: 3c:cc:13:41:a4:64:15:85:cd:ac:5f:61:fa:83:df:98:96:8d: 75:dc:be:56:58:5c:0e:3d:b8:ad:e9:74:da:7d:6b:64:2f:2d: 54:0b:b1:c9:11:6f:fa:63:fd:8a:1f:21:48:50:e3:23:16:44: c5:9a:d6:53:e4:00:43:5c:a7:d0:7f:14:26:e3:b6:f4:26:00: 71:48:39:37:2e:bd:a1:33:c8:7b:84:18:34:41:d7:f3:9f:c6: aa:aa:a5:73:93:32:5a:cc:43:a5:fd:35:94:05:c2:08:70:bd: c8:dd:15:9d:7a:d0:61:06:8c:73:9f:40:a9:40:99:3f:b5:0d: 1c:8c:73:4d:33:4e:01:f8:68:02:e6:ce:0f:e9:c7:fe:6a:16: cb:e6:85:ea:93:12:56:2f:d1:57:6a:df:25:16:66:5f:87:a5: ea:cd:6d:1f:d5:2e:2b:e6:6d:8b:a4:23:d3:a8:8f:57:6f:d5: 71:3c:ef:46:ef:80:16:9e:f7:12:10:9f:d1:c3:2d:45:ba:13: 80:b6:fc:54:dc:b5:ce:9f:21:14:f9:d2:01:a7:a6:7e:7d:b4: a9:99:d7:fa:31:16:da:32:43:8e:76:27:df:a6:16:9f:c3:0e: 78:7a:81:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9DgFNYhlaxp7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDZmZjI0OTktY2M2Mi00NGQ2LWIzODMtN2I1OTYyZDk1NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP6Ldnc0KSNDGLLjMR1W7ouZMQDC3xGZAz4q W5WEgeUjOti1oGbshxiyQeUpt/jHQq6g+aDjrqijsYKXZza15OXHoQArqKG0W6l7 3fmrZ9VwEqf0yeec9rSURZGogzJeONS3xKnyLHZnL7osdKmwrCO7CeNjwO0srwTA d5RonuPvChc+lZ77R385QhqYSO5SeJyzPjzMaFR4/JXFcsjnzZo84hGkgABJeTDc HcgsIXKl6OgtbauRU5r7a+bg1z6PRpbY8a/jBvxhaeHKYtmCZn74VHhb02QgbjYt qVavo9Wb/Qf7e1v2JXSlsgZR6D6+lclAKkXNiDV+cdt62RzP3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDV366+GbOAvzvZlWT/BwDApLqfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjY1MGUyODYtYzExYS0z Njc3LTkzYTAtYWM3NGE2OWZkZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADC0RQ+B3bB5wy3KToV1CfiqAzzME0GkZBWFzaxfYfqD35iWjXXc vlZYXA49uK3pdNp9a2QvLVQLsckRb/pj/YofIUhQ4yMWRMWa1lPkAENcp9B/FCbj tvQmAHFIOTcuvaEzyHuEGDRB1/OfxqqqpXOTMlrMQ6X9NZQFwghwvcjdFZ160GEG jHOfQKlAmT+1DRyMc00zTgH4aALmzg/px/5qFsvmheqTElYv0Vdq3yUWZl+HperN bR/VLivmbYukI9Ooj1dv1XE870bvgBae9xIQn9HDLUW6E4C2/FTctc6fIRT50gGn pn59tKmZ1/oxFtoyQ452J9+mFp/DDnh6gT4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:36 2025 by rpki-client