$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa File: 2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa (raw, json) Hash identifier: 8rwT0pSy2O8N7h+5w4Sjh5MS2qjDgQPOw9T+0JZCfog= Subject key identifier: D5:76:7C:91:90:D3:38:C2:31:2F:90:D1:E1:C0:ED:C0:FF:A1:49:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC1F1B955230A16800500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 53813 IP address blocks: 2001:470:8e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c1:f1:b9:55:23:0a:16:80:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b61f92a1-e942-4b3a-bf6d-55416aedf022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:d8:61:07:84:2b:53:f8:2c:49:46:76:bf: 1a:61:83:96:1a:2f:f2:a1:3e:9e:37:d5:ec:54:26: 7c:a2:25:6c:61:ec:bc:ec:62:9e:19:08:68:4d:12: 27:9c:c2:25:fb:33:5e:7a:8b:c8:eb:3c:6f:bc:d3: 5d:24:ae:95:a5:d9:40:c1:0b:06:89:04:14:b7:75: 60:27:7a:dd:98:65:57:a7:36:17:cf:b6:f8:ce:df: 0c:9f:6f:09:6d:0b:dc:ed:05:2d:04:6b:3d:e1:54: cf:dd:30:8c:ec:3d:9e:6f:74:80:34:1e:4d:c9:18: c3:91:08:0a:26:26:03:c8:33:8b:fa:d3:b9:bc:99: 94:42:b4:24:66:d1:07:ca:35:3c:56:2c:98:4f:0b: 18:5e:18:f6:d0:08:ae:4a:5a:30:f4:27:c5:2d:ea: 25:3f:ea:ea:e0:8e:04:cd:1a:1f:53:7a:40:2e:44: af:66:36:04:ef:de:34:40:df:e6:73:ec:b7:24:34: d1:96:6b:2f:7a:31:2e:f9:f7:95:56:0d:6c:d7:a6: c1:e6:bc:fb:90:6c:f8:0f:7a:fa:9b:c9:02:20:30: c0:a6:b2:09:50:57:b9:86:bd:a6:24:a7:89:f8:71: 49:b6:5d:3a:22:0a:68:63:c3:8f:f5:71:06:e7:07: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:76:7C:91:90:D3:38:C2:31:2F:90:D1:E1:C0:ED:C0:FF:A1:49:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:26:58:af:aa:36:ba:66:8f:89:31:5f:4b:46:79:29:22:8b: 31:12:bb:4a:68:1a:24:1c:c0:e6:38:82:d6:ac:11:f9:19:29: ba:1f:19:d7:71:03:a1:55:e2:71:1d:f9:c8:4b:b6:3f:48:aa: 3f:db:bb:f2:87:d7:f5:37:fa:15:e2:90:f2:f4:9c:5a:25:48: 1d:2b:fe:81:fd:4b:a5:1b:ec:f8:06:4a:cf:75:38:7e:38:ae: 6e:45:5d:0d:3b:42:dc:89:04:e9:b5:27:3c:ff:82:60:33:48: 75:de:88:46:ca:77:79:d0:dd:6d:a0:e4:07:0a:7d:d0:d8:26: e2:89:c3:11:11:53:11:48:5c:58:61:84:1d:cd:05:6f:fe:be: f8:f4:80:3f:5f:c3:fa:68:80:0e:d6:f3:cb:37:a9:9e:79:fd: f2:8f:45:26:c3:3e:27:42:24:d7:92:a9:3e:68:96:bb:9d:8e: f9:3e:14:9d:ce:29:f3:91:18:98:16:77:be:db:f9:5d:0e:97: 6b:1e:35:83:8e:a7:45:c7:61:da:b5:31:91:76:5f:52:04:f7: 13:06:42:71:19:a8:26:9f:fc:e5:ec:f1:d6:3a:5b:e4:36:08: 5f:27:2c:57:c7:6d:e2:96:1a:8a:22:7b:59:35:7f:64:fa:a0: 11:f2:b7:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8HxuVUjChaABQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjYxZjkyYTEtZTk0Mi00YjNhLWJmNmQtNTU0MTZhZWRmMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDPYYQeEK1P4LElGdr8aYYOWGi/yoT6eN9Xs VCZ8oiVsYey87GKeGQhoTRInnMIl+zNeeovI6zxvvNNdJK6VpdlAwQsGiQQUt3Vg J3rdmGVXpzYXz7b4zt8Mn28JbQvc7QUtBGs94VTP3TCM7D2eb3SANB5NyRjDkQgK JiYDyDOL+tO5vJmUQrQkZtEHyjU8ViyYTwsYXhj20AiuSlow9CfFLeolP+rq4I4E zRofU3pALkSvZjYE7940QN/mc+y3JDTRlmsvejEu+feVVg1s16bB5rz7kGz4D3r6 m8kCIDDAprIJUFe5hr2mJKeJ+HFJtl06IgpoY8OP9XEG5wdxDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNV2fJGQ0zjCMS+Q0eHA7cD/oUlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MGNlN2ItMzk0MS0z ZTNkLTk4ZjEtMmU4YmJjN2ZlMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYmWK+qNrpmj4kxX0tGeSkiizESu0poGiQcwOY4gtasEfkZKbof GddxA6FV4nEd+chLtj9Iqj/bu/KH1/U3+hXikPL0nFolSB0r/oH9S6Ub7PgGSs91 OH44rm5FXQ07QtyJBOm1Jzz/gmAzSHXeiEbKd3nQ3W2g5AcKfdDYJuKJwxERUxFI XFhhhB3NBW/+vvj0gD9fw/pogA7W88s3qZ55/fKPRSbDPidCJNeSqT5olrudjvk+ FJ3OKfORGJgWd77b+V0Ol2seNYOOp0XHYdq1MZF2X1IE9xMGQnEZqCaf/OXs8dY6 W+Q2CF8nLFfHbeKWGooie1k1f2T6oBHyt8A= -----END CERTIFICATE-----Generated at Mon Aug 4 07:53:41 2025 by rpki-client