$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa File: 28722eea-4e6d-30fa-8919-b232b78092f2.roa (raw, json) Hash identifier: auO+f9iabywS773cRjvwaLiytxuBCqBlrmY5ozW3InM= Subject key identifier: 28:6A:7A:2B:C9:4C:A2:06:05:CA:0A:66:C5:C9:D4:11:18:A7:94:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BBF6FD6F5C9952B994AE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 393552 IP address blocks: 2001:470:d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:bf:6f:d6:f5:c9:95:2b:99:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=74eaf7fd-fa00-4432-8e99-cf092848a4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ac:b2:70:9a:27:44:26:3d:e2:19:a7:20:e8: a8:b7:6c:6e:c8:76:66:24:7c:dc:75:af:59:74:a8: fb:4f:99:99:28:0d:88:91:f1:fb:99:03:85:f5:5b: 25:e8:3e:23:1b:e2:d8:df:d0:ef:0a:f4:14:3e:0a: ec:4a:fb:19:9e:83:b4:10:59:3b:86:17:32:0a:2b: 15:6f:a9:fa:ca:6f:7c:b5:00:18:9d:a7:0f:e6:0b: 42:d1:73:5d:21:dc:54:86:a5:5b:04:d9:1f:10:ee: 1d:86:82:92:f4:2a:2c:14:b8:99:04:14:3b:90:99: 7c:f7:9d:85:45:2b:c3:c4:c0:bc:3c:ef:07:6a:cb: 31:ec:f9:a2:88:20:d8:7d:a5:fe:b7:86:16:fe:cb: 26:79:f1:61:e8:1d:19:a3:92:56:ce:c8:b8:c8:ad: 0b:74:42:e1:53:d1:e8:a3:2f:de:6a:1a:c8:31:c7: 05:3c:ab:0e:12:5c:41:46:52:c3:ec:f3:50:5e:db: 0d:9b:d8:b8:b2:49:13:70:7a:86:13:c4:91:58:18: c7:51:69:df:3e:49:30:bb:f9:a5:d5:47:5a:e1:7d: 3a:ce:d2:fe:96:90:75:a4:22:43:c4:a4:b8:5e:47: d0:28:49:15:6e:7d:69:a3:38:36:9e:33:41:3f:ae: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6A:7A:2B:C9:4C:A2:06:05:CA:0A:66:C5:C9:D4:11:18:A7:94:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3d:ef:dd:b1:b8:be:3d:1e:15:f3:7e:0b:71:cc:0d:4d:ba: 6a:76:68:ed:62:fb:1a:65:4d:9b:39:57:a1:1e:3d:d6:4f:6f: 56:71:a7:77:0d:e0:c1:62:26:e0:f1:75:b2:b1:99:1f:5b:57: 8c:c4:83:44:32:ed:31:2b:05:7a:2c:ae:65:62:d4:0b:43:d5: e4:96:fe:0f:89:4b:af:85:9d:cb:2d:ee:ba:5f:ce:dc:8f:c9: 96:b7:ee:17:6b:80:a1:c5:35:14:aa:00:65:6f:e2:e8:0b:1f: f1:b0:cc:26:a6:e7:d6:7a:3b:2a:72:3f:bf:aa:c7:32:ef:53: 09:12:89:e4:d4:ac:87:96:9e:53:f8:e2:83:5f:d9:61:68:81: 80:f1:b3:65:0b:3b:d3:2c:f9:52:6b:55:11:fe:0d:e8:04:bd: ab:a1:d1:7e:ad:70:11:c3:2e:93:fd:36:94:cd:16:2f:ad:0c: ca:e5:9c:8f:bc:4d:c2:c2:a3:bd:af:f9:21:b4:7a:80:13:74: c0:bb:38:97:03:a6:4e:ba:fe:05:68:cc:0e:b3:a4:bd:33:26: fa:dc:e2:0c:35:55:54:8a:f2:1a:ff:bc:1c:02:48:1f:7b:b9: 3d:0d:31:89:e6:a9:48:f5:21:b9:f0:d7:f8:37:94:f7:64:94: 2c:16:78:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G79v1vXJlSuZSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzRlYWY3ZmQtZmEwMC00NDMyLThlOTktY2YwOTI4NDhhNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ayycJonRCY94hmnIOiot2xuyHZmJHzcda9Z dKj7T5mZKA2IkfH7mQOF9Vsl6D4jG+LY39DvCvQUPgrsSvsZnoO0EFk7hhcyCisV b6n6ym98tQAYnacP5gtC0XNdIdxUhqVbBNkfEO4dhoKS9CosFLiZBBQ7kJl8952F RSvDxMC8PO8Hassx7PmiiCDYfaX+t4YW/ssmefFh6B0Zo5JWzsi4yK0LdELhU9Ho oy/eahrIMccFPKsOElxBRlLD7PNQXtsNm9i4skkTcHqGE8SRWBjHUWnfPkkwu/ml 1Uda4X06ztL+lpB1pCJDxKS4XkfQKEkVbn1pozg2njNBP64MsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChqeivJTKIGBcoKZsXJ1BEYp5RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MjJlZWEtNGU2ZC0z MGZhLTg5MTktYjIzMmI3ODA5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGs9792xuL49HhXzfgtxzA1Nump2aO1i+xplTZs5V6EePdZPb1Zx p3cN4MFiJuDxdbKxmR9bV4zEg0Qy7TErBXosrmVi1AtD1eSW/g+JS6+Fncst7rpf ztyPyZa37hdrgKHFNRSqAGVv4ugLH/GwzCam59Z6OypyP7+qxzLvUwkSieTUrIeW nlP44oNf2WFogYDxs2ULO9Ms+VJrVRH+DegEvauh0X6tcBHDLpP9NpTNFi+tDMrl nI+8TcLCo72v+SG0eoATdMC7OJcDpk66/gVozA6zpL0zJvrc4gw1VVSK8hr/vBwC SB97uT0NMYnmqUj1Ibnw1/g3lPdklCwWeEs= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:10 2025 by rpki-client