$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa File: 2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa (raw, json) Hash identifier: CK6RZAaaMBDKAcjGdiXtUUFTiVecWIZjepizioqhCY4= Subject key identifier: FD:DB:B4:0F:CD:9F:49:F8:4E:AE:C7:F3:C1:CD:34:E9:55:03:A0:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD15A920E58D4B2F66200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 35688 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d1:5a:92:0e:58:d4:b2:f6:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=daa0b8ea-9dc3-4503-aafd-5c2f8fd8712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:5b:13:43:8e:fe:27:46:65:83:96:3a:62: 60:f9:4a:ab:c4:6d:28:1e:0f:26:29:51:ae:eb:ce: 38:56:19:49:9b:06:27:11:44:33:33:33:20:44:5a: 2d:f1:0d:65:84:da:37:4d:cf:1a:66:91:f7:1f:f6: 40:dd:31:d2:e4:dc:5f:a2:60:d8:9a:70:56:dd:01: 67:4a:81:7d:0a:7b:7a:dd:b4:6c:c5:89:55:d2:7a: 58:0e:73:ee:33:72:af:34:10:5b:80:c4:e0:18:8f: f6:8a:8b:8c:82:a3:5b:b0:e9:49:10:62:56:fd:6f: b3:5a:43:59:72:64:9e:44:16:26:1a:94:75:e9:b2: e7:1b:16:00:02:97:71:97:66:bc:68:15:11:39:8e: 39:ed:1e:72:53:5c:2c:29:3b:9d:11:28:42:f8:88: cd:25:8c:c2:89:1a:36:2a:4b:6d:25:46:ef:4e:f0: 9e:45:6d:ca:0b:c0:65:b6:c2:ba:fa:a8:b3:c9:0c: 5f:e7:f4:c4:90:41:14:f4:25:bc:90:22:be:57:91: 2f:37:84:07:da:6c:d7:0b:1a:ac:a7:28:cf:43:d1: 40:f3:0d:aa:d1:36:94:33:95:6a:4b:56:8c:c1:3a: ed:77:9a:87:8d:40:99:ab:94:6d:b3:e7:32:6a:79: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DB:B4:0F:CD:9F:49:F8:4E:AE:C7:F3:C1:CD:34:E9:55:03:A0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e4ad6a9-0daf-38d1-93f3-ebdf6b6f85e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:51:65:50:89:fe:62:e7:5c:9e:52:f8:34:6e:16:27:1f:06: d8:94:72:11:30:28:b1:41:04:63:c7:0f:29:ee:46:c3:d5:8d: 69:61:47:4b:c1:37:34:d0:71:3d:92:06:02:6b:34:8b:c0:f4: 07:68:65:15:48:96:2e:99:02:33:01:94:c8:fa:37:c8:4f:b6: 01:93:4e:a0:95:c6:bf:4c:5b:5f:76:eb:98:7f:ce:bb:a8:35: 26:cb:77:f4:4b:ab:8a:46:90:cf:8f:23:1f:6f:c8:3b:aa:29: cf:43:f1:7a:05:a8:3e:41:75:9d:4b:cc:68:f3:ea:12:ca:b1: 34:81:f7:66:7b:9d:fb:43:80:9c:04:87:8f:46:66:3e:f8:2a: 42:51:4f:69:68:62:5f:e5:f6:36:b4:c9:01:41:82:f0:9e:98: c3:25:69:54:3b:75:a4:b7:3e:23:57:2b:a3:db:6d:cd:9a:b8: 40:8f:04:21:e6:20:9d:0b:e9:32:f4:8e:a8:d0:81:3c:45:aa: 4d:8c:83:99:77:83:c6:23:9c:0f:da:e9:28:61:fb:78:85:48: 3c:22:bb:22:e4:b7:10:57:89:96:a7:59:dc:e0:f2:ce:5b:aa: 7d:e9:58:d7:01:bf:3e:08:6c:5d:d0:c6:b7:8e:b7:ce:2c:dd: fd:f2:97:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9Fakg5Y1LL2YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGFhMGI4ZWEtOWRjMy00NTAzLWFhZmQtNWMyZjhmZDg3MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fBbE0OO/idGZYOWOmJg+UqrxG0oHg8mKVGu 6844VhlJmwYnEUQzMzMgRFot8Q1lhNo3Tc8aZpH3H/ZA3THS5NxfomDYmnBW3QFn SoF9Cnt63bRsxYlV0npYDnPuM3KvNBBbgMTgGI/2iouMgqNbsOlJEGJW/W+zWkNZ cmSeRBYmGpR16bLnGxYAApdxl2a8aBUROY457R5yU1wsKTudEShC+IjNJYzCiRo2 KkttJUbvTvCeRW3KC8BltsK6+qizyQxf5/TEkEEU9CW8kCK+V5EvN4QH2mzXCxqs pyjPQ9FA8w2q0TaUM5VqS1aMwTrtd5qHjUCZq5Rts+cyanmsoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3btA/Nn0n4Tq7H88HNNOlVA6DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmU0YWQ2YTktMGRhZi0z OGQxLTkzZjMtZWJkZjZiNmY4NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpRZVCJ/mLnXJ5S+DRuFicfBtiUchEwKLFBBGPHDynuRsPVjWlh R0vBNzTQcT2SBgJrNIvA9AdoZRVIli6ZAjMBlMj6N8hPtgGTTqCVxr9MW19265h/ zruoNSbLd/RLq4pGkM+PIx9vyDuqKc9D8XoFqD5BdZ1LzGjz6hLKsTSB92Z7nftD gJwEh49GZj74KkJRT2loYl/l9ja0yQFBgvCemMMlaVQ7daS3PiNXK6Pbbc2auECP BCHmIJ0L6TL0jqjQgTxFqk2Mg5l3g8YjnA/a6Shh+3iFSDwiuyLktxBXiZanWdzg 8s5bqn3pWNcBvz4IbF3QxreOt84s3f3yl8I= -----END CERTIFICATE-----Generated at Mon Aug 4 07:42:26 2025 by rpki-client