$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa File: 3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa (raw, json) Hash identifier: oHdf/m/hDxqOfsI6cU8ZJFX1AX30mdyx1oAJUnKSiF4= Subject key identifier: 20:D6:34:C1:91:2D:B5:41:33:A0:AE:60:9B:0E:F9:84:C3:DF:05:94 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDD89D4B46368205C0EC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 398493 IP address blocks: 2001:470:31d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:dd:89:d4:b4:63:68:20:5c:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=278fadb6-7a1c-49bd-9a41-e952e89d18c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:11:8e:84:39:18:35:0f:7b:fa:23:8c:a4: 53:45:cb:b0:e7:c3:d0:c6:91:53:b9:86:40:00:4f: 7e:af:80:3c:8c:c1:60:64:d6:64:da:2f:5d:7e:38: 23:fd:d6:19:7c:10:8c:30:a0:95:1b:8a:f0:9e:19: 09:60:50:0a:20:fd:6d:7a:06:1b:df:82:c2:1a:e4: 59:9b:df:13:1e:87:b7:04:21:b1:be:31:68:ee:c1: 12:de:5d:a4:ae:de:34:9a:6a:61:b5:ad:2b:b2:33: f3:ee:5e:88:ba:ce:e0:a7:11:1e:50:f9:98:99:85: e7:8d:1c:04:70:97:db:2e:d7:b4:fa:78:53:43:22: dd:25:59:b3:05:db:77:3e:64:1b:18:7d:b1:79:68: 79:69:5d:db:13:c8:e9:de:1d:1b:95:2e:3c:c6:ef: 36:d5:e4:75:64:a1:e2:15:f8:56:34:06:38:f8:c8: 22:b0:ab:6f:c1:03:da:7d:08:9f:b5:46:76:ca:0d: db:21:c5:96:2d:9e:4f:ce:e7:38:b2:1c:e7:5e:e7: 20:07:df:69:e3:ec:52:37:e8:be:90:61:00:a0:76: 22:c9:15:11:51:bb:3f:d7:41:44:14:3a:3b:4d:7f: 85:2c:78:83:09:79:06:26:f6:c3:18:ce:f2:5b:be: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D6:34:C1:91:2D:B5:41:33:A0:AE:60:9B:0E:F9:84:C3:DF:05:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1e:4b:18:ea:55:35:65:16:b4:7e:d3:db:19:b3:2c:fd:52: 6c:d5:6d:45:e0:83:07:d7:ec:91:83:47:a2:39:77:44:5e:7e: 16:12:42:6b:7b:a6:2a:9c:b6:fb:40:fe:8e:8d:a6:99:da:8a: 37:fc:ef:cc:72:a8:6e:43:52:46:9e:db:f6:31:73:9b:e2:87: f0:5c:1b:c1:e2:4a:db:9a:df:41:64:f4:55:94:30:02:fa:b5: 82:de:00:80:6a:a0:83:da:9d:8e:81:dc:f0:73:ba:53:f5:ba: 68:3a:61:8c:ba:a1:7a:12:7e:cc:c5:06:63:33:7c:b4:31:fa: e2:90:03:89:11:60:aa:9f:82:86:eb:1d:60:b1:74:b7:8a:4c: 10:14:17:ee:d0:9c:22:b8:77:a9:17:a9:6d:9b:ce:78:13:88: 33:91:f9:d2:f7:2a:c5:32:64:32:96:1e:c6:f5:3a:d2:c4:dd: f0:24:01:81:b3:73:ec:df:0a:10:ad:59:5c:2f:36:62:d9:25: af:75:02:80:ab:5f:76:63:e4:a7:e6:c6:49:66:e3:fc:8c:a1: cf:52:0c:fa:3d:44:e9:69:32:fc:68:75:e8:b0:5e:f4:bc:86: 14:01:32:28:de:a2:aa:c8:6e:6b:71:65:2e:54:0d:7f:f3:84: 8f:4f:86:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G92J1LRjaCBcDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Mjc4ZmFkYjYtN2ExYy00OWJkLTlhNDEtZTk1MmU4OWQxOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVQRjoQ5GDUPe/ojjKRTRcuw58PQxpFTuYZA AE9+r4A8jMFgZNZk2i9dfjgj/dYZfBCMMKCVG4rwnhkJYFAKIP1tegYb34LCGuRZ m98THoe3BCGxvjFo7sES3l2krt40mmphta0rsjPz7l6Ius7gpxEeUPmYmYXnjRwE cJfbLte0+nhTQyLdJVmzBdt3PmQbGH2xeWh5aV3bE8jp3h0blS48xu821eR1ZKHi FfhWNAY4+MgisKtvwQPafQiftUZ2yg3bIcWWLZ5Pzuc4shznXucgB99p4+xSN+i+ kGEAoHYiyRURUbs/10FEFDo7TX+FLHiDCXkGJvbDGM7yW77v8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCDWNMGRLbVBM6CuYJsO+YTD3wWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2E1ZDQ5YzUtNDllMy0z MWY2LWFhOGMtODdmOWJhMWFkMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKIeSxjqVTVlFrR+09sZsyz9UmzVbUXggwfX7JGDR6I5d0RefhYS Qmt7piqctvtA/o6Nppnaijf878xyqG5DUkae2/Yxc5vih/BcG8HiStua30Fk9FWU MAL6tYLeAIBqoIPanY6B3PBzulP1umg6YYy6oXoSfszFBmMzfLQx+uKQA4kRYKqf gobrHWCxdLeKTBAUF+7QnCK4d6kXqW2bzngTiDOR+dL3KsUyZDKWHsb1OtLE3fAk AYGzc+zfChCtWVwvNmLZJa91AoCrX3Zj5Kfmxklm4/yMoc9SDPo9ROlpMvxodeiw XvS8hhQBMijeoqrIbmtxZS5UDX/zhI9PhiE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:59 2025 by rpki-client