$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa File: 3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa (raw, json) Hash identifier: 0bmnGHRZgh0+LxT+5EOe6ILVaxO56Rug0UjVfGLmOs0= Subject key identifier: 16:BA:7A:3E:87:3F:FE:DB:03:2F:7C:0E:16:41:4E:36:D6:07:00:DC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDADD2532648787F6C300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 21854 IP address blocks: 2001:470:24c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:da:dd:25:32:64:87:87:f6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f10562dd-2d15-40d7-85ef-30a338d641af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:b8:c4:ec:3a:35:b5:a6:b5:a0:d3:a7:d9: 27:dd:e1:d1:1d:2d:68:56:59:3f:32:19:b1:74:2c: ef:40:21:90:53:ed:2f:48:43:db:87:a6:8a:51:6d: f3:03:c8:2c:21:9e:7f:4b:70:9b:5a:55:9c:35:63: ae:d9:8b:0d:62:9f:13:60:44:92:85:57:92:57:30: 6f:7b:2c:cc:c5:33:6f:e7:32:63:71:16:bf:e2:2d: 53:4e:31:cb:2e:dd:e3:f1:13:e5:88:f3:cd:04:a7: 65:76:43:97:9d:4e:cd:1e:1e:6f:01:a3:ab:2a:5d: b2:94:93:5c:00:7f:1e:5a:99:3d:9c:97:91:87:59: 90:a9:72:7c:28:3c:f7:0e:ba:e6:94:15:a3:ce:fd: 4e:a4:96:59:72:da:e1:75:f7:fb:dc:5f:2c:dc:a7: c6:f5:b0:a7:18:bc:43:18:5c:b2:74:70:d1:69:d6: 11:a8:fc:8b:b9:82:af:29:89:09:d6:5f:e3:70:cc: af:0d:1f:b2:e0:0e:c2:c0:ea:07:17:55:4c:e8:82: 29:62:ab:60:0c:8f:a8:3f:06:98:31:21:8e:f9:49: d1:19:aa:ce:6f:7e:f3:a1:9d:5f:96:9a:26:45:40: 03:f5:6e:a2:7e:e2:04:2a:1b:16:79:75:87:0d:cd: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:7A:3E:87:3F:FE:DB:03:2F:7C:0E:16:41:4E:36:D6:07:00:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:24c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5f:04:00:51:9e:05:63:5b:22:0c:62:fa:2b:47:05:dc:ef: f6:a2:3c:b7:65:e1:8a:76:6e:5f:7e:c6:44:f2:52:79:d8:10: 70:85:ba:f8:1e:63:72:ce:c2:89:42:c0:52:97:66:e8:25:b5: 2e:c8:85:35:88:2a:57:7d:27:e4:15:c8:72:f0:60:63:05:97: d7:b7:b6:6e:9e:3f:0b:53:a9:0f:18:5a:77:5e:5c:1c:3b:fc: 8c:d5:81:ca:f8:34:39:d9:64:5e:bf:c1:79:95:d1:c9:45:71: 73:94:ae:de:94:ab:7f:d2:96:3e:27:9d:b1:c2:b1:4a:f3:89: f9:a3:d1:84:08:ac:d5:38:44:d8:02:98:43:a0:9b:b1:55:7e: 37:ab:cb:37:9e:5e:fc:35:59:b5:bc:98:21:16:77:3f:dd:a1: a0:3e:81:64:b5:52:e0:ea:69:d4:a0:d2:b7:a9:f1:68:7b:f9: e7:ef:4c:99:e8:68:8b:2f:c8:90:55:25:42:e5:58:d8:0d:ba: 0e:80:c9:59:18:60:09:28:31:cb:8d:3e:db:39:02:c9:62:31: 39:4f:88:3c:95:e6:46:54:59:99:f8:ec:55:b0:e8:e3:19:06: 10:01:28:f3:3a:fa:98:f5:e8:d2:4d:c0:67:e4:7c:37:f8:5a: b4:32:51:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9rdJTJkh4f2wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjEwNTYyZGQtMmQxNS00MGQ3LTg1ZWYtMzBhMzM4ZDY0MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna64xOw6NbWmtaDTp9kn3eHRHS1oVlk/Mhmx dCzvQCGQU+0vSEPbh6aKUW3zA8gsIZ5/S3CbWlWcNWOu2YsNYp8TYESShVeSVzBv eyzMxTNv5zJjcRa/4i1TTjHLLt3j8RPliPPNBKdldkOXnU7NHh5vAaOrKl2ylJNc AH8eWpk9nJeRh1mQqXJ8KDz3DrrmlBWjzv1OpJZZctrhdff73F8s3KfG9bCnGLxD GFyydHDRadYRqPyLuYKvKYkJ1l/jcMyvDR+y4A7CwOoHF1VM6IIpYqtgDI+oPwaY MSGO+UnRGarOb37zoZ1flpomRUAD9W6ifuIEKhsWeXWHDc3QYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBa6ej6HP/7bAy98DhZBTjbWBwDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FmODY5NjItMGJmNC0z MjdiLThjZWQtNWIwYjk5ZWJkNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtfBABRngVjWyIMYvorRwXc7/aiPLdl4Yp2bl9+xkTyUnnYEHCF uvgeY3LOwolCwFKXZugltS7IhTWIKld9J+QVyHLwYGMFl9e3tm6ePwtTqQ8YWnde XBw7/IzVgcr4NDnZZF6/wXmV0clFcXOUrt6Uq3/Slj4nnbHCsUrzifmj0YQIrNU4 RNgCmEOgm7FVfjeryzeeXvw1WbW8mCEWdz/doaA+gWS1UuDqadSg0rep8Wh7+efv TJnoaIsvyJBVJULlWNgNug6AyVkYYAkoMcuNPts5AsliMTlPiDyV5kZUWZn47FWw 6OMZBhABKPM6+pj16NJNwGfkfDf4WrQyUew= -----END CERTIFICATE-----Generated at Mon Aug 4 07:51:15 2025 by rpki-client