$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa File: 3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa (raw, json) Hash identifier: wQLCwlxAe+u2SvePD8ZW2kQ+IFDSgiUsiP34637X8es= Subject key identifier: 88:AD:4B:8A:D8:95:E6:19:C4:F4:26:1F:A2:6A:88:63:43:66:0F:F4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BBA84951E9B23DCFF4C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 22989 IP address blocks: 2001:470:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ba:84:95:1e:9b:23:dc:ff:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=98b6eb46-b7dd-4e22-8b56-045a0366a841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:eb:2b:de:84:f9:fd:4a:89:ce:40:99:46: ad:a3:07:01:f6:63:04:49:27:97:dc:cc:d7:b3:fe: a2:5b:ac:4f:e2:64:bc:8a:ee:63:bf:66:30:f7:1b: 43:51:16:28:83:31:ac:85:1c:00:9c:49:0a:f2:a5: 2f:1d:d3:3e:fe:16:ad:bc:39:82:84:4d:2c:5f:b6: f8:9c:34:3f:92:b1:61:45:64:71:cb:ba:87:1b:e5: 30:a4:93:f0:8f:fd:f6:4d:85:54:6e:e8:2c:bd:8b: 8c:bc:6d:f3:f5:84:c8:64:5b:55:c4:e5:de:91:25: f9:fd:c1:36:1d:d8:9e:15:d6:b5:7b:87:90:61:81: 60:ce:32:fe:86:d5:0e:51:b1:7e:43:88:7d:69:f9: 22:1d:68:32:03:f0:91:fa:58:23:4a:22:31:27:fc: 52:20:70:5f:67:f2:05:ac:bd:a4:02:e7:c2:94:60: 47:7a:4a:73:e5:77:82:d6:8f:d3:93:2d:71:a6:6c: 02:64:08:5b:ee:35:c0:2d:19:35:b3:1c:07:30:07: 3a:bd:18:3b:02:2d:8e:ab:4f:5d:1d:94:95:71:70: 67:5c:a6:df:77:6e:56:cc:88:14:f0:6f:f4:cb:3a: d4:c1:e0:a2:a8:4c:9e:b0:d9:f4:2d:16:58:81:20: 72:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:4B:8A:D8:95:E6:19:C4:F4:26:1F:A2:6A:88:63:43:66:0F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:142::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:71:5c:b0:69:f4:19:57:3e:00:3a:bf:60:80:87:83:2b:08: 9b:53:46:4b:4b:d9:59:05:68:1a:cc:f3:cd:f2:7f:a5:90:eb: 30:3d:25:f9:05:c1:9c:25:c0:4b:23:ac:5b:18:b5:df:eb:80: 36:bb:ae:35:6a:86:2c:92:d5:ce:7e:ce:79:84:01:d4:39:f3: 7b:29:e9:d1:a6:aa:41:56:5e:8e:fc:65:b2:38:4f:04:60:79: 08:74:0a:d9:1f:f7:70:31:94:ed:24:d8:61:e8:2a:8f:d8:e0: ca:46:f2:a8:73:d0:8d:d4:d3:c7:40:5a:9f:da:ed:3f:21:b2: 9a:98:97:65:11:6e:36:90:b6:4f:c0:e3:99:7e:d8:c8:48:db: 37:6e:be:8c:98:75:93:1c:89:52:1e:fe:4f:ee:bf:58:b0:d9: 8b:f7:3e:7c:f5:a9:9d:3c:81:09:c4:35:e0:bb:c4:9d:a9:63: 23:bb:66:18:ea:9b:12:3f:40:67:58:d6:de:91:24:57:04:67: 81:93:78:0a:c5:c7:69:e2:d1:9d:d4:fd:81:a1:0b:1c:a4:d5: 89:e2:2e:e5:d2:32:88:f5:10:bd:b6:70:c3:cd:72:73:ce:2e: 5f:d9:9c:d6:78:08:60:d0:5b:3a:f1:67:fa:91:0a:a6:e4:59: 80:e6:c9:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G7qElR6bI9z/TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OThiNmViNDYtYjdkZC00ZTIyLThiNTYtMDQ1YTAzNjZhODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6DrK96E+f1Kic5AmUatowcB9mMESSeX3MzX s/6iW6xP4mS8iu5jv2Yw9xtDURYogzGshRwAnEkK8qUvHdM+/hatvDmChE0sX7b4 nDQ/krFhRWRxy7qHG+UwpJPwj/32TYVUbugsvYuMvG3z9YTIZFtVxOXekSX5/cE2 HdieFda1e4eQYYFgzjL+htUOUbF+Q4h9afkiHWgyA/CR+lgjSiIxJ/xSIHBfZ/IF rL2kAufClGBHekpz5XeC1o/Tky1xpmwCZAhb7jXALRk1sxwHMAc6vRg7Ai2Oq09d HZSVcXBnXKbfd25WzIgU8G/0yzrUweCiqEyesNn0LRZYgSByHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIitS4rYleYZxPQmH6JqiGNDZg/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I2ZTZhYmUtZjI5ZS0z NGVmLTk5MjktNWFhMTNjMGQyMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpxXLBp9BlXPgA6v2CAh4MrCJtTRktL2VkFaBrM883yf6WQ6zA9 JfkFwZwlwEsjrFsYtd/rgDa7rjVqhiyS1c5+znmEAdQ583sp6dGmqkFWXo78ZbI4 TwRgeQh0Ctkf93AxlO0k2GHoKo/Y4MpG8qhz0I3U08dAWp/a7T8hspqYl2URbjaQ tk/A45l+2MhI2zduvoyYdZMciVIe/k/uv1iw2Yv3Pnz1qZ08gQnENeC7xJ2pYyO7 ZhjqmxI/QGdY1t6RJFcEZ4GTeArFx2ni0Z3U/YGhCxyk1YniLuXSMoj1EL22cMPN cnPOLl/ZnNZ4CGDQWzrxZ/qRCqbkWYDmyZU= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:50 2025 by rpki-client