$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa File: 3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa (raw, json) Hash identifier: arHmZjpyPoTWhUZZqg6i6V1EnI3LxCSV6utE95Aw2LY= Subject key identifier: 3C:CF:1B:6D:57:9E:16:40:1A:AE:4C:51:AF:17:96:B7:47:CD:0E:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCF5F29CD72E891A3CB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 41529 IP address blocks: 2001:470:1d4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cf:5f:29:cd:72:e8:91:a3:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=59d60ff7-fb8d-4b7b-ba95-9bbfc7529a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:32:25:09:a2:55:0d:bb:83:08:7b:09:ad: c2:dc:f8:d0:2b:31:db:cb:fc:e7:a2:18:5c:1e:b8: 5a:43:d8:96:e9:7d:0c:c0:58:24:44:18:05:e8:f6: da:e6:86:4a:fe:20:3d:a6:3d:17:7f:0e:40:e3:de: 7b:47:f5:c1:86:76:40:b8:e4:c7:8c:74:45:5f:32: 4a:8a:42:72:13:37:c5:5f:c0:db:4a:c6:f8:f5:ce: bd:ea:54:89:c9:1e:d9:b2:6e:3f:98:9d:bf:47:8b: 00:a3:1e:6a:5e:71:bc:92:83:6c:77:f6:10:24:cc: 0d:24:9b:89:de:ee:a5:04:76:60:ca:6e:9a:12:de: ee:ad:ea:b8:51:df:cf:7d:5d:9f:92:8d:92:35:14: 73:07:68:fc:1b:cb:07:56:bb:73:94:59:9e:c6:75: 13:75:4c:44:81:a5:bd:cf:4f:c7:7e:4e:ba:0d:d3: f4:b7:d2:01:5e:bb:1f:0d:89:91:ab:48:f2:88:2d: 0b:a6:3f:2b:4b:99:2f:71:3e:b8:b6:31:3b:14:cc: 04:30:41:bd:35:aa:95:68:d4:5c:6b:dd:7d:d5:d5: bf:cf:50:fb:1a:83:84:a0:fe:d1:b3:57:b1:16:a4: c3:0b:58:80:1c:68:5e:0f:8e:f2:14:7a:07:3f:a2: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:1B:6D:57:9E:16:40:1A:AE:4C:51:AF:17:96:B7:47:CD:0E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:9f:a0:29:a6:e5:27:97:17:ff:f2:94:0b:6d:ee:8f:73:a4: cc:c6:8e:23:1a:ce:0c:94:e0:cc:5f:6e:1c:c6:df:e9:9b:f1: bf:17:e9:7c:a4:0c:25:11:cf:a2:71:74:bd:1e:00:3a:f1:75: 7c:59:86:dc:ac:7d:32:a8:a4:54:b9:c0:48:a9:4a:64:6f:c3: 8f:35:ec:53:97:d2:08:38:0d:1e:fe:5d:c7:59:20:c6:35:07: d2:2a:96:98:8d:66:41:52:f0:a2:ca:8b:31:b2:0b:1d:89:21: 1d:8f:7d:c6:68:3e:93:8c:c2:27:92:6f:5a:20:0c:e7:67:7f: a7:f4:39:1b:11:74:d7:02:34:07:cd:16:73:3e:5c:d4:d8:58: 5a:c8:e9:ce:b1:bb:c2:44:94:5c:ed:30:94:09:9e:e6:ce:92: 61:9e:c2:7d:69:e1:61:eb:e7:36:f4:27:77:6b:fd:b0:05:9a: 21:15:4a:e1:7b:49:4d:33:9b:d6:4d:1b:e5:6d:ec:8d:22:57: 71:f1:2a:bd:6a:1b:10:ed:03:18:8f:ec:67:b1:85:e3:45:98: 38:dd:6a:2c:97:97:a3:40:fa:68:65:c4:d4:ec:23:34:70:e5: 64:c4:e6:3b:76:97:2d:33:99:ad:c1:46:bc:44:45:8d:f7:94: f4:4d:ef:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G89fKc1y6JGjy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NTlkNjBmZjctZmI4ZC00YjdiLWJhOTUtOWJiZmM3NTI5YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBYyJQmiVQ27gwh7Ca3C3PjQKzHby/znohhc HrhaQ9iW6X0MwFgkRBgF6Pba5oZK/iA9pj0Xfw5A4957R/XBhnZAuOTHjHRFXzJK ikJyEzfFX8DbSsb49c696lSJyR7Zsm4/mJ2/R4sAox5qXnG8koNsd/YQJMwNJJuJ 3u6lBHZgym6aEt7ureq4Ud/PfV2fko2SNRRzB2j8G8sHVrtzlFmexnUTdUxEgaW9 z0/Hfk66DdP0t9IBXrsfDYmRq0jyiC0Lpj8rS5kvcT64tjE7FMwEMEG9NaqVaNRc a9191dW/z1D7GoOEoP7Rs1exFqTDC1iAHGheD47yFHoHP6IW5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzPG21XnhZAGq5MUa8XlrdHzQ5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NlZjNiODUtMWJmMC0z MWZhLTgxZTctNzZkN2EwNTNjNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALafoCmm5SeXF//ylAtt7o9zpMzGjiMazgyU4MxfbhzG3+mb8b8X 6XykDCURz6JxdL0eADrxdXxZhtysfTKopFS5wEipSmRvw4817FOX0gg4DR7+XcdZ IMY1B9IqlpiNZkFS8KLKizGyCx2JIR2PfcZoPpOMwieSb1ogDOdnf6f0ORsRdNcC NAfNFnM+XNTYWFrI6c6xu8JElFztMJQJnubOkmGewn1p4WHr5zb0J3dr/bAFmiEV SuF7SU0zm9ZNG+Vt7I0iV3HxKr1qGxDtAxiP7GexheNFmDjdaiyXl6NA+mhlxNTs IzRw5WTE5jt2ly0zma3BRrxERY33lPRN73o= -----END CERTIFICATE-----Generated at Mon Aug 4 07:50:23 2025 by rpki-client