$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa File: 3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa (raw, json) Hash identifier: uC6h3jq6WxZAP1rB6Rt0twnv85CcwpIi6/pF+EhVxpM= Subject key identifier: 10:81:A7:F9:5A:67:A4:89:02:94:A8:6E:F0:81:89:08:FE:B4:91:0F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCFF44620C534EBBD7380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 10352 IP address blocks: 2001:470:1e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cf:f4:46:20:c5:34:eb:bd:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6e20da47-f818-4f2d-b3ed-e95c84727f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:61:5b:4a:4d:d6:4a:d2:3c:6a:58:49:d3: 09:22:0c:ca:e0:f8:84:5d:02:1f:cf:03:c6:df:e7: 36:77:42:3c:bb:eb:b4:99:d5:f8:ab:6d:61:b4:ae: 12:8e:65:f2:7e:66:ed:3e:19:a5:74:3c:29:3f:b7: 45:24:63:a5:d1:00:56:76:68:ce:88:ba:6a:c6:d3: d0:83:0e:5d:8e:fd:ef:5d:d1:f3:4b:8d:b6:4a:24: d2:db:18:b3:9c:1d:ac:72:fb:50:20:98:04:9f:38: aa:ec:a1:9a:d9:10:76:25:ae:84:c2:ac:28:2d:a5: f2:7b:ef:83:d2:c8:3d:21:63:e4:66:f2:59:d1:4a: 69:3e:ed:22:05:bc:08:1a:bb:0e:1a:44:4d:5e:8e: 1d:70:74:f1:fb:b6:62:12:67:bb:49:c7:64:fd:7b: f1:48:14:0f:e0:1d:78:ce:0a:68:11:0f:b7:b8:67: e8:4b:d7:f4:82:a6:fd:07:23:52:a7:0c:46:93:a3: 95:45:8a:de:f9:35:19:66:8d:ef:5b:38:d9:ba:db: 09:4f:14:80:d0:60:af:4b:62:ac:c4:1f:64:6e:4f: 9c:52:57:50:9e:ce:77:07:ca:b7:cf:e4:01:1b:5c: 52:72:bf:b7:1c:28:59:62:46:16:a3:e9:bc:0e:57: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:81:A7:F9:5A:67:A4:89:02:94:A8:6E:F0:81:89:08:FE:B4:91:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4d:89:4a:a2:51:6e:67:ec:45:07:c3:ac:96:21:2d:c2:73: 44:04:f4:4d:65:bb:ea:f2:d7:dc:16:76:21:69:97:6b:bb:dc: 45:23:b6:49:28:06:41:0d:f7:83:7e:56:5b:a8:4a:77:83:8a: 75:44:a1:cb:96:0d:21:db:9b:a8:95:64:6b:33:18:ea:c2:fa: 75:c6:ba:f2:41:07:ab:24:0e:16:c1:ae:bc:96:7d:c0:f0:18: 20:45:45:b1:35:15:7c:48:4c:30:c4:db:ae:d4:eb:bc:a5:21: e0:40:c1:5b:fe:09:90:5e:3e:80:67:a5:92:24:42:70:16:29: cd:4e:d3:54:be:18:55:6a:f9:f1:a9:f9:eb:88:65:76:60:77: 47:f3:9f:35:c4:af:97:e4:85:86:6e:c7:6e:ec:6b:9f:91:84: b5:ee:3a:2e:ed:f6:cc:4d:a3:e4:fa:e5:45:12:15:3a:a5:99: 71:28:cd:8d:b3:f0:bf:b5:42:22:f9:fc:6c:00:d7:19:39:9b: 49:4f:90:91:00:ac:53:e9:8b:47:45:96:09:02:ce:45:c6:95: b2:a0:4c:a0:9b:32:00:ba:bf:6a:c2:1d:37:f3:fb:2e:9e:ca: 3b:d3:96:c6:4b:65:58:27:bf:83:c2:21:39:c4:d5:95:a3:ca: 41:cc:3e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8/0RiDFNOu9c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NmUyMGRhNDctZjgxOC00ZjJkLWIzZWQtZTk1Yzg0NzI3ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjlhW0pN1krSPGpYSdMJIgzK4PiEXQIfzwPG 3+c2d0I8u+u0mdX4q21htK4SjmXyfmbtPhmldDwpP7dFJGOl0QBWdmjOiLpqxtPQ gw5djv3vXdHzS422SiTS2xiznB2scvtQIJgEnziq7KGa2RB2Ja6EwqwoLaXye++D 0sg9IWPkZvJZ0UppPu0iBbwIGrsOGkRNXo4dcHTx+7ZiEme7Scdk/XvxSBQP4B14 zgpoEQ+3uGfoS9f0gqb9ByNSpwxGk6OVRYre+TUZZo3vWzjZutsJTxSA0GCvS2Ks xB9kbk+cUldQns53B8q3z+QBG1xScr+3HChZYkYWo+m8DlfbZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCBp/laZ6SJApSobvCBiQj+tJEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VkNDUyM2MtZGIxOS0z YjMwLTk3ZDMtNGExOWFjZGJjODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZNiUqiUW5n7EUHw6yWIS3Cc0QE9E1lu+ry19wWdiFpl2u73EUj tkkoBkEN94N+VluoSneDinVEocuWDSHbm6iVZGszGOrC+nXGuvJBB6skDhbBrryW fcDwGCBFRbE1FXxITDDE267U67ylIeBAwVv+CZBePoBnpZIkQnAWKc1O01S+GFVq +fGp+euIZXZgd0fznzXEr5fkhYZux27sa5+RhLXuOi7t9sxNo+T65UUSFTqlmXEo zY2z8L+1QiL5/GwA1xk5m0lPkJEArFPpi0dFlgkCzkXGlbKgTKCbMgC6v2rCHTfz +y6eyjvTlsZLZVgnv4PCITnE1ZWjykHMPok= -----END CERTIFICATE-----Generated at Mon Aug 4 07:57:26 2025 by rpki-client