$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa File: 3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa (raw, json) Hash identifier: BrDYLxZGmvWZPuixUyWCSDURXF/ssKozk2ftA5Sif2M= Subject key identifier: D7:E0:38:3D:1A:FA:04:11:61:12:CF:E2:C8:F9:05:6A:DD:94:E2:85 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C0328CE8E8271ADFD7400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 31942 IP address blocks: 2001:470:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:03:28:ce:8e:82:71:ad:fd:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=96553d2a-e650-4386-b1ab-05f3a26b896a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:ee:35:1f:9c:40:54:0c:9b:4a:d5:b5:5a: 88:0a:26:ea:36:73:46:a3:c4:29:cf:a1:90:3f:98: 90:c2:af:99:75:73:89:f2:75:07:5b:d0:a3:bc:3c: 9f:b6:6f:cb:36:8b:bd:40:f8:c0:a0:3e:a5:b3:55: f7:b9:05:00:d3:0c:9f:02:ba:70:93:df:41:ee:7a: a5:2c:e8:63:a2:b0:a1:48:22:0b:af:13:36:90:50: f5:ca:23:b2:16:48:e6:0a:ae:c0:99:72:1e:8a:05: d7:fc:c5:01:a9:63:ae:f2:a7:0f:4f:0c:18:e8:1a: 83:a7:fa:f9:69:a3:b4:b1:2d:4c:2a:d8:cd:e6:ed: 74:e5:18:e5:56:e2:94:e4:4f:ea:92:26:d6:fb:6e: 94:60:4e:dc:45:31:bf:6b:43:be:be:c6:d6:aa:e6: 39:44:a3:68:91:ac:61:da:ca:c3:92:19:85:b6:49: 4f:18:71:9b:c4:1a:b7:ff:f5:98:5e:d0:f6:1c:4c: 77:5b:44:9d:8b:01:da:36:36:24:b8:82:6d:eb:aa: 8c:2c:7d:a6:06:f5:8a:71:c5:c9:c3:54:d4:64:28: bf:fa:8b:02:89:91:66:32:50:e8:11:67:fa:51:18: 20:9c:3a:73:e1:0b:65:6b:00:3d:e7:2f:b7:78:0f: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:38:3D:1A:FA:04:11:61:12:CF:E2:C8:F9:05:6A:DD:94:E2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fe31b04-19a8-3ae4-8d97-bebb185e0385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:69::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:23:ed:e8:94:d4:47:0c:fd:5d:c0:1b:97:22:df:63:e1: 6c:76:84:d2:87:05:13:9a:c6:c3:bc:97:b0:fc:ab:11:e0:70: 33:78:12:0b:cb:33:25:29:a1:26:c2:55:bc:23:40:06:88:a6: fe:9e:16:89:03:43:aa:8c:d5:90:31:64:88:35:d0:fd:1f:c5: 3a:86:b6:f9:ba:de:f5:a6:5e:07:b5:ba:b8:f6:e9:c4:6f:bd: c8:e4:bd:98:c2:d7:56:86:35:9c:11:16:ea:a1:57:51:0a:50: ff:c0:a3:56:b7:15:a2:84:9f:16:63:ac:83:d5:4f:93:77:05: d0:c6:44:13:ea:27:80:87:dd:25:38:26:5b:b3:0e:9d:01:6b: ea:75:26:d2:a9:de:db:75:b7:58:94:34:6e:31:ca:04:3b:12: fd:1d:9f:e8:98:be:ed:8d:4c:b2:2a:bb:00:44:1e:da:7e:ed: d1:b0:9b:89:e0:52:f8:f3:0e:5f:69:ce:fd:66:d3:cc:7b:c1: 29:fd:d1:13:65:b8:73:dd:77:c4:84:3b:60:b4:5d:7b:89:fc: b4:f9:3d:02:94:2d:7d:21:10:9a:fb:33:d9:d3:2f:a9:a3:d8: 37:bf:ec:16:d9:f8:30:4d:61:cb:db:a4:f1:15:e3:0d:dc:e3: ca:83:dd:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAMozo6Cca39dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTY1NTNkMmEtZTY1MC00Mzg2LWIxYWItMDVmM2EyNmI4OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YbuNR+cQFQMm0rVtVqICibqNnNGo8Qpz6GQ P5iQwq+ZdXOJ8nUHW9CjvDyftm/LNou9QPjAoD6ls1X3uQUA0wyfArpwk99B7nql LOhjorChSCILrxM2kFD1yiOyFkjmCq7AmXIeigXX/MUBqWOu8qcPTwwY6BqDp/r5 aaO0sS1MKtjN5u105RjlVuKU5E/qkibW+26UYE7cRTG/a0O+vsbWquY5RKNokaxh 2srDkhmFtklPGHGbxBq3//WYXtD2HEx3W0SdiwHaNjYkuIJt66qMLH2mBvWKccXJ w1TUZCi/+osCiZFmMlDoEWf6URggnDpz4QtlawA95y+3eA+1LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfgOD0a+gQRYRLP4sj5BWrdlOKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2ZlMzFiMDQtMTlhOC0z YWU0LThkOTctYmViYjE4NWUwMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnOI+3olNRHDP1dwBuXIt9j4Wx2hNKHBROaxsO8l7D8qxHgcDN4 EgvLMyUpoSbCVbwjQAaIpv6eFokDQ6qM1ZAxZIg10P0fxTqGtvm63vWmXge1urj2 6cRvvcjkvZjC11aGNZwRFuqhV1EKUP/Ao1a3FaKEnxZjrIPVT5N3BdDGRBPqJ4CH 3SU4JluzDp0Ba+p1JtKp3tt1t1iUNG4xygQ7Ev0dn+iYvu2NTLIquwBEHtp+7dGw m4ngUvjzDl9pzv1m08x7wSn90RNluHPdd8SEO2C0XXuJ/LT5PQKULX0hEJr7M9nT L6mj2De/7BbZ+DBNYcvbpPEV4w3c48qD3dc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:18 2025 by rpki-client