$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa File: 403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json) Hash identifier: 7pV5kZg2lvPNOsOP7qS2E1I8ZXQW20gSkIW+CmtOGKM= Subject key identifier: 76:9E:47:43:B8:53:4F:DE:0F:AC:73:F0:19:B8:09:AE:F5:C8:34:0B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD5504ADD28EC135CB7C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 133398 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d5:50:4a:dd:28:ec:13:5c:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=66c34ec3-0ac0-4af3-9cdc-c39f76e7a473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:8c:f5:f2:85:e6:25:5e:3e:e4:ad:60:70: 6a:f7:ad:4e:87:ed:c6:b6:5e:18:27:d8:a9:9f:52: a1:a6:f7:bf:84:6d:4d:54:f9:fc:12:54:d0:c4:d3: 33:d8:ad:b3:ff:c3:fe:1e:25:94:fc:ae:97:f1:d3: ec:ae:fc:35:19:3e:83:7c:f8:3c:54:17:7b:d5:1d: 80:8d:42:81:bb:0b:f7:5a:e6:50:f7:dc:37:7f:34: 90:70:a6:8b:7a:b7:e5:1b:6b:91:74:a0:2b:a5:36: e5:11:8b:6a:32:e6:56:ec:fb:8f:ef:ae:62:a4:25: 63:ba:94:1c:59:1f:7d:65:71:96:6e:09:bb:f2:09: 05:97:38:d4:7b:12:c9:9e:ff:99:80:2e:48:54:cd: ca:70:34:89:ea:9e:e0:be:8b:da:7d:1d:4f:e1:e7: cc:86:84:cf:12:7a:8c:96:69:49:8c:ec:a2:44:2c: 6a:73:17:b6:1a:b0:57:5c:53:46:28:8f:59:fb:7d: f6:6f:d3:4d:01:fd:f7:88:0b:bb:11:d2:b9:49:6e: f8:ea:ca:85:e7:2d:f7:fa:a5:c5:5d:76:32:e1:7f: 7a:cd:b8:8c:f9:a2:e9:08:4c:6a:04:7c:c5:39:af: 5d:05:30:e3:02:4b:96:12:a8:65:28:81:07:65:d2: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9E:47:43:B8:53:4F:DE:0F:AC:73:F0:19:B8:09:AE:F5:C8:34:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ff:1e:ad:de:c8:02:bd:91:1f:0a:72:3a:9a:c9:25:41:58: 15:ff:6f:f0:2b:eb:8b:50:33:a2:af:24:64:28:cb:9f:e2:d1: 69:8b:58:11:e1:f1:5c:56:62:5f:65:dd:e6:d3:04:d3:fc:3b: ee:0c:26:b3:55:f1:0e:40:73:ed:b7:cf:32:23:f9:81:54:10: af:aa:38:c5:65:85:99:c3:3f:df:fb:59:0e:59:0c:ac:34:52: be:72:a6:d2:f1:7c:43:f3:88:0f:d7:df:b7:4f:c5:81:4a:1d: cd:58:f9:db:8a:2d:83:8c:39:c3:39:af:0e:d0:9c:57:cb:c1: 26:fa:50:00:ec:c6:a3:35:20:13:43:11:60:d7:6d:89:1e:dd: 29:15:dd:26:6b:ab:71:bb:ce:ca:84:16:ad:22:d9:f2:1f:af: cd:3a:6a:b0:68:1f:1f:c2:55:f4:5f:32:fc:c7:58:a0:99:6f: 88:54:85:9d:73:c6:1d:56:f2:4e:69:97:90:93:aa:a5:25:4c: 5c:56:5f:0d:59:c9:28:0d:36:14:34:a5:39:65:7d:b4:3c:bf: f7:e8:c3:c2:1b:67:18:6e:b3:ef:1d:3d:44:03:32:1f:5a:48: 1d:66:5d:6b:99:26:f1:d1:2f:e5:80:88:2b:94:d5:8d:50:11: 3b:11:ba:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9VQSt0o7BNct8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjZjMzRlYzMtMGFjMC00YWYzLTljZGMtYzM5Zjc2ZTdhNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivuM9fKF5iVePuStYHBq961Oh+3Gtl4YJ9ip n1Khpve/hG1NVPn8ElTQxNMz2K2z/8P+HiWU/K6X8dPsrvw1GT6DfPg8VBd71R2A jUKBuwv3WuZQ99w3fzSQcKaLerflG2uRdKArpTblEYtqMuZW7PuP765ipCVjupQc WR99ZXGWbgm78gkFlzjUexLJnv+ZgC5IVM3KcDSJ6p7gvovafR1P4efMhoTPEnqM lmlJjOyiRCxqcxe2GrBXXFNGKI9Z+332b9NNAf33iAu7EdK5SW746sqF5y33+qXF XXYy4X96zbiM+aLpCExqBHzFOa9dBTDjAkuWEqhlKIEHZdLTEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaeR0O4U0/eD6xz8Bm4Ca71yDQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDAzZmVmZDEtODczZC0z NjE3LWE4ZjctZWEzYzZmNmRhN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAf/Hq3eyAK9kR8KcjqaySVBWBX/b/Ar64tQM6KvJGQoy5/i0WmL WBHh8VxWYl9l3ebTBNP8O+4MJrNV8Q5Ac+23zzIj+YFUEK+qOMVlhZnDP9/7WQ5Z DKw0Ur5yptLxfEPziA/X37dPxYFKHc1Y+duKLYOMOcM5rw7QnFfLwSb6UADsxqM1 IBNDEWDXbYke3SkV3SZrq3G7zsqEFq0i2fIfr806arBoHx/CVfRfMvzHWKCZb4hU hZ1zxh1W8k5pl5CTqqUlTFxWXw1ZySgNNhQ0pTllfbQ8v/fow8IbZxhus+8dPUQD Mh9aSB1mXWuZJvHRL+WAiCuU1Y1QETsRukM= -----END CERTIFICATE-----Generated at Mon Aug 4 11:11:52 2025 by rpki-client