$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa File: 4082e2cb-eae7-3e66-9557-4e3a0669559c.roa (raw, json) Hash identifier: 7PlGrR3zNAG9owJyk0hoJaGa5Xcaa3BTotB9s4pviLM= Subject key identifier: FC:B9:96:9F:08:C4:BB:46:89:56:92:E3:90:51:34:21:F6:B4:31:F4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C01C981A401D87B628E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 10737 IP address blocks: 2001:470:2db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:01:c9:81:a4:01:d8:7b:62:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=aed76b96-bf9b-4420-b758-4ea961a0c3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:59:97:d7:74:79:55:ed:03:97:c9:3d:7b: 23:80:4d:9d:f7:ea:23:70:90:9b:42:4a:66:5f:44: dd:98:c6:2c:d6:d9:93:37:4d:12:c1:69:13:90:52: 30:8d:a4:3d:fc:a1:87:fb:c1:cc:88:bf:bc:c2:93: a8:54:90:a9:49:b0:58:8a:2b:86:23:52:3a:a0:81: 2d:55:f7:77:ea:bc:d6:8d:47:4c:9a:75:86:e5:31: ba:9b:e9:4f:2d:a8:1c:0f:63:ea:03:72:a6:c3:ac: 6f:87:66:26:52:94:20:47:fc:3e:1d:a2:65:6f:81: 5b:14:d6:7f:82:6f:6a:a6:62:6b:81:6e:76:06:b2: fd:0d:c4:60:44:e4:91:e2:eb:37:a6:b0:c9:7a:b2: fb:5a:c1:b2:66:ed:4b:28:bb:5d:bd:08:3a:ef:7e: 5a:31:9b:5e:41:3c:b0:d6:fc:66:d8:49:47:cc:3b: 99:f6:5a:98:14:a2:3f:b3:a1:50:03:a7:d9:37:27: 8f:df:4e:d7:2f:49:40:bf:21:0d:30:40:8e:7b:ea: aa:a9:41:d2:cf:c9:a0:b7:e0:f9:98:bb:81:b2:6d: 42:1f:10:72:f1:b8:4b:5c:3b:bf:d4:34:29:7e:32: 08:1e:d9:0c:9b:9e:3e:0e:3b:f6:7a:36:06:9f:d0: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B9:96:9F:08:C4:BB:46:89:56:92:E3:90:51:34:21:F6:B4:31:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4082e2cb-eae7-3e66-9557-4e3a0669559c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f1:a1:35:97:5c:9e:1b:a0:d9:d8:4b:9c:44:0b:98:b5:d5: c6:02:e2:1f:5f:3a:7a:9c:7d:85:b4:07:d2:33:ec:bd:1d:b8: c0:bf:d4:54:b2:1d:1b:60:36:4d:7c:c8:f6:e5:02:8b:5a:12: 00:01:62:1f:df:8e:50:18:4f:f1:9e:17:59:fc:4a:7d:51:a8: 18:78:ce:88:5b:95:73:0a:43:71:95:61:8a:67:be:ec:35:f4: fa:9e:b8:3d:aa:e9:9d:9b:76:59:e9:77:6a:ad:c7:4d:35:f9: f7:84:7a:27:3e:46:9b:4b:a6:aa:a1:54:9f:80:40:99:ca:03: ab:12:be:5d:0e:6b:e2:d6:69:2b:b7:4c:60:6b:a2:85:36:57: 9a:44:84:8d:bb:79:a9:67:25:ff:2a:7e:17:ff:96:68:05:57: 5a:34:ce:6d:24:c7:47:b0:82:41:d0:fb:51:65:b1:c7:04:7f: ee:0b:d1:5b:1f:a3:1f:94:9c:4f:9c:b2:1c:46:38:f8:d4:08: 5c:c2:74:ba:d6:cf:a4:bf:a0:67:d5:be:c0:57:5f:d4:76:d4: 68:ce:23:80:da:5a:cd:f1:b8:66:36:69:0e:51:55:42:15:01: 8d:3c:2b:df:3f:dd:37:35:40:76:02:94:8b:fb:fc:0c:25:35: ed:46:72:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAHJgaQB2HtijoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWVkNzZiOTYtYmY5Yi00NDIwLWI3NTgtNGVhOTYxYTBjM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9lZl9d0eVXtA5fJPXsjgE2d9+ojcJCbQkpm X0TdmMYs1tmTN00SwWkTkFIwjaQ9/KGH+8HMiL+8wpOoVJCpSbBYiiuGI1I6oIEt Vfd36rzWjUdMmnWG5TG6m+lPLagcD2PqA3Kmw6xvh2YmUpQgR/w+HaJlb4FbFNZ/ gm9qpmJrgW52BrL9DcRgROSR4us3prDJerL7WsGyZu1LKLtdvQg6735aMZteQTyw 1vxm2ElHzDuZ9lqYFKI/s6FQA6fZNyeP307XL0lAvyENMECOe+qqqUHSz8mgt+D5 mLuBsm1CHxBy8bhLXDu/1DQpfjIIHtkMm54+Djv2ejYGn9DCJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPy5lp8IxLtGiVaS45BRNCH2tDH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDA4MmUyY2ItZWFlNy0z ZTY2LTk1NTctNGUzYTA2Njk1NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMHxoTWXXJ4boNnYS5xEC5i11cYC4h9fOnqcfYW0B9Iz7L0duMC/ 1FSyHRtgNk18yPblAotaEgABYh/fjlAYT/GeF1n8Sn1RqBh4zohblXMKQ3GVYYpn vuw19PqeuD2q6Z2bdlnpd2qtx001+feEeic+RptLpqqhVJ+AQJnKA6sSvl0Oa+LW aSu3TGBrooU2V5pEhI27ealnJf8qfhf/lmgFV1o0zm0kx0ewgkHQ+1FlsccEf+4L 0Vsfox+UnE+cshxGOPjUCFzCdLrWz6S/oGfVvsBXX9R21GjOI4DaWs3xuGY2aQ5R VUIVAY08K98/3Tc1QHYClIv7/AwlNe1Gcss= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:15 2025 by rpki-client