$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44770ddc-c271-3290-9631-3c0b95ca4f63.roa File: 44770ddc-c271-3290-9631-3c0b95ca4f63.roa (raw, json) Hash identifier: rlkC0y4yJUpMFbUwxXoRVpm0Se5DF/bD9gZ4OYvb43Y= Subject key identifier: 14:18:83:05:21:89:23:17:F7:A8:AE:27:8D:AE:5C:85:0C:F6:50:93 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF796C3B1A70F227EB480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44770ddc-c271-3290-9631-3c0b95ca4f63.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 396026 IP address blocks: 2001:470:1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f7:96:c3:b1:a7:0f:22:7e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6045cfc3-7a0c-4f52-925b-753ae3947dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:d5:7f:f8:bd:54:c3:70:04:d1:c1:82:78: b1:95:14:30:c9:f5:f3:9d:7b:d6:20:fc:f4:5f:8c: 24:f0:28:74:24:77:7a:bf:78:d8:2d:15:4b:ef:2d: 73:e9:70:17:0f:ad:3e:39:28:35:03:3c:f3:2a:eb: b5:75:cb:6a:40:ba:5c:11:23:2d:74:62:18:7f:c0: c2:2b:8d:db:09:5a:0e:20:bf:ec:ea:12:33:14:b8: c3:c1:ff:3e:78:9a:8b:05:f2:e5:ee:09:2c:dd:7b: a6:53:2b:1e:78:d7:11:23:cb:5a:43:98:47:e9:94: 31:e7:6e:e0:97:67:77:01:79:57:9a:76:cb:71:bd: 77:f9:ef:45:87:f3:66:6e:82:6f:f4:f3:48:14:66: d1:45:b0:aa:d0:43:0a:63:6a:8e:78:8f:c3:14:5a: e0:f6:74:15:bf:41:d5:2b:2d:81:ac:b5:6a:f4:eb: 23:25:be:10:7f:d3:d1:88:e6:0a:b4:73:5b:11:ba: 61:7c:a7:d0:74:ae:96:18:51:07:84:ab:55:48:60: 83:ff:5c:42:4b:87:3a:81:64:b2:2c:65:d6:c8:74: 75:e9:5a:94:35:b9:79:97:9c:b1:01:e5:79:46:2c: 3d:ea:a0:9b:0e:d1:2c:af:46:54:22:2d:d6:43:1f: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:18:83:05:21:89:23:17:F7:A8:AE:27:8D:AE:5C:85:0C:F6:50:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44770ddc-c271-3290-9631-3c0b95ca4f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ff:a7:65:80:5d:e8:6f:68:29:ca:3b:68:12:cb:2b:db:70: af:f5:67:3c:d2:da:77:48:0a:21:99:cb:cc:47:4e:a6:5c:0f: 44:da:10:fe:9f:6c:70:db:93:85:c2:13:76:29:2c:18:6e:e5: c4:65:1d:db:76:83:15:2d:7b:35:d8:33:e7:65:c9:33:07:fa: b0:33:97:60:03:10:0d:5b:54:5c:c4:12:ff:d6:df:30:ad:d0: 04:1f:33:c9:00:40:c8:ea:73:ac:f6:69:e3:59:a1:43:8c:52: e2:60:94:79:4c:a8:41:41:29:b8:b6:8a:d8:2d:5a:ef:6f:10: 82:b0:68:0d:44:1f:61:8d:f8:50:69:11:e9:a1:cd:bd:91:94: af:52:b6:34:0d:6e:20:58:a3:9f:90:5d:00:7f:ce:52:cd:0b: b0:84:3d:f6:88:10:77:c6:88:91:b0:cf:ee:ba:3e:99:23:40: 68:bb:dd:ac:3f:3e:dd:63:4d:40:f9:1c:c1:a2:d7:25:35:d7: 89:73:a4:22:64:64:b0:cf:07:55:c8:ae:a9:a7:7f:24:b2:4e: 4c:2f:bc:08:a9:0a:8f:2b:bd:1a:88:eb:4e:32:08:7a:3a:3e: aa:90:88:90:04:3e:32:9b:ec:50:2c:68:a6:f6:01:ba:b2:8a: c6:4d:ad:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/eWw7GnDyJ+tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjA0NWNmYzMtN2EwYy00ZjUyLTkyNWItNzUzYWUzOTQ3ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP7Vf/i9VMNwBNHBgnixlRQwyfXznXvWIPz0 X4wk8Ch0JHd6v3jYLRVL7y1z6XAXD60+OSg1AzzzKuu1dctqQLpcESMtdGIYf8DC K43bCVoOIL/s6hIzFLjDwf8+eJqLBfLl7gks3XumUyseeNcRI8taQ5hH6ZQx527g l2d3AXlXmnbLcb13+e9Fh/NmboJv9PNIFGbRRbCq0EMKY2qOeI/DFFrg9nQVv0HV Ky2BrLVq9OsjJb4Qf9PRiOYKtHNbEbphfKfQdK6WGFEHhKtVSGCD/1xCS4c6gWSy LGXWyHR16VqUNbl5l5yxAeV5Riw96qCbDtEsr0ZUIi3WQx+HewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQYgwUhiSMX96iuJ42uXIUM9lCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDQ3NzBkZGMtYzI3MS0z MjkwLTk2MzEtM2MwYjk1Y2E0ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB//p2WAXehvaCnKO2gSyyvbcK/1ZzzS2ndICiGZy8xHTqZcD0Ta EP6fbHDbk4XCE3YpLBhu5cRlHdt2gxUtezXYM+dlyTMH+rAzl2ADEA1bVFzEEv/W 3zCt0AQfM8kAQMjqc6z2aeNZoUOMUuJglHlMqEFBKbi2itgtWu9vEIKwaA1EH2GN +FBpEemhzb2RlK9StjQNbiBYo5+QXQB/zlLNC7CEPfaIEHfGiJGwz+66PpkjQGi7 3aw/Pt1jTUD5HMGi1yU114lzpCJkZLDPB1XIrqmnfySyTkwvvAipCo8rvRqI604y CHo6PqqQiJAEPjKb7FAsaKb2AbqyisZNreM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:56 2025 by rpki-client