$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa File: 4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa (raw, json) Hash identifier: nUPhIOqyWI7DzLyqxbS8ZtLafp091+zvyyIfDk7YWB8= Subject key identifier: 9A:20:57:BF:9A:0D:87:32:F5:97:24:0C:A1:53:2F:7C:F0:46:7C:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A86DB67B787B64F4072014000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 62537 IP address blocks: 2001:470:40d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:67:b7:87:b6:4f:40:72:01:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=50bc70f4-1f8c-4f6a-bdc6-474fcaf10bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:41:20:70:08:b5:f2:88:cc:e1:50:2e:68: 8f:e2:bc:f6:95:6a:61:65:b8:f9:b7:2b:35:04:7a: 07:a3:90:0b:c0:ba:e6:19:51:9c:e9:b4:64:77:f2: 6f:5e:55:18:2e:ae:f9:29:45:87:25:ca:49:b6:5a: 1f:27:90:d6:e0:78:5b:f1:89:31:73:13:87:59:d2: 77:14:1e:e6:f7:ef:8e:a9:87:65:f7:d0:8d:5c:6f: fa:7c:43:d7:fe:d6:3e:18:4e:ab:15:95:76:5e:32: 97:4a:2c:b6:5e:10:e8:50:7d:04:db:f6:5f:3a:00: c5:ca:a3:04:ae:50:d4:fc:92:8b:7d:ab:6e:ac:30: 03:8e:90:fe:56:85:c5:73:5d:72:b1:15:3c:f2:96: 01:6a:e8:52:be:4e:5c:46:21:24:14:30:fd:bf:1b: 8e:94:88:18:db:7e:47:bb:aa:ff:57:a7:14:77:d3: 35:8a:86:74:23:6a:af:06:80:4f:ae:03:12:49:b9: 0f:f1:54:e5:78:f2:b9:7c:f8:91:a6:cf:17:a1:60: 37:6c:1d:a7:3f:55:e1:62:f5:bd:93:88:4b:ef:7e: 03:fa:e1:49:29:34:91:50:06:7e:ea:69:b5:fe:f9: 9d:16:cd:84:5b:6a:f1:f9:8e:52:fd:1c:09:30:70: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:57:BF:9A:0D:87:32:F5:97:24:0C:A1:53:2F:7C:F0:46:7C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4503d0b0-d408-3c40-80a6-55e35c6f5c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:40d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:21:99:c4:a9:43:1f:f3:72:40:e3:0c:e3:d9:9d:70:c4:a8: 80:9b:ce:ae:e1:e1:93:c3:f6:a1:00:24:b0:8b:f4:27:8c:96: 06:ee:94:20:00:62:9d:ad:72:87:ca:b2:b2:f8:10:18:39:c7: dc:5c:57:33:2c:53:84:60:fe:17:4c:e7:30:e3:d6:c3:44:44: 42:2f:b7:73:f3:09:31:51:dc:05:25:b7:6b:38:cd:61:05:55: c1:60:c6:12:02:9f:14:8f:5c:da:10:07:a8:76:02:86:75:2c: b0:fe:41:2c:9f:04:88:cd:c7:90:51:56:10:d6:68:69:4b:41: 63:bd:55:23:f4:41:0d:09:d2:b5:cf:64:1c:cf:4e:67:81:c9: e6:06:3e:d1:f1:7a:cb:77:8c:57:8d:bf:54:be:c4:e9:ea:42: ff:37:41:22:68:bf:c4:91:de:98:24:f8:85:4b:ec:e5:96:08: 70:b5:f8:56:23:ca:83:39:32:56:82:5b:bb:87:d6:51:4b:d8: 57:c0:be:0a:d1:fc:65:ce:35:ea:01:7b:d9:f6:31:a0:52:e8: 20:3f:4b:d7:86:97:89:9b:76:bf:89:47:65:6b:ca:b8:ee:9d: f1:9a:a8:a8:03:bd:62:c8:fe:6a:8b:f3:19:ef:93:51:55:50: a9:70:69:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqG22e3h7ZPQHIBQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTBiYzcwZjQtMWY4Yy00ZjZhLWJkYzYtNDc0ZmNhZjEwYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dJBIHAItfKIzOFQLmiP4rz2lWphZbj5tys1 BHoHo5ALwLrmGVGc6bRkd/JvXlUYLq75KUWHJcpJtlofJ5DW4Hhb8YkxcxOHWdJ3 FB7m9++OqYdl99CNXG/6fEPX/tY+GE6rFZV2XjKXSiy2XhDoUH0E2/ZfOgDFyqME rlDU/JKLfaturDADjpD+VoXFc11ysRU88pYBauhSvk5cRiEkFDD9vxuOlIgY235H u6r/V6cUd9M1ioZ0I2qvBoBPrgMSSbkP8VTlePK5fPiRps8XoWA3bB2nP1XhYvW9 k4hL734D+uFJKTSRUAZ+6mm1/vmdFs2EW2rx+Y5S/RwJMHASBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJogV7+aDYcy9ZckDKFTL3zwRnypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDUwM2QwYjAtZDQwOC0z YzQwLTgwYTYtNTVlMzVjNmY1YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0hmcSpQx/zckDjDOPZnXDEqICbzq7h4ZPD9qEAJLCL9CeMlgbu lCAAYp2tcofKsrL4EBg5x9xcVzMsU4Rg/hdM5zDj1sNEREIvt3PzCTFR3AUlt2s4 zWEFVcFgxhICnxSPXNoQB6h2AoZ1LLD+QSyfBIjNx5BRVhDWaGlLQWO9VSP0QQ0J 0rXPZBzPTmeByeYGPtHxest3jFeNv1S+xOnqQv83QSJov8SR3pgk+IVL7OWWCHC1 +FYjyoM5MlaCW7uH1lFL2FfAvgrR/GXONeoBe9n2MaBS6CA/S9eGl4mbdr+JR2Vr yrjunfGaqKgDvWLI/mqL8xnvk1FVUKlwadE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:11 2025 by rpki-client