$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa File: 487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa (raw, json) Hash identifier: QwzbvSvRcb0tpCZmexFdIwr+y/xpc07zVQUr6KdNn5Y= Subject key identifier: 4C:F0:13:58:74:8D:39:40:3A:BD:04:54:8B:52:77:6C:1B:7A:DD:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BBF12A1E7B99A1932CD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36103 IP address blocks: 2001:470:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:bf:12:a1:e7:b9:9a:19:32:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4f81431f-ce96-4762-a1d6-c6c667f40553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:63:89:ed:df:cb:d3:d6:da:42:1a:35:71:33: 4e:b2:c4:d8:d5:2e:e8:5e:f3:c6:2a:bb:46:14:b6: 1b:5b:80:20:27:7a:88:e5:dc:03:ee:45:72:2a:ff: e0:dd:87:00:fa:41:81:db:93:81:9e:30:3a:bf:bb: 42:61:99:2f:dd:2b:86:c6:55:04:fd:23:e1:fd:f6: 26:d6:33:88:1c:6c:ef:80:2c:a6:9a:62:77:44:69: 6d:c8:79:1c:2b:31:01:35:de:18:24:d6:f5:5e:60: 88:b6:e3:76:d9:e0:5b:79:e4:ac:bf:02:dd:5b:97: 42:ed:aa:b0:ee:81:6c:d8:0a:e6:73:41:e8:0a:51: b6:a2:4d:1c:0c:67:33:84:b5:44:b2:a4:aa:99:3b: b7:a6:c2:42:b3:c6:be:cf:d4:79:e3:48:3e:4a:03: de:bf:96:6a:3d:ac:09:35:42:90:56:82:70:ed:68: 12:8e:41:94:53:85:0b:34:7b:15:e7:39:73:5a:67: e7:77:5a:c6:ed:5e:26:1f:a2:eb:eb:b0:0e:48:c6: d5:ab:f7:1e:00:f7:8f:c1:e3:89:30:e3:e6:4c:92: 9c:c8:27:6a:59:aa:d3:38:54:1e:07:c5:47:76:e1: 78:c5:a4:38:56:3d:e0:b2:68:6c:66:df:56:45:c3: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:13:58:74:8D:39:40:3A:BD:04:54:8B:52:77:6C:1B:7A:DD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/487f8435-f2f4-3ef1-a0fc-a360a347b62a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d9:0d:dd:27:ee:bb:15:2e:31:e4:8b:5e:6b:1b:21:38:c7: 1e:1b:64:18:da:91:8c:f9:4f:36:63:c6:a8:5b:a5:36:1a:aa: b3:b7:02:ad:a8:71:bd:1e:60:6f:76:a2:00:c0:61:69:c8:fd: b8:28:eb:8e:0b:e6:bb:b5:54:3f:55:73:96:7a:cb:18:85:38: b4:d5:6a:f0:1c:a8:95:ec:36:30:94:49:74:37:7a:8a:3e:ee: b8:b3:62:4d:ab:5c:60:84:99:a5:45:f9:15:9b:69:b8:ed:94: a3:e4:ad:08:24:a6:bf:85:f7:2f:cd:17:de:a5:a7:ad:da:c8: 86:5e:ff:d8:da:26:2b:4e:7b:e3:aa:d2:31:6a:03:e0:36:df: 91:00:f7:43:85:25:54:ff:e7:49:0a:95:19:af:26:f1:09:5a: d5:c9:5f:25:f2:c6:5b:c6:07:59:87:bf:cd:1c:19:e5:ae:65: d7:2b:94:0a:b3:ca:2d:1a:45:b4:4f:11:92:8d:30:e7:1e:6f: b0:b0:48:38:e1:24:b1:32:f5:7f:4e:4d:9a:d0:6a:fc:90:94: a6:3b:9a:42:ac:07:e3:1c:13:c1:b6:06:4c:32:f1:29:dd:04: c9:49:65:36:be:54:4f:94:28:25:d4:10:11:2b:05:d5:ed:f2: 24:0f:58:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G78Soee5mhkyzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGY4MTQzMWYtY2U5Ni00NzYyLWExZDYtYzZjNjY3ZjQwNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GOJ7d/L09baQho1cTNOssTY1S7oXvPGKrtG FLYbW4AgJ3qI5dwD7kVyKv/g3YcA+kGB25OBnjA6v7tCYZkv3SuGxlUE/SPh/fYm 1jOIHGzvgCymmmJ3RGltyHkcKzEBNd4YJNb1XmCItuN22eBbeeSsvwLdW5dC7aqw 7oFs2Armc0HoClG2ok0cDGczhLVEsqSqmTu3psJCs8a+z9R540g+SgPev5ZqPawJ NUKQVoJw7WgSjkGUU4ULNHsV5zlzWmfnd1rG7V4mH6Lr67AOSMbVq/ceAPePweOJ MOPmTJKcyCdqWarTOFQeB8VHduF4xaQ4Vj3gsmhsZt9WRcM4ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzwE1h0jTlAOr0EVItSd2wbet2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDg3Zjg0MzUtZjJmNC0z ZWYxLWEwZmMtYTM2MGEzNDdiNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/ZDd0n7rsVLjHki15rGyE4xx4bZBjakYz5TzZjxqhbpTYaqrO3 Aq2ocb0eYG92ogDAYWnI/bgo644L5ru1VD9Vc5Z6yxiFOLTVavAcqJXsNjCUSXQ3 eoo+7rizYk2rXGCEmaVF+RWbabjtlKPkrQgkpr+F9y/NF96lp63ayIZe/9jaJitO e+Oq0jFqA+A235EA90OFJVT/50kKlRmvJvEJWtXJXyXyxlvGB1mHv80cGeWuZdcr lAqzyi0aRbRPEZKNMOceb7CwSDjhJLEy9X9OTZrQavyQlKY7mkKsB+McE8G2Bkwy 8SndBMlJZTa+VE+UKCXUEBErBdXt8iQPWCQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:42:57 2025 by rpki-client