$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa File: 4b952ef9-faec-3e07-b32f-9b84be027354.roa (raw, json) Hash identifier: wJWbhLP1Wk4didVlnG4SZyqunEBycoclFQupds2/N2o= Subject key identifier: 02:85:79:A8:A8:6B:E5:11:5D:40:D8:1D:C6:46:38:5F:99:89:23:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF70469292621D1812F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 400725 IP address blocks: 2001:470:1ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f7:04:69:29:26:21:d1:81:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c92bb798-c5c9-46cd-bea2-df9be152bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:f4:29:b7:99:9d:67:c4:ee:fd:35:3a:c3: 2d:4b:b2:81:bb:2b:a8:e2:f6:be:8f:73:3b:11:df: 26:e9:bb:d6:41:d2:a3:ec:0a:a3:ff:cf:e9:4d:4e: 2a:52:ae:14:51:aa:cf:a2:4a:af:49:5c:7a:e0:c0: 6a:2f:55:4b:32:bd:fb:1c:44:3f:e5:67:16:4b:9f: 40:74:97:9a:87:38:cd:c8:26:f2:64:1f:3f:95:2d: d4:45:4b:6a:cc:b5:00:df:28:91:32:1d:8f:b3:e5: 24:af:40:e7:3c:14:37:17:46:f1:f6:ed:d4:4e:44: ff:bd:0b:4b:2f:fa:b2:ba:54:0f:fc:0c:b0:6d:ba: c5:02:9d:1b:f3:82:5b:0e:dd:7c:de:6a:08:66:7c: cc:b2:c9:d8:20:5a:2b:71:d4:13:0c:24:dc:f8:c0: d4:fe:79:17:dc:ad:9b:e2:08:d2:78:85:c5:63:29: 8a:10:3d:7c:88:a2:7a:ab:ee:92:a7:83:b5:fe:ad: 02:af:a2:6c:75:eb:bb:2f:b2:03:ea:2a:6a:d2:9c: b7:bd:3e:0c:c4:f1:76:93:ad:89:ed:52:75:08:c2: 7d:7f:ee:72:6a:59:ca:fb:fd:48:47:a6:fd:6c:bf: be:24:f4:b7:f4:b5:94:cd:a8:0b:2a:c5:02:49:7e: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:79:A8:A8:6B:E5:11:5D:40:D8:1D:C6:46:38:5F:99:89:23:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:98:6d:86:ae:0b:0c:30:b6:29:cb:7e:e4:2f:f0:18:a7:26: 33:54:e0:69:8b:aa:47:5c:83:c2:b4:8d:91:94:7e:09:7f:87: e4:e0:1a:33:ad:65:77:8c:0e:4a:06:ed:97:75:ec:79:fd:6c: fd:1d:8a:96:4c:b3:1e:52:08:0f:f7:08:2f:53:89:13:01:25: 6a:49:e1:3a:8e:52:c5:57:c9:9e:52:3d:79:61:8b:5b:b1:bc: a1:57:61:de:92:be:4f:1a:6f:26:25:96:32:d2:5c:59:a7:4a: 65:ee:20:9e:53:5b:b5:57:12:8f:e7:55:6b:b6:75:33:ff:01: 38:3d:ef:1a:74:63:41:bf:4f:64:48:92:9a:6c:fa:87:87:f4: 84:f8:8d:f4:e7:70:af:dd:48:fd:4a:e8:01:ca:95:15:a4:58: ae:f9:9b:54:c0:51:dd:3b:d9:18:ff:a3:06:58:69:06:06:af: 0b:1a:16:8c:f6:b6:42:6c:16:50:cf:cc:e6:7a:e0:c7:9e:77: a0:ef:13:d4:00:97:0e:6f:1f:14:f2:17:a4:e5:85:f3:af:a7: f7:b5:c6:57:7d:22:38:21:98:cc:36:39:ae:9d:5d:a5:43:c0: 47:db:f8:86:1b:b4:8f:d4:2c:d1:3b:02:a3:b0:72:79:28:4d: 25:fb:e7:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/cEaSkmIdGBL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzkyYmI3OTgtYzVjOS00NmNkLWJlYTItZGY5YmUxNTJiY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLT0KbeZnWfE7v01OsMtS7KBuyuo4va+j3M7 Ed8m6bvWQdKj7Aqj/8/pTU4qUq4UUarPokqvSVx64MBqL1VLMr37HEQ/5WcWS59A dJeahzjNyCbyZB8/lS3URUtqzLUA3yiRMh2Ps+Ukr0DnPBQ3F0bx9u3UTkT/vQtL L/qyulQP/AywbbrFAp0b84JbDt183moIZnzMssnYIForcdQTDCTc+MDU/nkX3K2b 4gjSeIXFYymKED18iKJ6q+6Sp4O1/q0Cr6Jsdeu7L7ID6ipq0py3vT4MxPF2k62J 7VJ1CMJ9f+5yalnK+/1IR6b9bL++JPS39LWUzagLKsUCSX6VGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKFeaioa+URXUDYHcZGOF+ZiSMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI5NTJlZjktZmFlYy0z ZTA3LWIzMmYtOWI4NGJlMDI3MzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALiYbYauCwwwtinLfuQv8BinJjNU4GmLqkdcg8K0jZGUfgl/h+Tg GjOtZXeMDkoG7Zd17Hn9bP0dipZMsx5SCA/3CC9TiRMBJWpJ4TqOUsVXyZ5SPXlh i1uxvKFXYd6Svk8abyYlljLSXFmnSmXuIJ5TW7VXEo/nVWu2dTP/ATg97xp0Y0G/ T2RIkpps+oeH9IT4jfTncK/dSP1K6AHKlRWkWK75m1TAUd072Rj/owZYaQYGrwsa Foz2tkJsFlDPzOZ64Meed6DvE9QAlw5vHxTyF6TlhfOvp/e1xld9IjghmMw2Oa6d XaVDwEfb+IYbtI/ULNE7AqOwcnkoTSX75zs= -----END CERTIFICATE-----Generated at Mon Aug 4 07:48:24 2025 by rpki-client