$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa File: 4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa (raw, json) Hash identifier: QKv5JEdD3EDtZF4x2VAGKhdrtFGcizUXnvZ55MMYj1k= Subject key identifier: BB:16:CA:27:3E:1D:BA:58:9A:2D:A0:DF:99:C6:B9:00:94:D5:15:00 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A78F461012E77109F808E5900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa Signing time: Thu 10 Jul 2025 13:30:09 +0000 ROA not before: Thu 10 Jul 2025 13:30:09 +0000 ROA not after: Wed 08 Oct 2025 13:30:09 +0000 asID: 11030 IP address blocks: 2001:470:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:f4:61:01:2e:77:10:9f:80:8e:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 10 13:30:09 2025 GMT Not After : Oct 8 13:30:09 2025 GMT Subject: CN=4bcf81c1-03a7-4296-b559-fb1ac08b73fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:a0:95:68:c8:b0:6f:fe:7b:1c:67:2b:2d: 2a:0c:ba:36:2b:6c:86:ce:de:a1:46:b9:aa:19:5f: b0:2f:34:6d:e3:ea:60:38:08:46:94:83:50:24:0f: 65:44:64:f4:85:4a:3c:ad:69:a5:91:5e:15:03:a1: 39:95:84:0e:fa:82:b3:79:c9:56:b8:a7:b4:d4:74: 3e:cc:bf:0e:66:5a:0c:da:a0:ec:62:f4:30:b4:d7: dd:dd:45:5c:74:ce:6f:c5:bc:d4:f8:65:ad:31:f2: 64:ad:5b:df:62:87:a2:73:f0:0d:e7:6f:96:03:1f: 9d:46:e5:e5:ab:61:52:b6:1c:78:29:e0:e4:c7:4c: b1:a9:52:88:ee:40:5d:e3:19:7e:9f:33:04:21:c8: d9:79:e7:bc:64:e3:52:5b:34:ad:64:2a:92:54:a3: 47:bd:f7:6f:69:25:39:c8:07:ca:9e:eb:cc:e2:c0: a2:ce:77:a4:3c:ec:c0:b0:f3:8f:82:fc:7d:42:10: 80:ac:f0:6e:4e:8d:65:55:2f:43:01:d7:ca:3b:2b: 42:0f:25:89:0d:15:29:13:6a:fc:81:d8:6e:86:e4: 22:02:3e:53:4f:80:99:62:af:95:1b:c3:bc:06:a4: 9c:ce:dd:34:7c:b0:7f:47:a9:0f:f5:ad:d4:ae:3d: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:16:CA:27:3E:1D:BA:58:9A:2D:A0:DF:99:C6:B9:00:94:D5:15:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c5:d2:2a:e7:2f:07:a8:8f:be:25:8f:85:77:b2:50:58:b3: ca:91:b9:8b:bc:27:95:53:d2:84:c4:0c:77:20:ac:20:d2:c3: e5:73:e8:11:00:f6:35:13:8f:ed:64:8b:b9:c9:16:19:0b:ef: cc:d5:13:21:20:48:bf:35:38:ab:fe:72:8a:97:d4:93:0d:db: 28:7e:da:44:e7:c8:4f:27:ae:38:e6:bc:b5:23:74:29:30:68: 86:c3:19:47:19:5c:37:9b:b1:4f:30:95:44:3b:5e:92:80:ab: 19:6d:6d:f6:07:9c:ee:84:72:61:e1:49:80:23:35:d3:57:b8: c5:e4:60:86:85:c4:50:7a:e3:d9:3b:e6:bc:e6:86:38:82:87: 58:1a:38:74:89:50:97:69:53:19:89:bb:93:2b:fd:ff:8a:3e: ed:56:49:8e:8d:bb:82:c7:80:b3:ce:d3:55:39:f4:ff:04:6b: 73:3a:25:8e:89:23:4d:79:63:a1:c0:0b:fd:e5:14:c9:8a:6d: 60:a9:4e:99:7e:a9:11:30:2e:a6:2b:7e:bc:a7:70:7b:d3:d6: 9f:0a:9b:20:cd:ae:65:cf:6c:7e:0e:db:4d:6e:79:c5:b8:aa: a6:7e:b2:bc:66:38:11:3f:16:94:7a:df:3e:65:35:56:5f:77: 87:1e:99:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp49GEBLncQn4COWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxMDEzMzAwOVoXDTI1MTAwODEzMzAwOVowLzEtMCsGA1UEAxMk NGJjZjgxYzEtMDNhNy00Mjk2LWI1NTktZmIxYWMwOGI3M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRqglWjIsG/+exxnKy0qDLo2K2yGzt6hRrmq GV+wLzRt4+pgOAhGlINQJA9lRGT0hUo8rWmlkV4VA6E5lYQO+oKzeclWuKe01HQ+ zL8OZloM2qDsYvQwtNfd3UVcdM5vxbzU+GWtMfJkrVvfYoeic/AN52+WAx+dRuXl q2FSthx4KeDkx0yxqVKI7kBd4xl+nzMEIcjZeee8ZONSWzStZCqSVKNHvfdvaSU5 yAfKnuvM4sCiznekPOzAsPOPgvx9QhCArPBuTo1lVS9DAdfKOytCDyWJDRUpE2r8 gdhuhuQiAj5TT4CZYq+VG8O8BqSczt00fLB/R6kP9a3Urj1vjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsWyic+HbpYmi2g35nGuQCU1RUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGZmY2RmOWEtODBiYi0z M2NhLWI1YjYtNTUzYWIwMDI0ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnF0irnLweoj74lj4V3slBYs8qRuYu8J5VT0oTEDHcgrCDSw+Vz 6BEA9jUTj+1ki7nJFhkL78zVEyEgSL81OKv+coqX1JMN2yh+2kTnyE8nrjjmvLUj dCkwaIbDGUcZXDebsU8wlUQ7XpKAqxltbfYHnO6EcmHhSYAjNdNXuMXkYIaFxFB6 49k75rzmhjiCh1gaOHSJUJdpUxmJu5Mr/f+KPu1WSY6Nu4LHgLPO01U59P8Ea3M6 JY6JI015Y6HAC/3lFMmKbWCpTpl+qREwLqYrfryncHvT1p8KmyDNrmXPbH4O201u ecW4qqZ+srxmOBE/FpR63z5lNVZfd4cemYY= -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:35 2025 by rpki-client