$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/512c0ba2-2338-37bf-9548-1f0b36f83128.roa File: 512c0ba2-2338-37bf-9548-1f0b36f83128.roa (raw, json) Hash identifier: LNJ2stiNDs3IchaBrB4TYW4qyqdmiJlq2XHNzKEBejg= Subject key identifier: 2F:51:EA:EC:16:66:86:69:8D:F8:88:0B:3E:D0:25:F8:52:05:7D:01 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF8BC950B57091F8FF380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/512c0ba2-2338-37bf-9548-1f0b36f83128.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 44302 IP address blocks: 2001:470:20f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f8:bc:95:0b:57:09:1f:8f:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a3d2b0c6-34b8-4f45-8be0-de3cd18f32cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:64:07:7d:53:32:4f:b2:10:02:cd:53:c3: ff:c1:73:20:19:21:c5:1c:ec:49:80:cb:f9:7b:72: d2:29:2b:04:2e:9d:82:44:f4:9a:0d:e5:ed:82:9d: 10:a7:fd:c2:70:93:1a:1b:bf:be:c8:3a:dd:89:91: b0:a7:ac:ca:ff:d1:40:36:f4:b6:8c:8f:27:0e:0e: 4a:5d:e1:95:f4:aa:bd:7c:9f:2f:4d:ff:e1:f1:2c: 36:6c:69:06:28:ed:76:0e:5b:8b:b7:c1:4f:30:36: 50:90:a3:22:b6:08:e7:ae:90:92:d2:ad:00:e7:24: e3:c6:2f:27:03:06:98:2e:fd:2e:d0:c3:fa:ed:e6: cc:7c:40:d1:04:46:17:7b:c0:72:ea:2e:41:24:fa: 10:ce:c4:a8:f5:bb:3a:93:b0:a2:a8:f5:1c:a0:dd: 41:f5:dc:16:53:d8:18:5b:39:30:f1:71:99:8d:a6: f3:b7:98:07:11:8a:5f:08:aa:67:7e:ae:a4:9a:68: ec:f2:fd:d0:bc:eb:25:43:69:c2:64:ef:74:37:d5: 4b:7b:39:c8:29:34:15:1f:77:ec:ee:68:df:39:dd: d7:2d:d6:6b:4c:d2:dc:fe:dd:1b:4f:b7:29:df:52: 06:93:7a:78:f0:53:f2:8a:93:41:c7:55:e5:f7:c9: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:51:EA:EC:16:66:86:69:8D:F8:88:0B:3E:D0:25:F8:52:05:7D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/512c0ba2-2338-37bf-9548-1f0b36f83128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:20f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9a:d8:ce:91:ce:46:3a:9d:12:d6:e8:4b:bc:47:1a:00:ad: 75:8f:15:d2:b2:54:62:8a:ee:45:69:43:9a:2b:74:da:79:16: 0c:13:91:55:2a:a9:f9:71:b8:dc:35:1e:4d:c5:d8:3f:6d:99: f6:f5:4b:16:1e:33:67:5e:ae:84:77:ff:ff:45:45:df:e2:41: 1a:f4:12:ab:e4:f7:a7:5b:aa:f6:5a:b8:8c:41:7e:ca:af:0b: 19:94:42:be:18:65:b5:ae:df:54:5e:0e:61:75:b9:c2:ce:55: 9d:47:4a:81:6c:31:ba:7a:18:49:d2:e9:67:88:fe:76:56:96: 16:14:79:fa:96:c3:e3:91:4c:4e:19:8e:20:89:9d:f3:62:c4: 5a:46:75:56:da:b2:0f:c7:46:3a:08:23:a3:66:c6:9a:01:65: 5f:70:05:ee:a7:a2:68:80:f8:16:fb:8a:5f:ff:14:00:b4:ae: 7f:3d:e3:ec:1a:1e:46:55:6d:21:e0:06:82:7a:9f:e5:7b:07: 1f:d6:13:0a:b3:dd:c3:87:b3:00:f2:ca:88:df:d4:1e:cc:3e: ff:07:1a:7d:fa:12:06:6f:4a:0c:ef:be:16:50:bf:30:3e:0c: 67:56:33:5a:d9:44:4b:24:24:77:bd:ad:7c:b8:eb:5c:13:20: 70:77:21:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/i8lQtXCR+P84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTNkMmIwYzYtMzRiOC00ZjQ1LThiZTAtZGUzY2QxOGYzMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlplkB31TMk+yEALNU8P/wXMgGSHFHOxJgMv5 e3LSKSsELp2CRPSaDeXtgp0Qp/3CcJMaG7++yDrdiZGwp6zK/9FANvS2jI8nDg5K XeGV9Kq9fJ8vTf/h8Sw2bGkGKO12DluLt8FPMDZQkKMitgjnrpCS0q0A5yTjxi8n AwaYLv0u0MP67ebMfEDRBEYXe8By6i5BJPoQzsSo9bs6k7CiqPUcoN1B9dwWU9gY Wzkw8XGZjabzt5gHEYpfCKpnfq6kmmjs8v3QvOslQ2nCZO90N9VLeznIKTQVH3fs 7mjfOd3XLdZrTNLc/t0bT7cp31IGk3p48FPyipNBx1Xl98n+FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9R6uwWZoZpjfiICz7QJfhSBX0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTEyYzBiYTItMjMzOC0z N2JmLTk1NDgtMWYwYjM2ZjgzMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6a2M6RzkY6nRLW6Eu8RxoArXWPFdKyVGKK7kVpQ5ordNp5FgwT kVUqqflxuNw1Hk3F2D9tmfb1SxYeM2deroR3//9FRd/iQRr0Eqvk96dbqvZauIxB fsqvCxmUQr4YZbWu31ReDmF1ucLOVZ1HSoFsMbp6GEnS6WeI/nZWlhYUefqWw+OR TE4ZjiCJnfNixFpGdVbasg/HRjoII6NmxpoBZV9wBe6nomiA+Bb7il//FAC0rn89 4+waHkZVbSHgBoJ6n+V7Bx/WEwqz3cOHswDyyojf1B7MPv8HGn36EgZvSgzvvhZQ vzA+DGdWM1rZREskJHe9rXy461wTIHB3IbI= -----END CERTIFICATE-----Generated at Mon Aug 4 08:18:35 2025 by rpki-client