$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa File: 523b0bc4-df4e-3208-8cdf-04020832b3b3.roa (raw, json) Hash identifier: MqjRhsu1kj2VBwxvV7ZqntufVkV6CUIF2kYXR27aCcA= Subject key identifier: 6C:D3:D5:86:5A:B5:91:91:3B:1F:9B:45:E5:8E:52:5F:35:1F:F2:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD9C6876E6FDEC348A600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 400790 IP address blocks: 2001:470:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d9:c6:87:6e:6f:de:c3:48:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=cdc21ea3-384c-4e1d-9470-4c90af92fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:04:15:57:be:0d:46:a3:7c:09:43:3e:d5: 63:ac:41:f2:1c:97:55:d3:6e:98:a0:d4:a8:d9:ba: be:e7:e9:e3:00:17:0c:23:de:1f:0f:e6:7c:d1:af: 41:74:b1:db:0f:60:28:de:2e:98:b4:a0:c3:ab:e9: bb:30:f2:4c:b1:f6:f2:f0:5f:5a:19:69:54:e0:05: e3:d4:a6:61:46:81:53:0e:4e:6a:8b:e9:49:19:74: 73:28:00:99:e9:9b:e3:d4:56:36:5a:50:c5:a5:ab: 80:f6:4f:4c:62:4f:78:2d:48:17:3c:79:e4:a4:02: 6d:6c:20:45:7d:ee:3c:df:7d:42:0b:76:ec:7c:10: 40:55:8d:16:28:6c:34:9e:41:3e:98:91:01:6b:59: 54:6a:4c:46:f5:b2:b0:30:49:de:dc:4b:67:5d:fc: a9:c2:8f:f1:9e:21:4e:77:31:56:33:85:0f:c0:84: 03:28:0c:e0:96:8f:1f:8a:80:e1:36:0f:a1:dd:dc: 54:b6:70:10:46:44:f0:21:be:d4:3c:f5:7c:82:5f: 04:e1:25:9e:a5:b5:c9:13:69:53:1e:fe:51:4b:2c: fa:43:fc:49:f9:74:04:a9:d8:af:43:b1:75:0e:56: 3d:1f:bc:43:2b:42:7b:7e:d0:2a:80:b8:c0:1f:2d: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D3:D5:86:5A:B5:91:91:3B:1F:9B:45:E5:8E:52:5F:35:1F:F2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:15:a5:94:4f:ef:a6:34:b1:a0:8f:76:6d:c4:6e:07:2f:2d: d9:74:70:d7:00:c9:b7:30:cc:e0:60:f5:a3:54:93:dd:32:ee: 6f:ff:c1:69:a3:ca:97:90:2e:60:f0:62:f6:e8:1b:10:8d:e0: 78:42:b3:4e:55:76:4d:88:c1:37:ce:e2:bc:f0:cb:f9:a8:a0: 14:ff:d0:29:e2:47:c3:ab:b5:8b:ba:e5:7e:a3:30:e6:20:2a: 17:c3:20:2c:ff:14:20:bf:49:47:ac:02:b1:b7:db:59:76:19: 48:c3:37:f4:92:10:f1:2f:17:bc:97:4a:fb:95:52:4f:6f:b2: 14:be:25:2d:a3:ce:ad:16:9e:2f:a8:19:01:68:f1:ef:8d:58: 45:39:5a:4f:82:a8:bc:c6:d7:75:91:8e:b2:31:49:ba:6a:a1: 2e:f5:51:17:46:61:f3:4a:97:26:a0:53:ef:1a:9a:41:40:3f: 84:85:69:cd:15:92:03:e7:3b:6e:66:9a:fa:36:da:2d:7e:a5: b8:1c:0f:99:33:46:44:85:28:76:4b:59:26:22:0c:fb:46:8b: b4:c0:f6:5a:ec:fb:4f:a1:08:cb:89:17:88:89:35:1f:28:e2: 48:07:ae:13:22:2b:a5:ea:32:57:04:0a:35:eb:96:65:54:6f: 57:7e:27:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9nGh25v3sNIpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2RjMjFlYTMtMzg0Yy00ZTFkLTk0NzAtNGM5MGFmOTJmZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvUEFVe+DUajfAlDPtVjrEHyHJdV026YoNSo 2bq+5+njABcMI94fD+Z80a9BdLHbD2Ao3i6YtKDDq+m7MPJMsfby8F9aGWlU4AXj 1KZhRoFTDk5qi+lJGXRzKACZ6Zvj1FY2WlDFpauA9k9MYk94LUgXPHnkpAJtbCBF fe48331CC3bsfBBAVY0WKGw0nkE+mJEBa1lUakxG9bKwMEne3EtnXfypwo/xniFO dzFWM4UPwIQDKAzglo8fioDhNg+h3dxUtnAQRkTwIb7UPPV8gl8E4SWepbXJE2lT Hv5RSyz6Q/xJ+XQEqdivQ7F1DlY9H7xDK0J7ftAqgLjAHy1YSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzT1YZatZGROx+bReWOUl81H/KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzYjBiYzQtZGY0ZS0z MjA4LThjZGYtMDQwMjA4MzJiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgVpZRP76Y0saCPdm3EbgcvLdl0cNcAybcwzOBg9aNUk90y7m// wWmjypeQLmDwYvboGxCN4HhCs05Vdk2IwTfO4rzwy/mooBT/0CniR8OrtYu65X6j MOYgKhfDICz/FCC/SUesArG321l2GUjDN/SSEPEvF7yXSvuVUk9vshS+JS2jzq0W ni+oGQFo8e+NWEU5Wk+CqLzG13WRjrIxSbpqoS71URdGYfNKlyagU+8amkFAP4SF ac0VkgPnO25mmvo22i1+pbgcD5kzRkSFKHZLWSYiDPtGi7TA9lrs+0+hCMuJF4iJ NR8o4kgHrhMiK6XqMlcECjXrlmVUb1d+J0M= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:40 2025 by rpki-client