$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52f409b9-478c-336c-ab72-b8ace1ddee16.roa File: 52f409b9-478c-336c-ab72-b8ace1ddee16.roa (raw, json) Hash identifier: oERuUhX2UfDf1BL4Lf1NhhMsN4CASTrljsZsZcCOe7I= Subject key identifier: F4:DE:81:1E:B4:0B:BC:3A:24:61:18:B2:79:02:53:74:DE:A5:2C:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF9E9F4C07BC900DD2A42 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52f409b9-478c-336c-ab72-b8ace1ddee16.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 2728 IP address blocks: 2001:470:237::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f9:e9:f4:c0:7b:c9:00:dd:2a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a5ef1c81-6927-4c1c-afd3-46bcca8dfeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:60:4a:fe:f7:4b:1e:e2:69:12:e9:ca:03: 23:ee:85:81:da:70:a5:79:96:38:3f:03:18:4e:69: a4:a3:84:82:29:74:a0:b8:07:4a:5b:82:b8:df:d6: b8:26:b3:6b:29:41:0d:62:84:96:70:2b:15:4f:ab: c5:ab:73:d2:c5:c2:1c:b0:40:c6:10:16:9d:02:bc: 21:34:de:55:72:a6:be:d1:10:3f:02:81:ab:72:49: 68:19:eb:2e:da:d0:67:69:bf:80:26:da:4a:fa:51: 3a:ed:a7:8d:61:78:33:d9:d4:04:79:ae:c8:08:1f: e5:6b:01:2b:8e:8b:f7:0c:20:79:46:87:78:50:b3: fa:c3:90:50:61:53:e5:de:45:cd:f3:83:46:e5:89: 6e:fa:8e:05:10:66:50:01:16:81:2c:24:c1:1d:4a: 43:fb:20:ec:1d:c8:44:a3:8b:7b:99:a1:31:27:ca: 98:1d:2c:ae:33:c9:ed:a3:54:bb:d7:44:db:ba:ec: c7:73:c6:c5:0c:71:86:14:92:4a:93:0a:5f:2c:59: ef:4d:84:47:b6:45:5c:06:29:1c:d2:72:f1:e7:b2: 7e:cc:f3:51:b5:ab:dd:aa:a5:d6:2c:25:d5:9e:f1: 15:95:b0:81:44:f3:00:94:e2:9e:dc:ec:fd:1c:f3: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DE:81:1E:B4:0B:BC:3A:24:61:18:B2:79:02:53:74:DE:A5:2C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52f409b9-478c-336c-ab72-b8ace1ddee16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:237::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:51:b6:cc:21:de:9f:a5:ea:b3:70:f5:b8:ff:92:17:8a:bd: ee:5e:6c:ea:59:a9:aa:77:28:01:6b:76:09:e1:2b:26:5b:2d: 20:a1:e7:72:af:cb:b7:f9:e4:29:ab:12:91:e2:52:06:af:a8: 52:6c:df:44:e0:79:f8:18:36:06:1d:2c:af:34:fa:68:44:a7: a6:fa:09:9f:92:1e:1a:79:3a:86:fd:5a:57:4d:c1:84:92:97: 02:4d:ef:2a:6d:81:c3:92:b5:a2:33:20:1f:c2:1f:dc:b9:84: e5:44:10:fe:41:43:80:65:d1:26:3b:9c:95:1c:54:35:93:2d: 62:50:e4:97:50:cf:5b:c0:01:91:28:4a:32:0c:f0:1a:a9:b4: 93:90:47:36:44:f6:61:b3:27:cf:7f:72:4d:f6:5f:95:7a:68: 8e:5c:82:a5:e0:b3:49:cd:36:e9:3f:c4:23:d9:e1:91:15:16: f1:7b:d8:6d:69:9d:5b:21:00:7f:98:c7:ff:b1:35:8f:ac:11: 06:3f:07:20:d7:da:f5:dd:9b:f0:1d:23:fe:88:62:99:08:ee: 33:43:71:24:65:c3:c8:a2:04:6b:e9:5c:1f:08:08:18:06:dc: 30:a2:7b:48:c9:f2:00:2a:8c:d0:b5:a2:fa:f4:b7:33:e1:45: 86:61:7c:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/np9MB7yQDdKkIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTVlZjFjODEtNjkyNy00YzFjLWFmZDMtNDZiY2NhOGRmZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb9gSv73Sx7iaRLpygMj7oWB2nCleZY4PwMY Tmmko4SCKXSguAdKW4K439a4JrNrKUENYoSWcCsVT6vFq3PSxcIcsEDGEBadArwh NN5Vcqa+0RA/AoGrckloGesu2tBnab+AJtpK+lE67aeNYXgz2dQEea7ICB/lawEr jov3DCB5Rod4ULP6w5BQYVPl3kXN84NG5Ylu+o4FEGZQARaBLCTBHUpD+yDsHchE o4t7maExJ8qYHSyuM8nto1S710TbuuzHc8bFDHGGFJJKkwpfLFnvTYRHtkVcBikc 0nLx57J+zPNRtavdqqXWLCXVnvEVlbCBRPMAlOKe3Oz9HPMNgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTegR60C7w6JGEYsnkCU3TepSyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTJmNDA5YjktNDc4Yy0z MzZjLWFiNzItYjhhY2UxZGRlZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALpRtswh3p+l6rNw9bj/kheKve5ebOpZqap3KAFrdgnhKyZbLSCh 53Kvy7f55CmrEpHiUgavqFJs30TgefgYNgYdLK80+mhEp6b6CZ+SHhp5Oob9WldN wYSSlwJN7yptgcOStaIzIB/CH9y5hOVEEP5BQ4Bl0SY7nJUcVDWTLWJQ5JdQz1vA AZEoSjIM8BqptJOQRzZE9mGzJ89/ck32X5V6aI5cgqXgs0nNNuk/xCPZ4ZEVFvF7 2G1pnVshAH+Yx/+xNY+sEQY/ByDX2vXdm/AdI/6IYpkI7jNDcSRlw8iiBGvpXB8I CBgG3DCie0jJ8gAqjNC1ovr0tzPhRYZhfNI= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:47 2025 by rpki-client