$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa File: 539d8fb8-7def-3a33-8209-7937a9a22bae.roa (raw, json) Hash identifier: FVjdKIWqO2/2tsleDZTBxJyYWzDK2eAdsZawMO9FK6U= Subject key identifier: 18:C6:D4:8A:56:FA:5F:45:9C:E7:EA:75:59:CB:82:4E:57:F8:7E:58 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD1E92D6909A377743280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 62206 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d1:e9:2d:69:09:a3:77:74:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2527b9ea-bebd-4c43-b3d7-695fc59a21ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:75:a0:5a:32:53:5c:55:f9:f6:83:87:da: 2e:96:5a:f7:39:c9:d2:e2:86:dd:76:a1:85:2b:4d: ed:72:af:1b:09:59:46:88:50:6f:52:e5:67:51:ac: dd:83:ce:d2:f0:ff:fe:99:b7:42:53:04:d7:49:69: 6e:66:dd:4c:83:05:13:49:c4:c9:ba:95:cd:46:14: 1d:9e:fc:74:a7:53:c3:3a:34:b8:05:52:db:e3:0a: e1:56:2f:6e:db:18:f6:aa:f1:0a:d2:cd:8e:59:d6: ab:94:54:14:81:4e:a2:73:e8:10:1e:fd:d1:37:c5: 0e:66:9e:50:4f:8e:1b:9e:89:e7:4b:c1:c6:e8:bd: 10:f2:6e:3b:57:7d:05:8b:f1:19:e4:59:13:d0:96: f3:b7:7b:2e:52:fa:05:1c:22:d5:dc:43:ed:22:5d: 66:75:d9:b3:bc:7f:08:6e:d2:7f:87:a9:ea:6c:7b: 8e:4e:44:72:3e:2e:92:07:aa:62:c4:3d:96:dd:3a: 93:ce:79:94:2c:1b:27:47:13:7e:13:71:eb:17:f9: 85:d5:7d:e4:0e:8e:2c:a1:81:61:67:7c:23:19:6a: c5:08:df:5c:11:38:27:41:b1:ad:59:c3:3e:fc:a1: f5:11:10:74:32:19:72:82:e1:38:e8:f1:51:0a:f4: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:D4:8A:56:FA:5F:45:9C:E7:EA:75:59:CB:82:4E:57:F8:7E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:64:7b:e9:41:ed:63:25:ee:89:3e:33:38:b9:2f:5e:d9:70: b6:23:93:3c:1a:44:c5:29:02:44:5f:59:c2:25:f6:4a:73:90: 54:fd:0b:cd:42:20:ab:29:37:69:ca:28:d7:61:3a:ca:38:99: 90:b4:ed:25:b8:63:b5:bc:b9:51:e1:65:93:91:57:3c:16:96: a1:5c:2d:f9:54:51:bf:7c:dd:8b:5f:a6:f2:b9:dd:cc:d1:5c: 5f:ec:6d:c4:fe:23:13:c1:78:0b:b8:03:0d:c3:d8:73:93:4a: 31:ed:3c:c5:b1:37:f0:77:5a:0f:d7:68:d5:e3:f9:f0:0d:ff: 87:59:98:c7:5c:bf:87:5f:ce:9a:3f:04:c6:ac:d8:64:01:6b: 74:3f:f3:ec:25:35:db:49:ed:73:8b:1c:e4:48:33:34:2d:d4: 71:fb:6b:5a:41:b1:33:db:31:64:9a:f1:37:52:02:0a:9a:39: 50:ac:d2:b7:04:09:c1:27:ef:02:f3:96:de:03:d0:72:53:77: 5d:80:0d:af:61:04:17:43:aa:c4:57:82:0e:81:e5:e2:ab:2c: bb:24:7c:87:23:e6:93:0d:82:03:b8:04:35:e0:b6:b1:af:a9: 98:35:f8:58:26:0f:74:87:3f:86:e7:95:1d:51:04:28:4e:16: 85:46:4d:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9HpLWkJo3d0MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjUyN2I5ZWEtYmViZC00YzQzLWIzZDctNjk1ZmM1OWEyMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgd1oFoyU1xV+faDh9oullr3OcnS4obddqGF K03tcq8bCVlGiFBvUuVnUazdg87S8P/+mbdCUwTXSWluZt1MgwUTScTJupXNRhQd nvx0p1PDOjS4BVLb4wrhVi9u2xj2qvEK0s2OWdarlFQUgU6ic+gQHv3RN8UOZp5Q T44bnonnS8HG6L0Q8m47V30Fi/EZ5FkT0Jbzt3suUvoFHCLV3EPtIl1mddmzvH8I btJ/h6nqbHuOTkRyPi6SB6pixD2W3TqTznmULBsnRxN+E3HrF/mF1X3kDo4soYFh Z3wjGWrFCN9cETgnQbGtWcM+/KH1ERB0MhlyguE46PFRCvTYjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjG1IpW+l9FnOfqdVnLgk5X+H5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTM5ZDhmYjgtN2RlZi0z YTMzLTgyMDktNzkzN2E5YTIyYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtke+lB7WMl7ok+Mzi5L17ZcLYjkzwaRMUpAkRfWcIl9kpzkFT9 C81CIKspN2nKKNdhOso4mZC07SW4Y7W8uVHhZZORVzwWlqFcLflUUb983YtfpvK5 3czRXF/sbcT+IxPBeAu4Aw3D2HOTSjHtPMWxN/B3Wg/XaNXj+fAN/4dZmMdcv4df zpo/BMas2GQBa3Q/8+wlNdtJ7XOLHORIMzQt1HH7a1pBsTPbMWSa8TdSAgqaOVCs 0rcECcEn7wLzlt4D0HJTd12ADa9hBBdDqsRXgg6B5eKrLLskfIcj5pMNggO4BDXg trGvqZg1+FgmD3SHP4bnlR1RBChOFoVGTW0= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:00 2025 by rpki-client