$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa File: 59f6def4-6e3c-367f-8602-c606eec4c6e1.roa (raw, json) Hash identifier: M8NNC+GKK7H8o5nIoCmFzdsRma78+Jy8+JAXglxrPhc= Subject key identifier: 95:EB:A8:55:7A:5D:36:67:B3:6B:A3:5E:10:BA:8B:D3:E9:39:45:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C003E527CA21A9F209E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 41695 IP address blocks: 2001:470:2a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:00:3e:52:7c:a2:1a:9f:20:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=49ad4d76-0501-4a26-9f5a-8ea4c59b4d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:8c:9f:c0:bf:0c:dc:41:d7:67:df:44:23: f1:3b:3b:43:8b:5f:85:1c:a7:8d:c5:de:19:36:7d: 25:47:a9:f4:5d:1f:cc:69:54:b6:b6:85:c2:1e:ef: 11:30:12:41:f6:6b:69:1e:37:b0:ac:c2:b5:82:20: 09:45:da:f9:ec:c0:ba:e4:6a:08:88:94:d3:24:34: 29:af:dc:ba:56:b5:f5:06:9a:58:6c:36:e0:27:4e: 2b:1e:a4:7e:4b:23:37:a4:08:85:b9:e6:98:63:7e: 76:c4:f6:bc:a8:67:c9:1e:8d:83:ee:c5:5b:6b:ab: 16:17:aa:2d:ca:60:23:0b:6d:a9:4a:47:31:b1:7e: 90:61:8a:d0:f0:4a:91:82:a9:1d:dc:f9:f0:32:b8: 51:da:16:0f:cd:4c:ce:b9:50:6f:1f:ce:44:a9:36: 44:96:45:95:00:2e:b9:f8:62:7b:77:92:ad:6c:5b: d8:1a:a9:1e:b0:a6:68:9a:e2:c4:1b:06:8d:f7:fc: ca:4b:f8:c3:3a:cf:d5:52:b6:82:e7:f4:94:5e:e2: c9:42:b4:b9:a5:0b:d2:84:81:c3:07:1a:6c:06:f6: fd:f0:42:6e:71:7d:a6:fb:9d:4e:69:e2:76:2d:56: 01:71:e3:2e:02:f2:15:88:e8:36:f3:2b:bc:d5:1e: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EB:A8:55:7A:5D:36:67:B3:6B:A3:5E:10:BA:8B:D3:E9:39:45:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:18:32:64:b2:17:50:1e:46:2d:74:84:36:c3:47:df:35:90: 1b:00:b3:c3:ba:b7:9b:e3:65:47:e8:74:93:4e:45:93:5d:2b: f1:94:df:1d:74:8a:a5:55:85:ce:d2:b6:16:16:06:1a:c3:d0: 20:7d:48:05:28:c3:b1:72:cd:14:3b:4b:f8:f0:1a:e6:94:a1: a4:8c:6f:ff:9e:de:6d:9c:85:4f:ba:29:20:18:ed:aa:fa:b1: c6:c0:34:78:ae:22:ad:70:83:4f:57:bd:a5:cb:00:8c:19:17: 21:ff:f0:74:91:6b:dd:86:1a:a9:92:98:56:11:c3:f9:4f:28: 5a:63:55:72:c3:20:71:fc:17:9f:ec:ba:90:81:0b:a0:16:64: f4:97:73:fb:dc:90:fd:46:e4:dd:48:72:55:2f:77:38:ad:e2: d4:40:0e:2c:e6:bc:3f:f9:be:7e:6f:14:ed:bd:69:3b:a0:26: 95:13:85:8c:15:a4:49:2f:6b:3c:c7:f2:a0:28:d6:5a:ff:86: 1b:4a:89:58:98:74:49:15:c8:7f:40:2a:71:9e:37:7d:c9:6b: b8:af:48:54:37:da:14:80:48:c6:64:45:5a:a5:13:ba:0e:a8: 83:84:11:28:13:e9:ee:f0:95:74:d7:f9:77:d4:3e:93:d9:e0: 1f:7a:57:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAA+UnyiGp8gngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDlhZDRkNzYtMDUwMS00YTI2LTlmNWEtOGVhNGM1OWI0ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfeMn8C/DNxB12ffRCPxOztDi1+FHKeNxd4Z Nn0lR6n0XR/MaVS2toXCHu8RMBJB9mtpHjewrMK1giAJRdr57MC65GoIiJTTJDQp r9y6VrX1BppYbDbgJ04rHqR+SyM3pAiFueaYY352xPa8qGfJHo2D7sVba6sWF6ot ymAjC22pSkcxsX6QYYrQ8EqRgqkd3PnwMrhR2hYPzUzOuVBvH85EqTZElkWVAC65 +GJ7d5KtbFvYGqkesKZomuLEGwaN9/zKS/jDOs/VUraC5/SUXuLJQrS5pQvShIHD BxpsBvb98EJucX2m+51OaeJ2LVYBceMuAvIViOg28yu81R64QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXrqFV6XTZns2ujXhC6i9PpOUVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTlmNmRlZjQtNmUzYy0z NjdmLTg2MDItYzYwNmVlYzRjNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAYMmSyF1AeRi10hDbDR981kBsAs8O6t5vjZUfodJNORZNdK/GU 3x10iqVVhc7SthYWBhrD0CB9SAUow7FyzRQ7S/jwGuaUoaSMb/+e3m2chU+6KSAY 7ar6scbANHiuIq1wg09XvaXLAIwZFyH/8HSRa92GGqmSmFYRw/lPKFpjVXLDIHH8 F5/supCBC6AWZPSXc/vckP1G5N1IclUvdzit4tRADizmvD/5vn5vFO29aTugJpUT hYwVpEkvazzH8qAo1lr/hhtKiViYdEkVyH9AKnGeN33Ja7ivSFQ32hSASMZkRVql E7oOqIOEESgT6e7wlXTX+XfUPpPZ4B96V9s= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:10 2025 by rpki-client