$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa File: 5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa (raw, json) Hash identifier: 6bEiLXnRKQH9IZz24wZW4QusYP7w0BiuYUXyBjHF928= Subject key identifier: E2:AC:B9:2E:30:96:53:8E:9A:22:D9:7D:E4:C3:4A:5E:3F:1C:4D:65 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCCA0981CE797B984DFA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36728 IP address blocks: 2001:470:196::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cc:a0:98:1c:e7:97:b9:84:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=72df5a83-c81b-4b0f-a41e-47c9ca0b5dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:bd:5e:b5:e3:09:cd:27:41:5c:eb:ce:56: d3:ae:08:c5:9d:3c:52:dd:03:83:6b:8a:f2:41:17: 30:d4:a5:c4:f4:b9:c5:52:c3:e5:99:b2:d5:8e:91: 2f:1d:4f:01:63:5e:81:14:86:07:48:f6:d3:a6:24: 64:1f:e3:21:d0:9e:ce:b3:b9:ba:3f:f5:af:f4:71: aa:0a:b9:d1:30:7a:b7:bb:1e:9f:db:02:f8:74:c3: 4c:72:b2:65:80:8d:cd:39:13:3d:8e:a0:d0:d8:e8: d7:76:78:53:2f:34:89:ea:aa:0e:df:2d:74:7f:23: 8b:59:49:01:3c:ed:ea:ae:f4:57:3e:78:73:f0:7b: bc:50:7c:74:80:09:da:d4:a3:cc:8c:19:63:85:00: 23:59:a5:a1:9f:30:0a:64:bb:c3:d7:c0:71:7a:8e: 83:ba:49:5d:0d:79:77:77:98:9f:73:69:40:12:06: 1c:b4:19:1d:ba:81:d8:af:32:96:3f:71:41:d4:e2: 37:8d:20:9e:9a:6c:df:e8:fb:ac:a2:80:7b:38:36: 91:c5:e5:ce:e3:05:c3:7b:a2:42:68:f0:ad:17:a7: 87:2f:f5:f5:5b:1a:fe:dc:e6:b9:a4:04:2e:49:1e: 5e:65:1a:04:5f:1d:93:c8:3a:f2:ce:ea:77:e4:4f: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:B9:2E:30:96:53:8E:9A:22:D9:7D:E4:C3:4A:5E:3F:1C:4D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:196::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:78:1a:b0:11:d6:aa:d2:18:ad:c5:44:d8:f2:7b:09:5d:1c: 68:24:2e:57:c0:04:4e:1d:bf:21:bf:a8:57:18:f6:50:4f:88: 4c:36:7f:97:9c:c2:8b:e6:96:36:50:6b:27:28:31:61:7c:a1: f7:ce:7f:d7:21:dd:2d:a3:74:49:64:ba:1e:4b:ee:bd:c7:77: d7:c1:f7:6c:0f:df:48:29:a6:0c:9a:3b:4c:ab:85:f5:bd:7c: 07:5c:d4:81:41:61:fa:98:8b:2a:eb:b9:98:74:c8:cc:4f:55: 3d:50:e3:02:b0:03:ff:1c:d4:1d:be:7d:d2:68:f8:79:2e:00: 76:0b:f9:5c:f6:ad:63:5f:2c:dd:f0:5d:e4:68:64:92:af:1e: d6:06:d5:19:32:ed:57:53:7b:b9:ff:f4:c0:fc:dd:aa:b5:fc: e8:a3:c8:d6:b7:0a:90:dd:23:ef:52:dd:c7:2f:12:58:33:76: 8d:4a:19:1b:ab:35:7d:14:3b:70:d7:0c:3d:4f:d3:69:c9:c8: b8:93:33:bd:e0:5a:14:c2:26:05:a7:8e:c0:af:e7:d9:6b:5b: 5f:90:66:37:8b:9e:33:75:db:78:22:49:23:6f:20:8a:fd:e4: bc:82:54:6b:cb:42:0f:e8:cb:b8:29:68:99:32:d5:5f:58:1c: 9a:80:0c:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8ygmBznl7mE36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzJkZjVhODMtYzgxYi00YjBmLWE0MWUtNDdjOWNhMGI1ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaS9XrXjCc0nQVzrzlbTrgjFnTxS3QODa4ry QRcw1KXE9LnFUsPlmbLVjpEvHU8BY16BFIYHSPbTpiRkH+Mh0J7Os7m6P/Wv9HGq CrnRMHq3ux6f2wL4dMNMcrJlgI3NORM9jqDQ2OjXdnhTLzSJ6qoO3y10fyOLWUkB PO3qrvRXPnhz8Hu8UHx0gAna1KPMjBljhQAjWaWhnzAKZLvD18Bxeo6DukldDXl3 d5ifc2lAEgYctBkduoHYrzKWP3FB1OI3jSCemmzf6PusooB7ODaRxeXO4wXDe6JC aPCtF6eHL/X1Wxr+3Oa5pAQuSR5eZRoEXx2TyDryzup35E8pywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOKsuS4wllOOmiLZfeTDSl4/HE1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE2MWM2YzYtY2Y2NC0z MDE3LTkyZTgtMmIzN2E2YWFiNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJh4GrAR1qrSGK3FRNjyewldHGgkLlfABE4dvyG/qFcY9lBPiEw2 f5ecwovmljZQaycoMWF8offOf9ch3S2jdElkuh5L7r3Hd9fB92wP30gppgyaO0yr hfW9fAdc1IFBYfqYiyrruZh0yMxPVT1Q4wKwA/8c1B2+fdJo+HkuAHYL+Vz2rWNf LN3wXeRoZJKvHtYG1Rky7VdTe7n/9MD83aq1/OijyNa3CpDdI+9S3ccvElgzdo1K GRurNX0UO3DXDD1P02nJyLiTM73gWhTCJgWnjsCv59lrW1+QZjeLnjN123giSSNv IIr95LyCVGvLQg/oy7gpaJky1V9YHJqADEQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:42:09 2025 by rpki-client