$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa File: 63a0e981-8b68-34f7-a310-5a64803821f1.roa (raw, json) Hash identifier: vtzPfnKHoBnNZJWUXtVjSMbgEj8n1CcyFp0YDhN+hRw= Subject key identifier: 31:45:20:F7:F8:3A:B0:88:34:E8:39:BC:2B:86:9C:A2:2A:B8:2E:62 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFEEC9252D79B97F90580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 47702 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fe:ec:92:52:d7:9b:97:f9:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=dbc791d9-f6e6-4e41-85bd-3a7ef020fe4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:51:63:e3:32:eb:84:0a:f6:11:5a:dd:86:dc: 8c:3d:e5:91:74:d8:82:d5:d2:b2:e6:00:bd:d4:8d: 4c:24:77:f7:9c:a0:b0:17:71:fb:13:b7:dd:53:96: e6:98:04:cd:f5:11:ea:fe:b1:6c:aa:21:ed:b1:c5: b6:1a:b2:52:ea:b6:89:bd:be:5a:2e:13:cf:a1:77: bd:28:df:23:60:1b:ef:e1:77:c0:72:26:e8:37:1b: a9:21:6d:9e:17:7c:73:33:c3:a2:a2:a9:e8:17:00: 5c:a9:75:cc:17:8c:8b:fc:83:25:4a:5f:54:ab:b9: 2f:2f:53:b1:e4:a3:ad:fd:68:4f:b0:f5:77:03:97: 45:0f:12:42:55:b1:d0:5e:11:ea:c2:b9:e0:9d:fc: 2d:67:3c:20:05:83:38:0a:42:5a:a5:0a:6b:80:f9: 91:33:e4:4b:02:19:86:9d:0e:7d:ed:9c:ab:83:c2: 2a:cf:d2:be:09:95:79:bb:0c:1d:8a:7c:73:0a:71: a3:ff:de:af:ad:33:26:a5:44:cc:a7:3c:15:eb:ce: 45:af:d6:90:4c:16:3a:6d:43:5b:75:87:31:60:06: 6d:1d:6c:14:e2:11:01:0a:ff:6d:cf:75:0c:06:e9: 41:42:9d:9f:3a:45:2b:78:10:24:88:f2:fc:37:86: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:45:20:F7:F8:3A:B0:88:34:E8:39:BC:2B:86:9C:A2:2A:B8:2E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f1:44:82:b7:9d:cc:31:f0:74:0f:48:35:69:a9:84:59:d9: f9:44:8e:c5:49:11:10:45:ec:6f:9a:54:fa:11:ee:da:11:9c: 78:07:2c:ae:38:2a:3b:fe:99:51:da:99:b9:ad:53:9e:4e:84: 67:c9:36:53:20:06:00:83:a9:84:5c:1c:9e:28:f1:b8:cb:15: 7d:a0:09:62:6c:c9:e9:14:9f:f3:95:38:74:20:ba:1f:b1:d9: 51:77:db:ff:cd:a2:f8:2f:c7:43:e7:36:92:85:1e:c0:87:e0: a6:b1:18:07:15:9a:1e:c3:a7:95:28:35:43:0b:d4:02:35:1f: 0a:59:09:2f:64:ae:d6:65:df:5d:9a:0a:c8:2f:30:56:65:c6: 3e:cb:56:24:5c:43:24:cb:19:8f:87:e4:44:08:87:87:b3:b7: 9d:4a:25:94:f6:91:c0:68:1f:4f:d5:50:44:88:bd:d2:37:16: 1a:06:e5:b4:de:2b:57:b4:5d:e1:82:49:27:c6:2f:cd:ca:23: 13:03:96:7a:fe:d0:c7:e1:8b:6e:6a:18:f0:90:58:9b:6d:8d: da:89:4b:ef:77:b7:b6:ef:e8:8c:97:cd:a7:90:09:d2:77:6f: 49:04:8d:d4:bb:d8:1d:62:a9:10:92:af:5b:6c:8f:b7:4a:f5: 77:c3:07:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/7sklLXm5f5BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGJjNzkxZDktZjZlNi00ZTQxLTg1YmQtM2E3ZWYwMjBmZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FFj4zLrhAr2EVrdhtyMPeWRdNiC1dKy5gC9 1I1MJHf3nKCwF3H7E7fdU5bmmATN9RHq/rFsqiHtscW2GrJS6raJvb5aLhPPoXe9 KN8jYBvv4XfAciboNxupIW2eF3xzM8OioqnoFwBcqXXMF4yL/IMlSl9Uq7kvL1Ox 5KOt/WhPsPV3A5dFDxJCVbHQXhHqwrngnfwtZzwgBYM4CkJapQprgPmRM+RLAhmG nQ597Zyrg8Iqz9K+CZV5uwwdinxzCnGj/96vrTMmpUTMpzwV685Fr9aQTBY6bUNb dYcxYAZtHWwU4hEBCv9tz3UMBulBQp2fOkUreBAkiPL8N4aGowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFFIPf4OrCINOg5vCuGnKIquC5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjNhMGU5ODEtOGI2OC0z NGY3LWEzMTAtNWE2NDgwMzgyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnxRIK3ncwx8HQPSDVpqYRZ2flEjsVJERBF7G+aVPoR7toRnHgH LK44Kjv+mVHambmtU55OhGfJNlMgBgCDqYRcHJ4o8bjLFX2gCWJsyekUn/OVOHQg uh+x2VF32//Novgvx0PnNpKFHsCH4KaxGAcVmh7Dp5UoNUML1AI1HwpZCS9krtZl 312aCsgvMFZlxj7LViRcQyTLGY+H5EQIh4ezt51KJZT2kcBoH0/VUESIvdI3FhoG 5bTeK1e0XeGCSSfGL83KIxMDlnr+0Mfhi25qGPCQWJttjdqJS+93t7bv6IyXzaeQ CdJ3b0kEjdS72B1iqRCSr1tsj7dK9XfDB1s= -----END CERTIFICATE-----Generated at Mon Aug 4 07:49:57 2025 by rpki-client