$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa File: 6809fd3e-c551-35b8-b227-0265cf22951a.roa (raw, json) Hash identifier: 8lVBKzvEokaTT0nPBeyMjYcWUuqBztUlZjxebr8NnTM= Subject key identifier: 19:02:73:21:2B:D5:1F:7D:89:BD:08:C3:87:06:24:33:53:09:1F:75 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC024D11F712B7F4D0AD3EC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa Signing time: Tue 05 Aug 2025 01:30:09 +0000 ROA not before: Tue 05 Aug 2025 01:30:09 +0000 ROA not after: Mon 03 Nov 2025 02:30:09 +0000 asID: 19944 IP address blocks: 2001:470:2bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:24:d1:1f:71:2b:7f:4d:0a:d3:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 5 01:30:09 2025 GMT Not After : Nov 3 02:30:09 2025 GMT Subject: CN=421cfb4a-6e99-4f2f-b0d1-437322b94768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:75:ba:f4:ee:cb:3a:f0:1e:fd:aa:57:36:53: 4a:b3:b6:82:c9:8e:71:32:04:ec:0d:57:36:e3:65: 2b:22:6b:aa:a9:ac:a9:78:d7:01:de:ae:47:af:26: 23:7a:99:fb:ea:b9:93:a2:58:08:f9:0d:8f:6c:83: e7:da:22:3a:3b:55:76:b3:82:e4:f8:d7:25:03:a3: 52:d8:19:00:69:68:7c:ee:67:e1:f2:a8:cf:79:23: d3:72:4a:34:3b:a0:80:b7:fa:74:a7:2f:35:50:c7: eb:55:c0:bf:6b:27:53:f9:7a:0d:53:62:c6:ca:33: cf:5f:10:d2:a2:02:95:ec:e2:ab:1b:64:87:fa:42: e8:81:b5:6c:49:2c:2a:a7:5c:13:60:bd:6b:b2:f6: 08:77:83:f8:24:52:16:7a:26:c3:bd:86:fb:18:c4: c9:c1:c9:f4:0b:98:92:7f:88:0a:31:9b:71:29:c4: dd:84:30:f1:76:ac:4f:3d:8a:9c:7e:44:a0:32:80: f5:4b:64:7b:ad:70:e1:a4:1a:36:51:76:4f:a7:a8: ac:79:4d:ab:f5:f0:ac:6d:46:c5:3b:46:45:43:56: 5e:ef:75:04:ca:0e:25:e7:11:1e:10:03:36:36:b5: a2:70:81:fc:27:1d:e7:c6:59:82:1a:63:44:3b:fe: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:73:21:2B:D5:1F:7D:89:BD:08:C3:87:06:24:33:53:09:1F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:38:7d:42:60:40:ee:b9:3f:92:9e:d4:5a:06:00:0c:2a:e8: 90:90:e7:9e:3c:4b:0c:5e:c1:41:5e:e8:e1:98:3e:49:8a:a1: 23:a3:9a:ad:25:64:d6:37:7d:9c:0f:61:22:67:24:b6:13:97: 60:e1:a7:a2:b6:f4:dd:12:d8:de:14:ef:ce:67:57:a6:b3:0e: 3a:4b:c1:79:70:ab:05:f0:ad:97:67:2a:84:61:f2:6c:e9:cf: 5d:38:02:a5:41:9b:0e:33:49:41:93:27:be:86:2f:02:1c:97: c8:da:aa:e1:55:1e:6d:ca:7e:b0:11:47:4c:50:2c:69:f2:3a: 90:a4:0f:0a:bc:fe:d8:5d:f8:32:b2:64:5b:56:c6:9c:72:24: a8:cf:cc:3e:66:64:47:07:20:22:6d:48:e4:e8:57:36:b3:cb: 5e:ca:d6:82:af:60:f0:d9:ba:37:1b:0f:fe:b5:ad:a6:6b:da: db:f3:b7:db:ed:be:a1:83:36:ef:82:e5:19:97:3f:44:d8:ff: ac:f1:39:db:e6:c3:4d:45:49:c8:96:6c:19:eb:13:b2:0e:6a: 52:a5:ca:5c:14:7f:41:4b:65:66:1d:a0:ea:5e:c2:68:7c:e1: c9:1d:02:ad:0c:77:88:c2:ef:fe:ca:91:3f:4a:38:d6:04:ba: a4:e3:77:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAJNEfcSt/TQrT7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwNTAxMzAwOVoXDTI1MTEwMzAyMzAwOVowLzEtMCsGA1UEAxMk NDIxY2ZiNGEtNmU5OS00ZjJmLWIwZDEtNDM3MzIyYjk0NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83W69O7LOvAe/apXNlNKs7aCyY5xMgTsDVc2 42UrImuqqaypeNcB3q5HryYjepn76rmTolgI+Q2PbIPn2iI6O1V2s4Lk+NclA6NS 2BkAaWh87mfh8qjPeSPTcko0O6CAt/p0py81UMfrVcC/aydT+XoNU2LGyjPPXxDS ogKV7OKrG2SH+kLogbVsSSwqp1wTYL1rsvYId4P4JFIWeibDvYb7GMTJwcn0C5iS f4gKMZtxKcTdhDDxdqxPPYqcfkSgMoD1S2R7rXDhpBo2UXZPp6iseU2r9fCsbUbF O0ZFQ1Ze73UEyg4l5xEeEAM2NrWicIH8Jx3nxlmCGmNEO/5cowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkCcyEr1R99ib0Iw4cGJDNTCR91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjgwOWZkM2UtYzU1MS0z NWI4LWIyMjctMDI2NWNmMjI5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAME4fUJgQO65P5Ke1FoGAAwq6JCQ5548SwxewUFe6OGYPkmKoSOj mq0lZNY3fZwPYSJnJLYTl2Dhp6K29N0S2N4U785nV6azDjpLwXlwqwXwrZdnKoRh 8mzpz104AqVBmw4zSUGTJ76GLwIcl8jaquFVHm3KfrARR0xQLGnyOpCkDwq8/thd +DKyZFtWxpxyJKjPzD5mZEcHICJtSOToVzazy17K1oKvYPDZujcbD/61raZr2tvz t9vtvqGDNu+C5RmXP0TY/6zxOdvmw01FSciWbBnrE7IOalKlylwUf0FLZWYdoOpe wmh84ckdAq0Md4jC7/7KkT9KONYEuqTjd4o= -----END CERTIFICATE-----Generated at Sun Aug 10 10:41:39 2025 by rpki-client