$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa File: 71d9a8bc-387f-3265-aece-013d84c93629.roa (raw, json) Hash identifier: A1yMi5F/DXBELtCIL1BxJst5rM0kGV2srW0awX/90nk= Subject key identifier: A2:B6:A6:77:AF:E9:DE:99:5A:B7:FD:E0:0E:F7:35:1E:A3:5B:3C:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD3C2698BBD6316815E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 17210 IP address blocks: 2001:470:268::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d3:c2:69:8b:bd:63:16:81:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=87d65b46-9193-4a2c-bda5-5d67a7db0fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:62:ea:c3:b5:42:93:bb:72:03:d7:23:53: 46:b8:47:1a:b4:81:99:73:11:78:f1:5d:79:63:e0: 69:8b:0f:28:46:9d:0f:f8:48:44:c1:d5:51:ce:22: 6b:ad:1a:51:ca:c6:8c:4b:67:7e:ad:af:cb:62:c5: f8:1a:fa:cf:3d:ab:21:25:65:a9:e7:e6:c2:d6:f1: 83:6a:a0:67:8d:3a:c6:63:ec:d2:67:c5:6a:42:69: 3f:b1:ec:94:5b:30:b2:1d:cb:bc:9d:4d:28:ff:0b: e5:2e:c6:5f:7c:a1:71:57:9a:92:cb:fc:3e:60:69: 5a:6e:41:6d:bd:10:3d:a2:b2:8a:f3:49:68:68:49: 18:89:55:13:de:c6:a5:e6:9f:b2:18:31:c8:d6:0b: db:81:47:b8:85:76:97:41:00:83:ca:29:81:6e:03: fe:f6:4c:f3:12:b9:b7:9e:f8:bf:aa:99:10:e5:f2: 71:54:3a:58:2f:ab:0c:f4:30:2b:9e:bd:7e:9a:d2: 15:d1:ac:7c:59:83:69:a6:37:a9:ab:ac:11:51:31: dc:af:4f:1b:63:77:1c:82:65:3b:06:3a:cb:a4:24: ca:f8:42:dd:38:b5:53:6b:82:3d:65:17:05:ff:56: c8:9a:7d:39:b8:42:75:1d:e7:6c:13:f8:a4:5d:91: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:A6:77:AF:E9:DE:99:5A:B7:FD:E0:0E:F7:35:1E:A3:5B:3C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:268::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:f9:c8:f5:11:91:22:ec:ce:10:d2:e9:f0:31:f1:07:ca:1a: 7c:4e:7b:6e:f0:0e:59:33:3c:b6:9e:0e:50:c5:14:d0:fa:58: ec:87:09:43:8c:a5:27:ed:c0:ca:18:6a:39:b7:55:da:43:bc: c1:00:3f:4a:2b:dc:7e:26:48:3b:8e:87:7f:c4:86:21:b8:19: 3f:40:74:9f:ee:06:08:ef:ae:a3:15:12:15:d3:ca:6f:a8:33: 84:6d:ac:15:85:cf:22:64:2b:24:17:32:a1:b0:c6:f3:35:0e: 0c:37:76:d8:f6:f9:ba:aa:4c:cd:91:38:a1:d5:fb:66:ae:bb: e8:99:99:30:5f:c5:72:fe:ed:f3:54:3d:34:51:29:b9:5a:86: 20:a6:01:59:ea:88:61:7c:61:72:56:84:ae:fd:c9:2f:e2:47: b5:71:8e:4d:f6:3f:bd:be:cf:ac:d4:04:be:d0:f0:eb:f9:86: c4:70:4e:f9:ed:e8:a1:45:01:90:32:da:f3:7f:d0:fa:b2:08: 66:0a:54:89:7c:c3:69:f8:56:2e:41:d0:44:96:0c:96:51:f8: 7e:35:fd:05:9e:d0:e0:0c:c3:f0:07:66:1f:4c:4f:94:11:16: a7:08:cf:57:4f:88:16:5a:a5:a9:39:6e:fe:9d:48:86:46:65: 13:43:79:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9PCaYu9YxaBXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODdkNjViNDYtOTE5My00YTJjLWJkYTUtNWQ2N2E3ZGIwZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yti6sO1QpO7cgPXI1NGuEcatIGZcxF48V15 Y+Bpiw8oRp0P+EhEwdVRziJrrRpRysaMS2d+ra/LYsX4GvrPPashJWWp5+bC1vGD aqBnjTrGY+zSZ8VqQmk/seyUWzCyHcu8nU0o/wvlLsZffKFxV5qSy/w+YGlabkFt vRA9orKK80loaEkYiVUT3sal5p+yGDHI1gvbgUe4hXaXQQCDyimBbgP+9kzzErm3 nvi/qpkQ5fJxVDpYL6sM9DArnr1+mtIV0ax8WYNppjepq6wRUTHcr08bY3ccgmU7 BjrLpCTK+ELdOLVTa4I9ZRcF/1bImn05uEJ1HedsE/ikXZGsjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKK2pnev6d6ZWrf94A73NR6jWzwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzFkOWE4YmMtMzg3Zi0z MjY1LWFlY2UtMDEzZDg0YzkzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALX5yPURkSLszhDS6fAx8QfKGnxOe27wDlkzPLaeDlDFFND6WOyH CUOMpSftwMoYajm3VdpDvMEAP0or3H4mSDuOh3/EhiG4GT9AdJ/uBgjvrqMVEhXT ym+oM4RtrBWFzyJkKyQXMqGwxvM1Dgw3dtj2+bqqTM2ROKHV+2auu+iZmTBfxXL+ 7fNUPTRRKblahiCmAVnqiGF8YXJWhK79yS/iR7Vxjk32P72+z6zUBL7Q8Ov5hsRw Tvnt6KFFAZAy2vN/0PqyCGYKVIl8w2n4Vi5B0ESWDJZR+H41/QWe0OAMw/AHZh9M T5QRFqcIz1dPiBZapak5bv6dSIZGZRNDecM= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:46 2025 by rpki-client