$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa File: 720391a4-507c-3987-b98a-c0b826af42f1.roa (raw, json) Hash identifier: gdnR/nv6YrYFk7ffMIaekw6B2e6mAG4vIfoHhptgn0Y= Subject key identifier: 7F:D4:E2:5D:E8:7C:96:73:A7:36:46:2E:C3:13:82:E4:1D:F9:CB:1E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFF330F7422D70E111940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 50607 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ff:33:0f:74:22:d7:0e:11:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a564e909-82de-4892-8d8e-aa5aa14a8342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4e:fa:cb:ff:97:f2:7c:5f:6a:24:e1:10:fa: fa:4f:6a:58:92:5e:87:60:19:31:76:e7:49:c6:bd: a4:1f:af:5c:ed:17:c5:ae:92:f4:33:4b:84:15:1b: 47:10:33:e1:2d:9b:82:99:86:c6:70:99:a1:ed:fb: af:68:18:9f:94:95:31:50:4e:63:bb:e9:fc:19:31: 02:2a:0c:60:e5:ca:74:17:45:1f:7b:25:5b:8c:63: 5f:b5:74:2d:eb:a7:fd:cf:df:17:91:3c:8e:1e:5b: 74:a4:91:30:b1:45:d1:b1:98:ab:bc:00:c9:73:20: af:c9:e5:e6:0e:2c:61:1c:ea:96:57:8c:06:d9:b1: d8:1d:99:c5:36:63:a3:50:c5:bc:b6:44:1d:0f:a7: f9:b3:e8:cd:07:49:ce:f8:d9:6f:ee:02:82:5c:8f: b8:e7:24:28:20:fd:fa:83:fc:87:98:cf:95:dc:87: 72:41:ae:65:6b:bb:b6:75:45:1c:f1:55:2f:45:2f: 38:ae:b3:1a:c3:5e:72:61:f5:05:31:e0:86:c5:1f: 47:c8:84:78:67:15:bc:ae:ed:8c:f9:20:0c:e3:7c: 54:48:43:61:39:5e:ad:bc:b8:ba:51:c1:5d:f9:91: bd:b7:dc:98:94:30:5e:38:84:6c:34:4f:e8:47:cd: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:E2:5D:E8:7C:96:73:A7:36:46:2E:C3:13:82:E4:1D:F9:CB:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5e:30:d4:1e:50:3e:22:f1:83:9e:97:8c:28:b8:97:14:f6: b9:5a:f6:0f:f0:88:8c:c1:88:6c:48:41:5c:ca:68:b0:8a:15: 86:b7:54:ea:31:53:88:48:8e:fb:5d:6c:33:08:a2:66:34:e6: 98:9c:cb:53:16:be:6a:c2:78:cb:a9:ea:66:c1:52:18:b6:4c: 1d:48:b1:a4:01:fe:a2:50:fe:89:03:fa:85:28:52:e5:47:2a: a3:0f:74:9f:55:a0:66:3a:55:49:cb:05:1d:a9:5b:7e:06:f2: c3:31:7c:50:a0:05:b1:4d:6a:27:e4:15:da:5c:d4:b6:11:cb: 64:94:73:83:1f:63:12:97:b5:aa:2a:44:11:f7:c8:46:4d:08: 37:94:a0:a4:00:d8:92:cc:2e:aa:8a:57:5b:2c:23:f3:1b:bc: 61:a5:28:9b:bd:4d:f3:43:8f:df:f6:cf:09:c8:ae:2c:a3:a9: 9b:41:c1:7b:12:8d:8a:e2:dc:c3:59:13:53:4b:a2:b1:64:c7: 3e:90:83:69:e3:36:d2:b4:21:4e:7f:46:16:b8:08:e0:bb:4d: 02:a6:22:ea:f8:93:40:7f:23:9f:74:fd:90:20:db:72:cd:c0: 85:a5:78:77:c5:64:c1:f3:e9:3b:0d:ad:39:c4:a6:90:93:51: 04:c1:72:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/8zD3Qi1w4RGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTU2NGU5MDktODJkZS00ODkyLThkOGUtYWE1YWExNGE4MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm076y/+X8nxfaiThEPr6T2pYkl6HYBkxdudJ xr2kH69c7RfFrpL0M0uEFRtHEDPhLZuCmYbGcJmh7fuvaBiflJUxUE5ju+n8GTEC Kgxg5cp0F0UfeyVbjGNftXQt66f9z98XkTyOHlt0pJEwsUXRsZirvADJcyCvyeXm DixhHOqWV4wG2bHYHZnFNmOjUMW8tkQdD6f5s+jNB0nO+Nlv7gKCXI+45yQoIP36 g/yHmM+V3IdyQa5la7u2dUUc8VUvRS84rrMaw15yYfUFMeCGxR9HyIR4ZxW8ru2M +SAM43xUSENhOV6tvLi6UcFd+ZG9t9yYlDBeOIRsNE/oR83QxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/U4l3ofJZzpzZGLsMTguQd+cseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzIwMzkxYTQtNTA3Yy0z OTg3LWI5OGEtYzBiODI2YWY0MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFeMNQeUD4i8YOel4wouJcU9rla9g/wiIzBiGxIQVzKaLCKFYa3 VOoxU4hIjvtdbDMIomY05picy1MWvmrCeMup6mbBUhi2TB1IsaQB/qJQ/okD+oUo UuVHKqMPdJ9VoGY6VUnLBR2pW34G8sMxfFCgBbFNaifkFdpc1LYRy2SUc4MfYxKX taoqRBH3yEZNCDeUoKQA2JLMLqqKV1ssI/MbvGGlKJu9TfNDj9/2zwnIriyjqZtB wXsSjYri3MNZE1NLorFkxz6Qg2njNtK0IU5/Rha4COC7TQKmIur4k0B/I590/ZAg 23LNwIWleHfFZMHz6TsNrTnEppCTUQTBcgM= -----END CERTIFICATE-----Generated at Mon Aug 4 07:49:01 2025 by rpki-client