$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/771c8c0c-fe98-37f1-aa99-297d2fb26425.roa File: 771c8c0c-fe98-37f1-aa99-297d2fb26425.roa (raw, json) Hash identifier: 3xQMmyDsBaZ5ExRFXkEnNeva6PBdnjKirNj/okcdWAE= Subject key identifier: CA:16:91:65:14:6D:35:7E:E9:61:66:3B:3D:71:2A:98:4F:F3:0B:95 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A78E602572C86151017D5E900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/771c8c0c-fe98-37f1-aa99-297d2fb26425.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 10988 IP address blocks: 2001:470:368::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e6:02:57:2c:86:15:10:17:d5:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=1b2481bf-6033-41c0-b2a1-b7dea7680d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:89:5a:de:42:77:cf:d4:68:88:0f:2a:5a: 3c:d3:a7:e1:ae:40:7b:9c:b5:fa:4a:d7:16:ee:b1: df:dd:d0:17:66:02:16:22:50:a1:18:6b:28:f4:2e: b1:21:81:70:04:4f:d3:62:f3:13:31:ea:4b:ca:52: 1a:9a:0f:3c:af:d2:57:d8:e4:ac:0f:5c:01:3f:b9: ef:63:dd:29:a1:2e:a2:75:3b:3f:32:17:28:b6:06: 57:40:94:df:6c:7c:d1:0d:9a:10:7f:7f:72:4f:65: 7d:57:62:81:38:09:89:78:d1:83:3a:d7:ab:9e:95: 2d:c8:3b:15:62:cc:cb:ca:98:ee:67:4e:b3:83:b4: 62:62:e8:7a:f4:62:b4:b5:3a:c5:70:28:bb:40:f8: 92:a3:9d:26:54:74:c7:55:d1:67:49:81:05:17:da: d4:3c:9c:af:cd:13:e4:63:06:e9:c2:51:3a:64:36: ad:9b:50:70:94:ac:06:4e:b5:2c:a4:f7:45:24:cd: ae:40:ec:6e:fd:f3:77:12:ad:e7:d6:8e:3a:71:4e: a2:94:57:41:59:c8:36:9c:fc:3f:15:f9:c4:8c:4d: b3:df:de:8d:99:f5:3d:2d:2f:23:ac:eb:d6:60:8d: 84:81:52:5f:ee:0c:d1:f6:6a:72:1c:91:56:84:b5: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:91:65:14:6D:35:7E:E9:61:66:3B:3D:71:2A:98:4F:F3:0B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/771c8c0c-fe98-37f1-aa99-297d2fb26425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:368::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:52:7a:b6:40:ad:db:c3:b0:fc:13:c0:aa:f4:54:a2:71:94: 70:c2:37:d0:3e:12:8d:9b:a4:7f:01:d7:3a:65:48:eb:eb:44: 8d:4d:67:f2:79:a5:8a:30:03:37:8d:bc:4f:6f:78:a0:aa:a0: d9:75:54:49:88:a7:4e:cd:e6:0c:22:26:09:01:7a:74:7b:73: 7c:81:bc:7e:95:e5:24:f7:f0:ef:45:db:8c:ce:f6:73:b8:70: 09:ca:6f:e1:2d:0b:8e:d7:7a:7d:9d:59:71:f4:23:f4:0d:46: 3b:d9:58:40:6d:31:96:ad:88:8d:1f:56:04:ac:ff:75:0b:bc: 63:f7:59:fa:d2:76:f4:6f:1c:4a:c7:07:0e:62:61:4a:66:b6: 56:e7:1f:a9:e5:05:4c:72:09:5e:8d:ac:c1:f7:12:1b:4d:a7: 6a:5b:c1:5a:5a:8d:4d:6b:7e:76:49:80:21:41:c8:44:d4:fd: a9:86:b8:98:b7:46:6b:1c:f1:e1:b2:a7:29:a5:6e:e4:7e:7d: 69:56:a6:88:b0:46:91:7c:f8:3b:a5:39:57:45:9c:02:49:b4: fc:ff:0e:77:75:49:98:e6:88:7a:2c:e2:35:cb:e8:88:6f:6e: 40:30:e7:20:90:8b:be:a7:38:8b:ca:06:e7:5d:0a:40:95:8a: 05:c7:ff:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp45gJXLIYVEBfV6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk MWIyNDgxYmYtNjAzMy00MWMwLWIyYTEtYjdkZWE3NjgwZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgyJWt5Cd8/UaIgPKlo806fhrkB7nLX6StcW 7rHf3dAXZgIWIlChGGso9C6xIYFwBE/TYvMTMepLylIamg88r9JX2OSsD1wBP7nv Y90poS6idTs/MhcotgZXQJTfbHzRDZoQf39yT2V9V2KBOAmJeNGDOternpUtyDsV YszLypjuZ06zg7RiYuh69GK0tTrFcCi7QPiSo50mVHTHVdFnSYEFF9rUPJyvzRPk YwbpwlE6ZDatm1BwlKwGTrUspPdFJM2uQOxu/fN3Eq3n1o46cU6ilFdBWcg2nPw/ FfnEjE2z396NmfU9LS8jrOvWYI2EgVJf7gzR9mpyHJFWhLVlaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoWkWUUbTV+6WFmOz1xKphP8wuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzcxYzhjMGMtZmU5OC0z N2YxLWFhOTktMjk3ZDJmYjI2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERSerZArdvDsPwTwKr0VKJxlHDCN9A+Eo2bpH8B1zplSOvrRI1N Z/J5pYowAzeNvE9veKCqoNl1VEmIp07N5gwiJgkBenR7c3yBvH6V5ST38O9F24zO 9nO4cAnKb+EtC47Xen2dWXH0I/QNRjvZWEBtMZatiI0fVgSs/3ULvGP3WfrSdvRv HErHBw5iYUpmtlbnH6nlBUxyCV6NrMH3EhtNp2pbwVpajU1rfnZJgCFByETU/amG uJi3Rmsc8eGypymlbuR+fWlWpoiwRpF8+DulOVdFnAJJtPz/Dnd1SZjmiHos4jXL 6IhvbkAw5yCQi76nOIvKBuddCkCVigXH/1o= -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:51 2025 by rpki-client