$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bf3b858-7563-3e8c-880a-f9ee6525fb9a.roa File: 7bf3b858-7563-3e8c-880a-f9ee6525fb9a.roa (raw, json) Hash identifier: OqN3rhdzm4wBhXwm6CXQLntYuiaQ60oramIesKBU9YQ= Subject key identifier: 69:F0:60:38:6B:34:17:2C:48:6B:9C:BB:52:C1:60:A1:64:CD:93:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCD8196C459ED67085F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bf3b858-7563-3e8c-880a-f9ee6525fb9a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 7810 IP address blocks: 2001:470:1a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cd:81:96:c4:59:ed:67:08:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=9de726cd-36ff-478e-ba0c-af40b12cb2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:15:e7:10:7e:44:6f:1c:67:51:94:0f:7a: 0a:44:b1:b2:62:0d:50:d7:6f:84:d7:82:65:c6:73: c5:75:07:26:46:78:17:7c:b7:d7:f0:b6:44:63:56: a5:a5:1c:87:a6:7a:f7:80:be:b9:b8:ad:0f:ef:74: d6:64:e3:34:51:d9:5f:de:59:74:49:38:80:c9:e1: c9:d1:86:a7:63:60:10:20:f4:31:69:6d:ac:84:f5: 1b:e5:31:d2:25:28:50:a4:7c:bb:46:51:3a:cc:db: 3d:eb:ed:1c:07:f0:ed:6c:a5:08:28:99:cf:27:4e: 5b:7e:6e:b0:43:95:a6:e7:54:e5:fa:2c:cc:c0:af: 4d:64:4a:8d:f8:c4:b5:4a:30:8f:97:e5:01:0e:76: 16:ce:c4:f2:d2:89:fe:76:8a:fd:77:61:50:1b:13: 70:4a:e6:32:41:48:94:82:70:7b:85:d1:94:f0:d5: 5f:68:b1:f4:c4:e3:54:4e:12:11:ca:b7:ed:19:20: a2:95:55:98:8a:3a:26:1b:66:26:36:6a:49:c0:ae: 43:8c:8a:d2:6c:d4:53:71:d2:ba:22:da:d1:b1:d3: b3:da:1c:b6:22:71:39:b6:0f:44:78:d7:7c:7a:e6: 4b:32:9f:96:30:aa:7e:26:54:64:21:94:c0:58:05: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F0:60:38:6B:34:17:2C:48:6B:9C:BB:52:C1:60:A1:64:CD:93:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bf3b858-7563-3e8c-880a-f9ee6525fb9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:48:f3:97:53:85:d3:91:f7:de:5a:d3:bc:42:5c:b9:aa:b3: 2b:23:59:f6:ca:7d:85:c9:d1:eb:02:82:3b:65:4e:b9:2c:5b: bc:61:80:9b:7c:26:8f:2e:fc:0c:23:24:b2:70:13:f0:32:d0: 1f:ed:e7:bc:52:de:1b:00:b0:3e:6b:57:1a:be:8c:43:b7:0f: 41:95:4a:c3:c0:84:bf:d2:6c:fb:f2:61:dc:1a:a0:78:cd:ee: 69:85:42:82:2f:5c:72:57:3f:df:e0:74:74:97:23:47:50:8f: 18:b2:d7:41:58:94:9e:c1:5e:b9:bf:68:27:21:a8:88:67:2a: 23:da:66:f4:34:07:f8:a2:17:07:f1:dd:b9:a7:48:2b:72:02: a8:d9:ed:56:19:b2:73:1c:76:20:7b:6f:03:09:f7:3b:f6:7c: 04:39:74:08:5a:8b:74:10:c8:25:a8:9b:2e:38:20:6d:e7:e3: 77:4f:08:42:e9:27:fd:b9:c2:5f:ad:1d:e3:30:bc:a9:b1:66: dd:54:9b:8a:ac:d4:80:9a:06:38:47:90:ee:94:b9:b2:a2:0d: 71:13:9f:92:bf:d1:ee:61:80:6c:54:0d:f6:f7:c1:1e:4c:94: 65:5e:b3:67:d9:d8:3a:06:bd:85:70:56:91:e7:11:0e:e8:be: 73:91:01:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G82BlsRZ7WcIX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OWRlNzI2Y2QtMzZmZi00NzhlLWJhMGMtYWY0MGIxMmNiMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcAV5xB+RG8cZ1GUD3oKRLGyYg1Q12+E14Jl xnPFdQcmRngXfLfX8LZEY1alpRyHpnr3gL65uK0P73TWZOM0Udlf3ll0STiAyeHJ 0YanY2AQIPQxaW2shPUb5THSJShQpHy7RlE6zNs96+0cB/DtbKUIKJnPJ05bfm6w Q5Wm51Tl+izMwK9NZEqN+MS1SjCPl+UBDnYWzsTy0on+dor9d2FQGxNwSuYyQUiU gnB7hdGU8NVfaLH0xONUThIRyrftGSCilVWYijomG2YmNmpJwK5DjIrSbNRTcdK6 ItrRsdOz2hy2InE5tg9EeNd8euZLMp+WMKp+JlRkIZTAWAWOkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGnwYDhrNBcsSGucu1LBYKFkzZOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2JmM2I4NTgtNzU2My0z ZThjLTg4MGEtZjllZTY1MjVmYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVI85dThdOR995a07xCXLmqsysjWfbKfYXJ0esCgjtlTrksW7xh gJt8Jo8u/AwjJLJwE/Ay0B/t57xS3hsAsD5rVxq+jEO3D0GVSsPAhL/SbPvyYdwa oHjN7mmFQoIvXHJXP9/gdHSXI0dQjxiy10FYlJ7BXrm/aCchqIhnKiPaZvQ0B/ii Fwfx3bmnSCtyAqjZ7VYZsnMcdiB7bwMJ9zv2fAQ5dAhai3QQyCWomy44IG3n43dP CELpJ/25wl+tHeMwvKmxZt1Um4qs1ICaBjhHkO6UubKiDXETn5K/0e5hgGxUDfb3 wR5MlGVes2fZ2DoGvYVwVpHnEQ7ovnORAcw= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:43 2025 by rpki-client