$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa File: 7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa (raw, json) Hash identifier: CGNZVAVd/LudKsDLqikQdXR1p1X/w0cIQ0flrRHzjIs= Subject key identifier: 95:91:56:1D:A0:D5:65:0D:B7:C7:59:5B:17:98:21:F0:49:2F:67:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF4DF42C7C708D697BF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 57043 IP address blocks: 2001:470:18b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f4:df:42:c7:c7:08:d6:97:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d776d5b2-a6d1-46ac-9681-2d23f5630f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:8b:03:a2:2f:c2:9b:0c:7b:ee:fa:a8:a3: cd:7a:e8:02:57:d3:be:f1:3d:5b:21:4f:4b:a1:8b: e2:2c:fc:53:92:8c:ef:6d:28:66:ed:49:e0:ac:d4: f0:da:b6:ec:b2:60:80:3d:7a:ca:8f:16:73:8b:79: 30:c2:5d:ea:19:27:51:d5:c6:bd:a4:bc:96:00:f0: 29:78:43:07:ab:2f:b9:c1:6d:65:93:b8:8a:28:b5: 06:26:69:bc:ed:b2:23:4b:4f:a0:6f:ae:a1:66:73: 95:ef:93:8e:7d:3f:7a:9c:b9:3b:29:f6:25:4b:85: e8:a2:98:b9:00:ee:53:97:9b:01:e8:6e:b6:0d:75: e0:e4:99:ca:d1:1d:89:5e:50:73:25:70:a6:76:a0: da:9a:3e:c7:d3:ab:78:3a:ab:89:6f:e6:e0:76:db: e1:76:36:a3:7d:3d:92:20:c1:e2:68:cc:ed:c2:ea: 00:2c:5e:d2:dd:25:c1:ea:1a:29:a2:7a:0b:63:f7: ea:88:e9:97:ce:47:1b:7a:a8:f3:4f:c6:72:a5:51: 0f:42:05:c7:4b:17:14:22:3a:94:b1:6b:fe:6f:fb: 26:ae:a0:0d:86:40:07:8f:f0:14:25:ff:ac:18:db: fa:9b:5c:89:f3:21:8c:92:ea:2b:2a:e2:54:3b:f6: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:91:56:1D:A0:D5:65:0D:B7:C7:59:5B:17:98:21:F0:49:2F:67:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:18b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:82:d6:b8:29:1f:4f:d1:2a:17:52:23:6c:35:84:2b:55:28: b4:62:49:aa:3d:62:cf:ef:b3:e9:81:79:56:25:7d:ea:87:e0: da:e2:11:5f:47:9c:f2:61:22:39:04:4f:47:a0:65:51:16:61: b6:82:a4:3d:7c:3f:36:1a:0f:38:af:cb:6f:fa:b6:ad:fe:78: 8c:e8:9b:4d:15:70:77:d2:03:b8:7d:54:f8:df:37:4e:f3:90: c7:de:fc:74:29:38:b9:51:c7:de:70:c4:b5:9c:3c:4a:27:85: ef:73:6e:d4:19:7b:35:df:53:79:8c:72:57:53:83:25:14:ea: 03:27:6f:48:28:4f:4d:df:e4:8d:f3:61:94:a2:7d:f4:05:e3: 62:f5:90:52:ae:a5:f6:7e:54:95:cb:28:eb:a5:90:61:ef:8d: b2:54:76:81:db:5b:24:80:46:89:5e:bf:80:08:5f:4a:c6:df: 5a:20:e0:94:18:cf:83:0b:08:e3:8c:a4:d8:d4:ed:7b:45:bc: bc:4e:a9:64:10:07:0a:7f:b8:7c:b3:1b:63:39:33:c1:c2:15: fb:78:74:5d:b9:27:02:37:bf:78:c6:39:61:4b:10:51:a5:31: fb:79:b6:24:3b:e7:66:a3:49:eb:3e:97:9d:73:9d:95:b7:c3: 63:e2:30:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/TfQsfHCNaXv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDc3NmQ1YjItYTZkMS00NmFjLTk2ODEtMmQyM2Y1NjMwZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWuLA6IvwpsMe+76qKPNeugCV9O+8T1bIU9L oYviLPxTkozvbShm7UngrNTw2rbssmCAPXrKjxZzi3kwwl3qGSdR1ca9pLyWAPAp eEMHqy+5wW1lk7iKKLUGJmm87bIjS0+gb66hZnOV75OOfT96nLk7KfYlS4Xoopi5 AO5Tl5sB6G62DXXg5JnK0R2JXlBzJXCmdqDamj7H06t4OquJb+bgdtvhdjajfT2S IMHiaMztwuoALF7S3SXB6hoponoLY/fqiOmXzkcbeqjzT8ZypVEPQgXHSxcUIjqU sWv+b/smrqANhkAHj/AUJf+sGNv6m1yJ8yGMkuorKuJUO/YkBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWRVh2g1WUNt8dZWxeYIfBJL2dMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2M3NTM5YzMtMzBkNy0z N2YyLWI5YjItZjA3MmI3ZDdiNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6C1rgpH0/RKhdSI2w1hCtVKLRiSao9Ys/vs+mBeVYlfeqH4Nri EV9HnPJhIjkET0egZVEWYbaCpD18PzYaDzivy2/6tq3+eIzom00VcHfSA7h9VPjf N07zkMfe/HQpOLlRx95wxLWcPEonhe9zbtQZezXfU3mMcldTgyUU6gMnb0goT03f 5I3zYZSiffQF42L1kFKupfZ+VJXLKOulkGHvjbJUdoHbWySARolev4AIX0rG31og 4JQYz4MLCOOMpNjU7XtFvLxOqWQQBwp/uHyzG2M5M8HCFft4dF25JwI3v3jGOWFL EFGlMft5tiQ752ajSes+l51znZW3w2PiMOs= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:04 2025 by rpki-client