$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807a043c-5cc4-3903-956f-59f005fe095a.roa File: 807a043c-5cc4-3903-956f-59f005fe095a.roa (raw, json) Hash identifier: IpiQxNkjm2DdnCROWDvk6hx9SrfxZIoroBQst6Zvmmo= Subject key identifier: 2F:A0:6F:DB:6B:1E:F3:FA:0C:A9:D1:02:51:5F:AC:7F:F4:8B:8C:EA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDBC1EF01F17F0081AC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807a043c-5cc4-3903-956f-59f005fe095a.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36958 IP address blocks: 2001:470:2fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:db:c1:ef:01:f1:7f:00:81:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c91720d3-419d-442c-9e21-5e76f30d8c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:79:ae:19:da:f9:dd:3e:b7:13:a8:d3:64: 04:2d:f8:99:dc:15:0b:3d:de:fd:e7:cb:17:f9:79: 49:cc:39:18:b7:10:f2:0b:4e:6a:d5:aa:a6:b6:32: 3b:7a:9a:73:f0:85:91:15:aa:91:60:08:a3:c1:c1: 64:da:03:0f:20:83:52:4b:d5:50:00:7f:4f:72:51: 05:be:de:73:f0:fc:22:b2:34:0a:63:96:b2:e6:09: 24:f6:5a:26:c1:74:46:cd:ee:1b:67:9a:e1:e2:66: bf:e5:ab:ab:2e:72:4c:64:0c:c9:88:4e:c7:07:10: 83:5a:40:cd:cc:e7:c1:fe:7a:de:82:d5:90:c8:a2: c8:d6:62:e5:e1:76:69:0b:dc:19:82:11:7c:bb:59: bf:5d:f0:c0:d4:8c:c9:74:da:3d:e3:34:4e:d8:10: 00:40:0a:dd:45:ef:0b:99:1d:82:59:04:42:19:c9: fc:84:c1:48:a5:1f:c6:7d:a7:8c:24:15:58:90:46: 1b:16:dd:b9:ba:3b:64:5d:dc:95:38:da:ad:88:3e: 67:11:5b:0e:48:c6:11:4a:f3:8e:85:99:e3:b4:29: 73:91:54:2c:3e:fa:9b:2b:fc:93:48:ba:51:81:94: 4f:ea:86:d5:2e:37:e1:be:fd:23:b8:53:35:3a:d9: a7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A0:6F:DB:6B:1E:F3:FA:0C:A9:D1:02:51:5F:AC:7F:F4:8B:8C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/807a043c-5cc4-3903-956f-59f005fe095a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fd:38:be:4d:b9:8c:34:dc:f5:07:3a:f9:03:06:49:cd:82: a1:39:ab:e9:bf:dd:a0:84:c6:fa:20:5f:a5:5c:d0:68:31:25: 60:e5:09:83:e4:ef:75:83:40:95:ed:da:df:79:6d:83:82:9b: ef:b1:81:48:a4:8e:99:b8:bb:5d:d8:85:76:06:87:81:1e:44: 65:d9:93:64:36:55:75:ea:b3:f7:b1:23:1a:9f:ed:86:5c:be: 68:27:9e:83:6b:9c:67:11:35:f2:d6:30:65:be:40:30:ee:60: 89:9f:85:53:01:af:39:a6:6c:b5:e1:18:e6:c6:1c:a4:a2:58: 25:a3:5e:2a:8b:ac:e9:20:5e:16:58:eb:d3:9d:d9:43:8e:46: f4:87:2c:86:79:2a:87:1f:80:13:c0:d2:e4:af:90:c7:04:72: b6:56:dd:ed:28:4d:bd:91:22:a5:a2:3c:10:ad:7e:31:7f:3b: b0:b6:ea:cd:25:41:8e:a4:ae:27:45:06:31:4e:4a:7a:7e:6b: 48:b7:9f:ad:b0:25:7b:b4:3a:f7:10:80:d7:60:a4:7c:c6:07: 74:e6:6a:d1:f4:f8:f1:c5:80:27:f9:1b:35:27:44:7c:45:89: af:59:b0:9c:cd:d8:ea:eb:d8:97:5b:99:58:97:9d:22:aa:67: ca:91:17:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9vB7wHxfwCBrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzkxNzIwZDMtNDE5ZC00NDJjLTllMjEtNWU3NmYzMGQ4YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh15rhna+d0+txOo02QELfiZ3BULPd7958sX +XlJzDkYtxDyC05q1aqmtjI7eppz8IWRFaqRYAijwcFk2gMPIINSS9VQAH9PclEF vt5z8PwisjQKY5ay5gkk9lomwXRGze4bZ5rh4ma/5aurLnJMZAzJiE7HBxCDWkDN zOfB/nregtWQyKLI1mLl4XZpC9wZghF8u1m/XfDA1IzJdNo94zRO2BAAQArdRe8L mR2CWQRCGcn8hMFIpR/GfaeMJBVYkEYbFt25ujtkXdyVONqtiD5nEVsOSMYRSvOO hZnjtClzkVQsPvqbK/yTSLpRgZRP6obVLjfhvv0juFM1OtmncwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC+gb9trHvP6DKnRAlFfrH/0i4zqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODA3YTA0M2MtNWNjNC0z OTAzLTk1NmYtNTlmMDA1ZmUwOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGf9OL5NuYw03PUHOvkDBknNgqE5q+m/3aCExvogX6Vc0GgxJWDl CYPk73WDQJXt2t95bYOCm++xgUikjpm4u13YhXYGh4EeRGXZk2Q2VXXqs/exIxqf 7YZcvmgnnoNrnGcRNfLWMGW+QDDuYImfhVMBrzmmbLXhGObGHKSiWCWjXiqLrOkg XhZY69Od2UOORvSHLIZ5KocfgBPA0uSvkMcEcrZW3e0oTb2RIqWiPBCtfjF/O7C2 6s0lQY6kridFBjFOSnp+a0i3n62wJXu0OvcQgNdgpHzGB3TmatH0+PHFgCf5GzUn RHxFia9ZsJzN2Orr2JdbmViXnSKqZ8qRF5Q= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:52 2025 by rpki-client