$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa File: 842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa (raw, json) Hash identifier: RGe4k1ulzzuWJkj9Te/qAyiCzy3a/x61sJtpMBRGQd4= Subject key identifier: 86:6A:5F:1E:12:99:FC:9D:4F:60:34:16:ED:96:7F:66:91:9F:3D:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A778F08C65FC2585C1DECB6E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa Signing time: Thu 10 Jul 2025 01:30:09 +0000 ROA not before: Thu 10 Jul 2025 01:30:09 +0000 ROA not after: Wed 08 Oct 2025 01:30:09 +0000 asID: 394302 IP address blocks: 2001:470:488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:8f:08:c6:5f:c2:58:5c:1d:ec:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 10 01:30:09 2025 GMT Not After : Oct 8 01:30:09 2025 GMT Subject: CN=cab626b9-595b-4580-8bf4-849411b9b1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:3f:e7:a5:a0:0f:38:f6:51:c5:ae:e0:e0: 6e:34:0c:7d:c0:5d:88:d8:76:e6:d9:4c:db:fa:6d: eb:a6:72:ce:33:fa:6e:41:87:6d:e7:2c:80:10:51: 91:50:3b:79:99:76:42:63:30:7c:0c:d8:c4:0c:c5: 6e:4e:09:40:08:20:de:be:33:52:a4:3a:c7:48:1b: 1b:5a:c0:87:db:6e:52:da:6c:83:c0:b0:85:11:1a: e3:46:c4:b1:be:33:63:41:3b:b2:1b:74:9e:05:e5: 71:86:c4:e1:df:e7:22:89:22:a2:b4:67:d0:85:57: 41:e1:3d:86:29:31:82:45:71:f8:08:ae:5a:e0:11: 8e:fa:9d:cf:db:2d:32:65:7a:e0:fd:ca:d2:43:7f: 4e:21:bd:13:b0:66:85:6e:b0:45:7a:ac:e0:7f:ff: 08:b3:7a:f2:16:31:77:c6:da:4e:07:a0:53:b1:79: e4:9d:50:af:c3:c5:bb:3a:c5:7c:86:07:73:52:9a: e7:7f:66:fa:08:9b:43:09:3a:56:2c:73:da:9c:02: f4:98:3b:a7:1c:82:eb:50:40:52:b7:ab:da:63:d3: af:31:05:20:bd:ae:06:ef:50:7b:4f:f3:80:32:90: 3a:5a:f7:9d:b2:07:cb:40:9c:0b:19:be:7f:a3:05: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6A:5F:1E:12:99:FC:9D:4F:60:34:16:ED:96:7F:66:91:9F:3D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:488::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ea:8b:9f:a2:16:11:80:24:df:70:2a:fb:81:1d:05:8b:05: 25:09:b9:7d:48:43:26:43:88:79:84:51:91:fe:9a:5a:89:84: d9:e9:35:57:bd:aa:6d:52:a9:40:71:d4:ab:4d:86:fd:e8:54: a8:a2:96:51:e6:da:6b:56:d0:8d:f5:dd:2b:0d:01:c1:03:f1: 27:ec:99:d4:9e:ae:eb:63:28:d3:f6:8b:21:51:78:14:b5:e4: b1:90:bd:57:c3:08:dd:31:24:c4:01:3a:b9:b7:93:0a:0d:5f: 91:c4:df:30:fa:01:6c:a4:ca:8f:bc:c2:e4:2c:13:c0:a3:98: 28:7e:b1:dd:7b:9e:cd:63:77:b9:70:00:69:3b:3d:87:5f:44: 3c:20:9d:4d:86:43:d3:20:cf:ea:8d:76:1f:f7:e0:90:df:60: c3:23:d8:74:87:19:38:ee:2b:bb:75:2d:4f:bc:98:8d:7a:84: 43:cf:34:ba:06:00:8c:68:c0:54:8b:a3:a8:90:25:ba:f5:e5: a8:6d:65:67:03:24:af:e3:7d:94:29:1b:4c:ad:8a:b5:48:d3: c5:cf:58:3d:49:e7:d1:25:ee:0c:49:63:c0:c2:b7:91:41:07: 53:fc:39:62:ae:6c:68:67:d2:46:e0:48:67:35:0a:11:07:d7: 52:0b:c0:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp3jwjGX8JYXB3stuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxMDAxMzAwOVoXDTI1MTAwODAxMzAwOVowLzEtMCsGA1UEAxMk Y2FiNjI2YjktNTk1Yi00NTgwLThiZjQtODQ5NDExYjliMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaU/56WgDzj2UcWu4OBuNAx9wF2I2Hbm2Uzb +m3rpnLOM/puQYdt5yyAEFGRUDt5mXZCYzB8DNjEDMVuTglACCDevjNSpDrHSBsb WsCH225S2myDwLCFERrjRsSxvjNjQTuyG3SeBeVxhsTh3+ciiSKitGfQhVdB4T2G KTGCRXH4CK5a4BGO+p3P2y0yZXrg/crSQ39OIb0TsGaFbrBFeqzgf/8Is3ryFjF3 xtpOB6BTsXnknVCvw8W7OsV8hgdzUprnf2b6CJtDCTpWLHPanAL0mDunHILrUEBS t6vaY9OvMQUgva4G71B7T/OAMpA6WvedsgfLQJwLGb5/owVrHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZqXx4SmfydT2A0Fu2Wf2aRnz1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQyYTM5ZjctM2JjMy0z M2M3LTllYjEtMDM3YTNkNmM2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrqi5+iFhGAJN9wKvuBHQWLBSUJuX1IQyZDiHmEUZH+mlqJhNnp NVe9qm1SqUBx1KtNhv3oVKiillHm2mtW0I313SsNAcED8SfsmdSerutjKNP2iyFR eBS15LGQvVfDCN0xJMQBOrm3kwoNX5HE3zD6AWykyo+8wuQsE8CjmCh+sd17ns1j d7lwAGk7PYdfRDwgnU2GQ9Mgz+qNdh/34JDfYMMj2HSHGTjuK7t1LU+8mI16hEPP NLoGAIxowFSLo6iQJbr15ahtZWcDJK/jfZQpG0ytirVI08XPWD1J59El7gxJY8DC t5FBB1P8OWKubGhn0kbgSGc1ChEH11ILwBI= -----END CERTIFICATE-----Generated at Mon Aug 4 07:57:05 2025 by rpki-client