$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json) Hash identifier: L8m4nebYajAfosJ0zIo+XP09MNWlr4s2f9RHcd/wyoA= Subject key identifier: 5C:B5:B9:A9:E5:F4:D4:21:A0:51:C0:EF:4D:E5:41:2F:C5:A7:57:FB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFC50338DCC36CCCA0400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 151374 IP address blocks: 2001:470:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fc:50:33:8d:cc:36:cc:ca:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=fd52bce9-43ce-47c8-b22e-7b795f6962cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:90:6f:06:d0:9b:ca:a4:8d:17:f5:1f:26: 04:3c:45:5d:0e:ca:34:03:88:45:c7:0f:d1:85:47: 51:84:a3:f2:6c:b6:99:a3:17:92:7c:14:71:af:9a: 3f:02:b6:2f:cb:d0:18:42:c2:1a:08:04:74:e1:c6: 43:73:a0:54:c5:c5:2c:9e:90:36:23:a4:c9:cf:fa: 94:fd:76:12:cb:1a:b0:44:79:1a:ed:b6:15:ff:c3: 42:bd:71:85:fc:28:1d:7c:80:16:c3:6a:1e:09:c1: a1:24:95:85:1c:d0:92:59:3e:f2:91:ea:eb:fd:e1: a3:17:50:d8:06:f5:ac:c7:1f:84:10:f6:60:f0:35: 4e:65:81:f9:9e:61:3e:05:cd:3d:32:ea:13:f0:e7: ae:bb:9d:d1:f5:61:bf:e3:56:6b:49:f8:74:e2:80: b9:6d:dd:88:68:95:28:be:55:b9:84:28:b4:f9:45: 98:db:d8:89:ff:b3:ea:92:51:90:e6:80:7d:dc:77: 23:20:89:d8:8f:fc:3d:51:7d:16:93:95:6f:1c:8e: 1b:6e:94:ef:02:34:f2:dd:33:ac:75:eb:0d:80:42: f8:d7:8f:7d:97:fb:9f:2a:d9:7a:50:71:83:90:07: 8d:5f:85:a8:79:de:d9:67:29:18:9f:ac:f1:c5:3b: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:B9:A9:E5:F4:D4:21:A0:51:C0:EF:4D:E5:41:2F:C5:A7:57:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b0:0c:1c:4b:21:a0:c6:f0:75:26:7a:0d:a0:e4:58:65:6a: 84:5c:d8:15:16:76:83:98:28:5c:a1:a6:6d:47:bd:b2:3e:98: da:e1:79:3d:81:55:57:76:df:29:92:5b:ac:ca:fa:de:62:db: 49:c3:eb:3d:bd:02:01:3e:58:6e:df:aa:a9:2f:85:21:46:6a: df:7b:b0:17:f7:16:cc:2c:78:9d:ef:94:03:81:4b:cf:eb:60: be:a2:a6:a7:f8:58:b6:9e:d3:37:af:0c:a7:49:d9:ce:92:34: ad:de:c9:d5:f5:bb:ea:c3:9f:63:ff:aa:31:32:67:c7:1c:7d: b2:07:ab:3d:d9:28:12:13:52:a1:51:c3:0f:78:1c:66:19:05: 52:65:63:1d:08:6a:6e:b3:c9:e6:cb:1e:8a:ed:02:3a:f1:23: a5:d8:64:61:aa:8c:5b:c6:16:8f:8e:7e:a0:61:4b:0d:3a:8b: 08:5a:cd:4b:fb:1e:1c:23:4f:e5:0b:82:4b:2f:b6:6c:66:5b: b0:20:03:98:b7:19:a8:58:3a:ea:46:3b:7c:0c:93:5f:f4:ad: d5:44:71:cc:7c:6c:8f:f8:b2:94:08:73:c5:f3:0f:8f:b9:ef: e3:78:bd:4d:cd:a9:a3:82:7d:82:25:ac:8b:12:aa:35:5a:70: 8e:57:a1:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/xQM43MNszKBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmQ1MmJjZTktNDNjZS00N2M4LWIyMmUtN2I3OTVmNjk2MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9+QbwbQm8qkjRf1HyYEPEVdDso0A4hFxw/R hUdRhKPybLaZoxeSfBRxr5o/ArYvy9AYQsIaCAR04cZDc6BUxcUsnpA2I6TJz/qU /XYSyxqwRHka7bYV/8NCvXGF/CgdfIAWw2oeCcGhJJWFHNCSWT7ykerr/eGjF1DY BvWsxx+EEPZg8DVOZYH5nmE+Bc09MuoT8Oeuu53R9WG/41ZrSfh04oC5bd2IaJUo vlW5hCi0+UWY29iJ/7PqklGQ5oB93HcjIInYj/w9UX0Wk5VvHI4bbpTvAjTy3TOs desNgEL41499l/ufKtl6UHGDkAeNX4Woed7ZZykYn6zxxTtoRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFy1uanl9NQhoFHA703lQS/Fp1f7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ0NTcwYzctMWM1Yy0z MzBjLThjZjQtNGIyMGMzYTJhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOwDBxLIaDG8HUmeg2g5FhlaoRc2BUWdoOYKFyhpm1HvbI+mNrh eT2BVVd23ymSW6zK+t5i20nD6z29AgE+WG7fqqkvhSFGat97sBf3FswseJ3vlAOB S8/rYL6ipqf4WLae0zevDKdJ2c6SNK3eydX1u+rDn2P/qjEyZ8ccfbIHqz3ZKBIT UqFRww94HGYZBVJlYx0Iam6zyebLHortAjrxI6XYZGGqjFvGFo+OfqBhSw06iwha zUv7HhwjT+ULgksvtmxmW7AgA5i3GahYOupGO3wMk1/0rdVEccx8bI/4spQIc8Xz D4+57+N4vU3NqaOCfYIlrIsSqjVacI5XocI= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:59 2025 by rpki-client