$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa File: 890c808c-c003-388e-a54a-7300604313f5.roa (raw, json) Hash identifier: tv3wpsMXkxrr/P72jmanDrKiRfIM59zQhjYz0ozvAW8= Subject key identifier: A4:D6:80:AF:6C:C3:4D:EC:C5:60:0A:37:90:40:62:31:FB:D9:AC:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFFAF2E59EA6D722F4684 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 13335 IP address blocks: 2001:470:2a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ff:af:2e:59:ea:6d:72:2f:46:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a29672d0-588b-49f2-9ace-9db22ed346a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:23:b1:45:a7:d0:f2:a9:39:46:56:45:af: 70:fb:f3:6c:01:7b:81:20:9f:0b:bb:5b:d6:8f:e0: 06:38:a8:f3:91:e5:0c:16:0d:53:83:e6:5d:43:7e: 42:86:f4:a0:e3:64:24:89:d9:fd:e2:86:0b:bf:c2: d1:b4:a9:1c:9b:78:32:0b:c0:1d:6a:af:8c:6c:83: 6b:7c:24:a2:c2:55:76:f1:3e:4b:90:3c:54:de:d4: e6:25:63:7f:35:4f:a2:b8:18:0b:bb:33:7b:6c:a8: d7:e5:b0:67:d5:55:48:bc:6b:53:00:e6:fd:1f:fa: 56:1e:bb:b9:6a:77:18:14:b0:49:a7:a1:2a:77:0e: 73:76:8a:83:95:10:76:98:bf:b1:ef:a9:0b:52:e3: 42:1a:11:4c:a7:24:a2:31:4c:bd:01:10:c1:92:c2: 09:fc:f9:6e:46:80:40:67:f3:2d:6c:0d:43:2c:e9: 4d:a0:3f:d2:db:05:de:a6:8d:44:dc:71:22:41:27: 6b:53:ca:73:20:3f:74:e1:5d:dc:b6:67:45:37:e3: 22:3f:19:12:75:7d:1a:6d:fa:c6:5b:df:09:4a:0f: e2:45:7c:23:dd:a2:08:29:40:61:0a:27:16:04:a0: f3:ae:42:77:73:c3:eb:b1:f9:3d:38:93:00:d9:fb: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:80:AF:6C:C3:4D:EC:C5:60:0A:37:90:40:62:31:FB:D9:AC:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6c:fa:e8:ab:ec:77:0c:71:fb:69:64:e9:7c:ec:04:9e:4d: 1d:2b:b0:9e:38:84:22:7a:53:93:69:ce:3b:2f:10:50:4c:7e: ca:1a:35:f1:44:d3:9a:df:44:b6:5c:bf:d1:88:be:10:a1:1f: c5:7a:e3:13:8d:e8:c4:95:e7:a7:f5:9c:b8:eb:bb:54:28:ec: 7d:7d:3d:c1:6c:93:7f:41:af:af:41:05:62:02:d0:25:14:f1: a1:67:f4:37:27:91:b4:7c:37:4d:bc:d3:5d:64:ae:97:cc:7d: 23:c4:4b:48:f6:22:02:31:7c:4e:2f:ca:f0:82:25:65:30:b6: 5b:a1:ff:48:a7:74:db:2a:42:c5:20:4d:f2:c4:31:66:9f:b7: 66:fd:65:2d:75:fa:3c:f7:47:8d:46:67:fc:45:e7:8f:c1:e0: 17:4e:33:fe:4f:ea:cc:a3:d3:41:2f:3f:2b:32:7e:4d:d5:e3: 1f:4f:94:ee:91:79:1c:2a:c8:3e:9d:85:d2:e3:4c:2d:cc:e6: 74:23:70:f4:42:f2:98:93:1c:a8:f8:62:c2:9f:16:23:0e:8a: 55:79:53:8d:94:22:5d:38:f1:c9:8b:c0:00:2f:84:e0:20:7e: 6c:5a:6a:b4:91:28:97:54:46:82:40:4e:8c:86:0b:9a:0e:59: a5:c1:45:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/+vLlnqbXIvRoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTI5NjcyZDAtNTg4Yi00OWYyLTlhY2UtOWRiMjJlZDM0NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdAjsUWn0PKpOUZWRa9w+/NsAXuBIJ8Lu1vW j+AGOKjzkeUMFg1Tg+ZdQ35ChvSg42Qkidn94oYLv8LRtKkcm3gyC8Adaq+MbINr fCSiwlV28T5LkDxU3tTmJWN/NU+iuBgLuzN7bKjX5bBn1VVIvGtTAOb9H/pWHru5 ancYFLBJp6Eqdw5zdoqDlRB2mL+x76kLUuNCGhFMpySiMUy9ARDBksIJ/PluRoBA Z/MtbA1DLOlNoD/S2wXepo1E3HEiQSdrU8pzID904V3ctmdFN+MiPxkSdX0abfrG W98JSg/iRXwj3aIIKUBhCicWBKDzrkJ3c8Prsfk9OJMA2ftZkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTWgK9sw03sxWAKN5BAYjH72azkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODkwYzgwOGMtYzAwMy0z ODhlLWE1NGEtNzMwMDYwNDMxM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1s+uir7HcMcftpZOl87ASeTR0rsJ44hCJ6U5NpzjsvEFBMfsoa NfFE05rfRLZcv9GIvhChH8V64xON6MSV56f1nLjru1Qo7H19PcFsk39Br69BBWIC 0CUU8aFn9DcnkbR8N028011krpfMfSPES0j2IgIxfE4vyvCCJWUwtluh/0indNsq QsUgTfLEMWaft2b9ZS11+jz3R41GZ/xF54/B4BdOM/5P6syj00EvPysyfk3V4x9P lO6ReRwqyD6dhdLjTC3M5nQjcPRC8piTHKj4YsKfFiMOilV5U42UIl048cmLwAAv hOAgfmxaarSRKJdURoJAToyGC5oOWaXBRZ4= -----END CERTIFICATE-----Generated at Mon Aug 4 01:31:48 2025 by rpki-client