$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa File: 89881edc-6665-37f2-8fc6-05fd053db019.roa (raw, json) Hash identifier: dw3O4MrCnOeHN7S3LjIP3ZQseesE3Xty2sD6KuBPtkA= Subject key identifier: C1:79:B2:29:15:D4:15:11:8B:3A:F4:34:3E:42:45:13:45:7C:5B:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD21E4AEF8EB6E212EC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 135380 IP address blocks: 2001:470:242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d2:1e:4a:ef:8e:b6:e2:12:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=feeda68b-0fef-4de5-9938-63b8a07e585e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:22:cf:e8:35:84:e5:1d:ac:2d:64:46:15: 82:85:77:ef:50:7b:be:83:3c:fe:27:6d:9c:bb:4a: 80:23:6c:ab:1b:e8:6f:b2:54:64:7b:86:9f:68:a8: aa:a3:df:87:5c:80:3b:96:49:09:43:85:84:14:3c: 01:3a:1e:b4:9e:b1:86:48:32:13:2b:39:91:4e:da: b3:52:e5:29:2e:19:5d:56:fb:d0:b3:4c:98:a3:8e: 9f:34:2b:40:08:a3:e8:2e:49:79:5e:51:95:6f:89: 35:77:4d:42:e1:b2:62:ca:d4:23:8f:8c:ef:e9:36: 87:47:e9:cb:c0:b9:58:f0:92:cb:ff:d7:8b:dd:aa: 0c:cf:6d:bd:de:cc:db:d0:1f:e3:05:21:a3:28:8e: 4d:ba:e3:6b:d5:55:3c:51:4f:03:65:86:72:9f:98: 98:4d:ed:f0:0c:c9:d5:2a:fc:4d:94:47:75:88:a8: 58:4c:b8:58:08:6d:20:1b:6b:13:9c:32:15:e3:8f: ba:04:e8:78:3c:d7:bf:d2:d4:89:f7:e0:14:c5:7b: 23:fc:cb:c3:70:29:d4:fb:e7:d9:8f:62:4f:23:be: 5c:e3:7f:4c:9e:c3:2d:d0:f5:98:a3:af:a6:e3:33: 5e:1b:9f:01:12:34:cc:87:61:8e:d0:ea:44:52:1b: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:B2:29:15:D4:15:11:8B:3A:F4:34:3E:42:45:13:45:7C:5B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2d:d6:9c:d0:cd:1f:09:0d:e3:a7:4a:27:91:c1:53:f6:63: 8f:62:30:b9:10:ad:55:66:70:11:4f:91:57:b8:97:ac:30:e4: 4f:12:3d:4c:6e:19:24:61:bb:44:6c:dd:8b:74:b2:bc:47:ea: ec:d1:ab:d6:a9:1f:19:65:57:4b:75:41:7e:13:98:4c:9d:66: e8:33:2e:48:83:b0:97:78:f7:55:c2:31:65:2e:27:19:57:cc: 47:ba:e2:a7:5f:9e:4c:c0:9a:6d:1f:22:ca:8e:8f:97:65:7d: 3a:eb:e4:e7:67:a4:0c:16:7e:98:41:48:69:d3:92:14:eb:fa: 23:88:88:40:f8:c3:70:2a:83:e9:e9:b2:6a:13:3b:70:94:72: b2:5a:78:b9:f0:7c:a8:bf:85:0e:11:bc:a2:6b:4a:6a:fa:1e: 7d:8a:86:7e:8c:bd:cb:06:cf:11:c6:e1:d2:27:c6:5f:34:68: 1c:c4:c1:6a:a7:24:f1:64:ea:1b:e1:a9:ca:03:7b:90:2a:e9: 4b:29:39:21:05:70:26:d3:16:cf:9d:b5:d6:63:1b:e9:8e:af: 49:17:f3:42:d7:3f:3d:33:1a:d3:b7:78:81:3f:92:18:f3:c0: d4:d3:5c:8d:6c:46:79:e6:05:26:2f:be:52:f4:37:99:46:c1: 4d:35:0e:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9IeSu+OtuIS7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmVlZGE2OGItMGZlZi00ZGU1LTk5MzgtNjNiOGEwN2U1ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwsiz+g1hOUdrC1kRhWChXfvUHu+gzz+J22c u0qAI2yrG+hvslRke4afaKiqo9+HXIA7lkkJQ4WEFDwBOh60nrGGSDITKzmRTtqz UuUpLhldVvvQs0yYo46fNCtACKPoLkl5XlGVb4k1d01C4bJiytQjj4zv6TaHR+nL wLlY8JLL/9eL3aoMz2293szb0B/jBSGjKI5NuuNr1VU8UU8DZYZyn5iYTe3wDMnV KvxNlEd1iKhYTLhYCG0gG2sTnDIV44+6BOh4PNe/0tSJ9+AUxXsj/MvDcCnU++fZ j2JPI75c439MnsMt0PWYo6+m4zNeG58BEjTMh2GO0OpEUhv4NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMF5sikV1BURizr0ND5CRRNFfFuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODk4ODFlZGMtNjY2NS0z N2YyLThmYzYtMDVmZDA1M2RiMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgt1pzQzR8JDeOnSieRwVP2Y49iMLkQrVVmcBFPkVe4l6ww5E8S PUxuGSRhu0Rs3Yt0srxH6uzRq9apHxllV0t1QX4TmEydZugzLkiDsJd491XCMWUu JxlXzEe64qdfnkzAmm0fIsqOj5dlfTrr5OdnpAwWfphBSGnTkhTr+iOIiED4w3Aq g+npsmoTO3CUcrJaeLnwfKi/hQ4RvKJrSmr6Hn2Khn6MvcsGzxHG4dInxl80aBzE wWqnJPFk6hvhqcoDe5Aq6UspOSEFcCbTFs+dtdZjG+mOr0kX80LXPz0zGtO3eIE/ khjzwNTTXI1sRnnmBSYvvlL0N5lGwU01DgA= -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:15 2025 by rpki-client