$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cbf9908-7d5d-34ed-aa53-ed32fd03ab4c.roa File: 8cbf9908-7d5d-34ed-aa53-ed32fd03ab4c.roa (raw, json) Hash identifier: vxFR3qkJS8Q1N4emOxBoKS5GCa6whNt9ad7Cfdu8UrA= Subject key identifier: BD:B4:B5:20:BA:81:BE:19:9B:A7:81:E1:47:0D:7E:B8:8A:6F:AA:66 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB650FD2C543F78338A0D60C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cbf9908-7d5d-34ed-aa53-ed32fd03ab4c.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 201814 IP address blocks: 2001:470:327::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:fd:2c:54:3f:78:33:8a:0d:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=312f3110-a40f-4141-bba1-7a031f481c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:56:3a:cd:45:a0:65:08:f8:6b:d9:76:08: d4:e9:c5:c5:b0:21:44:c9:1c:b5:fd:ee:11:15:0d: e2:55:3d:6f:25:dd:1f:bd:3b:35:2a:64:eb:cb:ed: 6a:a5:ab:24:c8:db:0b:94:35:75:c8:05:0b:bd:d6: bc:49:09:e4:7e:da:f7:0a:98:7a:f4:3b:44:ba:b4: 4f:ba:88:c9:d8:76:33:bd:ea:a3:7e:25:d8:ef:78: ed:82:20:94:29:4e:4a:94:1e:ec:bf:ed:82:be:b9: 35:e2:82:40:4a:3d:76:6c:6c:3e:0d:fd:a6:68:91: 3b:8f:79:86:ab:74:05:59:b9:3e:a3:11:84:3e:33: ca:95:d7:33:cd:2e:98:10:17:fa:44:ed:65:54:cc: a9:67:91:c7:8a:42:ac:4e:26:77:7c:a0:1c:d8:86: e0:ac:a2:c3:81:41:a0:19:22:5f:3e:ca:c4:98:04: a2:a3:6c:86:c2:99:bd:68:01:56:12:07:93:24:bb: a4:7b:30:46:de:b6:e9:8e:c4:29:51:32:2d:c4:83: 12:16:97:b4:af:01:1c:18:75:88:58:0b:ca:78:dd: de:19:d7:86:15:05:0d:c0:fa:0e:ff:d6:e3:e4:1d: 44:2c:33:f4:ee:3c:eb:41:2b:2a:ff:8d:47:9f:f6: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:B5:20:BA:81:BE:19:9B:A7:81:E1:47:0D:7E:B8:8A:6F:AA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cbf9908-7d5d-34ed-aa53-ed32fd03ab4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:327::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:9e:99:b5:55:64:e9:81:8a:8b:2a:c4:f9:90:2f:c3:0b:f6: c6:de:a6:3d:66:06:59:35:de:2e:4f:db:b6:fa:8a:35:08:1a: cb:86:9f:b9:84:8f:a5:d1:76:28:30:f9:be:e6:35:9e:6b:aa: 7a:83:78:7d:49:75:8b:62:d2:19:28:b1:a8:90:81:87:b2:c0: 94:d7:e7:82:2d:a6:8c:3b:ad:a1:ee:4d:43:5a:dc:78:ab:47: 73:5f:4c:4d:2b:1e:31:8e:fe:e6:eb:c7:0c:d8:4d:e6:5d:c8: 24:f3:c9:61:ba:2c:a7:d8:5d:d3:3b:aa:1a:f9:98:d5:12:71: 7b:75:d4:e8:9e:5b:5a:7e:06:87:36:06:5f:bd:c9:e7:88:90: 79:0b:ab:39:40:96:d0:53:57:1c:d1:38:54:f5:e8:a9:c4:49: 1c:3d:88:de:3c:0f:96:b1:73:ab:bb:3a:8b:c8:49:de:40:ce: 53:0b:4b:c4:d3:97:b7:e3:91:ea:fa:fc:bd:4d:a7:32:00:7f: da:8b:07:9f:90:fe:8e:a6:e2:53:da:79:11:9b:22:30:60:2a: cf:9f:92:ca:f5:cf:d0:0b:50:19:be:44:ab:18:ba:d2:bc:79: b2:1c:4b:7f:92:84:1a:77:81:c5:6f:16:f9:af:58:86:4d:3a: bc:b5:9e:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UP0sVD94M4oNYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzEyZjMxMTAtYTQwZi00MTQxLWJiYTEtN2EwMzFmNDgxYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNWOs1FoGUI+GvZdgjU6cXFsCFEyRy1/e4R FQ3iVT1vJd0fvTs1KmTry+1qpaskyNsLlDV1yAULvda8SQnkftr3Cph69DtEurRP uojJ2HYzveqjfiXY73jtgiCUKU5KlB7sv+2Cvrk14oJASj12bGw+Df2maJE7j3mG q3QFWbk+oxGEPjPKldczzS6YEBf6RO1lVMypZ5HHikKsTiZ3fKAc2IbgrKLDgUGg GSJfPsrEmASio2yGwpm9aAFWEgeTJLukezBG3rbpjsQpUTItxIMSFpe0rwEcGHWI WAvKeN3eGdeGFQUNwPoO/9bj5B1ELDP07jzrQSsq/41Hn/ZfpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL20tSC6gb4Zm6eB4UcNfriKb6pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGNiZjk5MDgtN2Q1ZC0z NGVkLWFhNTMtZWQzMmZkMDNhYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKuembVVZOmBiosqxPmQL8ML9sbepj1mBlk13i5P27b6ijUIGsuG n7mEj6XRdigw+b7mNZ5rqnqDeH1JdYti0hkosaiQgYeywJTX54Itpow7raHuTUNa 3HirR3NfTE0rHjGO/ubrxwzYTeZdyCTzyWG6LKfYXdM7qhr5mNUScXt11OieW1p+ Boc2Bl+9yeeIkHkLqzlAltBTVxzROFT16KnESRw9iN48D5axc6u7OovISd5AzlML S8TTl7fjker6/L1NpzIAf9qLB5+Q/o6m4lPaeRGbIjBgKs+fksr1z9ALUBm+RKsY utK8ebIcS3+ShBp3gcVvFvmvWIZNOry1nms= -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:16 2025 by rpki-client