$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa File: 95226b10-52b4-371f-bcca-b8292556b99e.roa (raw, json) Hash identifier: UONjev6QtqsHkoGI8TVU9y5drMw/kIkDQ4x/rGtLz44= Subject key identifier: 87:31:6F:E0:04:4E:86:31:A8:D8:2E:7A:6B:FA:BD:78:3C:F8:DE:88 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC0C67D0FF89ACDE54200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395681 IP address blocks: 2001:470:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c0:c6:7d:0f:f8:9a:cd:e5:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=253c9588-7677-4133-8f98-c1ef879c4081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:64:43:c7:c3:72:71:1f:63:07:42:07:32: 7d:f4:27:61:b5:cb:7a:b4:c7:b3:ee:80:2f:75:42: 86:f4:d9:54:f5:e0:f6:b7:ed:e1:49:0d:29:ed:20: dc:3b:ec:40:96:99:4a:e3:64:67:de:38:31:54:dd: 18:a3:f9:e1:9e:95:c8:e1:4b:53:b2:86:57:83:82: df:74:d9:62:08:09:62:ea:a3:17:f4:2e:5d:22:21: 58:55:52:4c:e5:e3:31:2e:6f:b9:d3:80:ba:25:0f: 8b:f4:a7:dc:9a:2c:7a:ac:bf:bc:f7:0b:54:b9:c0: 32:b2:cc:58:38:f6:60:9a:d8:47:e0:e3:10:37:c2: 68:68:21:4f:6b:c8:58:76:b7:a1:b8:3e:2f:31:15: 56:9a:17:96:c4:3c:e0:0e:67:64:c7:46:e6:ff:3a: 6a:10:6d:6a:e4:2b:5e:fa:b3:6a:66:a8:77:44:4e: d2:de:d6:de:0c:60:54:3f:e1:61:7a:69:ed:10:eb: 29:83:28:68:fa:19:fc:3f:f1:14:31:8b:91:30:bc: d9:f3:81:d5:46:93:84:3e:21:18:c9:db:b3:fb:a8: 56:e7:17:2b:9d:8c:f9:2e:8e:c8:8c:bd:5a:3e:dc: 04:7e:c7:77:a1:a3:fd:29:4e:1d:ea:99:96:23:08: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:31:6F:E0:04:4E:86:31:A8:D8:2E:7A:6B:FA:BD:78:3C:F8:DE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:59:e1:dc:1f:94:3e:95:ad:fd:8d:6b:c1:ab:4a:c1:d5:46: 73:5b:c2:78:34:21:5b:9a:84:e5:39:8e:dd:81:a7:db:33:0f: 58:33:3e:82:cb:9f:f2:48:cc:9a:79:09:47:5d:74:97:ad:4f: 4e:5e:ad:21:97:5f:fa:dd:f9:85:f4:98:ba:b3:bb:18:71:e4: 59:dd:bf:a1:5e:ec:5c:9c:00:ca:a9:d9:a6:83:e7:19:4c:da: f3:8f:60:7f:f2:56:3f:6f:30:78:65:aa:40:70:bd:33:9d:94: a7:66:7d:0e:02:33:c8:47:e8:9b:d0:ff:a2:38:b1:77:f0:38: 24:8c:25:34:dd:49:b8:02:d5:24:76:35:b3:8c:39:2f:a0:7f: ab:29:d1:7e:20:52:b5:5d:9e:4d:18:7c:9c:8a:e8:cc:6d:d5: 63:5c:d9:c2:68:99:cd:44:e2:b7:b6:24:3a:30:6d:31:f4:7a: 6c:f8:6f:f4:a3:52:07:5f:51:d7:6d:3a:5e:00:0e:10:33:47: 4d:83:0c:b7:27:b6:25:b8:af:dc:aa:1a:a9:46:f8:d0:82:a6: a6:f0:8a:dc:24:12:58:f5:02:f9:02:e2:13:71:57:22:c4:c8: a0:18:bb:0e:04:64:b3:a5:1c:68:06:12:84:8f:d3:50:70:33: f4:d5:62:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8DGfQ/4ms3lQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjUzYzk1ODgtNzY3Ny00MTMzLThmOTgtYzFlZjg3OWM0MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotNkQ8fDcnEfYwdCBzJ99Cdhtct6tMez7oAv dUKG9NlU9eD2t+3hSQ0p7SDcO+xAlplK42Rn3jgxVN0Yo/nhnpXI4UtTsoZXg4Lf dNliCAli6qMX9C5dIiFYVVJM5eMxLm+504C6JQ+L9Kfcmix6rL+89wtUucAyssxY OPZgmthH4OMQN8JoaCFPa8hYdrehuD4vMRVWmheWxDzgDmdkx0bm/zpqEG1q5Cte +rNqZqh3RE7S3tbeDGBUP+FhemntEOspgyho+hn8P/EUMYuRMLzZ84HVRpOEPiEY yduz+6hW5xcrnYz5Lo7IjL1aPtwEfsd3oaP9KU4d6pmWIwjgQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcxb+AEToYxqNguemv6vXg8+N6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTUyMjZiMTAtNTJiNC0z NzFmLWJjY2EtYjgyOTI1NTZiOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1Z4dwflD6Vrf2Na8GrSsHVRnNbwng0IVuahOU5jt2Bp9szD1gz PoLLn/JIzJp5CUdddJetT05erSGXX/rd+YX0mLqzuxhx5Fndv6Fe7FycAMqp2aaD 5xlM2vOPYH/yVj9vMHhlqkBwvTOdlKdmfQ4CM8hH6JvQ/6I4sXfwOCSMJTTdSbgC 1SR2NbOMOS+gf6sp0X4gUrVdnk0YfJyK6Mxt1WNc2cJomc1E4re2JDowbTH0emz4 b/SjUgdfUddtOl4ADhAzR02DDLcntiW4r9yqGqlG+NCCpqbwitwkElj1AvkC4hNx VyLEyKAYuw4EZLOlHGgGEoSP01BwM/TVYik= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:34 2025 by rpki-client