$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa File: 95f1b5de-c98a-3860-b4ed-db462a659e9a.roa (raw, json) Hash identifier: FDjYK2mhsi/rJoky5IZGz8kviT5OQODkXmWGkr1X9bQ= Subject key identifier: 92:60:5E:2B:D7:88:93:74:D6:75:49:CC:1C:69:D1:DD:6A:53:C4:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A97A9E74AA1DCE20964B25500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa Signing time: Mon 21 Jul 2025 13:30:09 +0000 ROA not before: Mon 21 Jul 2025 13:30:09 +0000 ROA not after: Sun 19 Oct 2025 13:30:09 +0000 asID: 26857 IP address blocks: 2001:470:494::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:a9:e7:4a:a1:dc:e2:09:64:b2:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 21 13:30:09 2025 GMT Not After : Oct 19 13:30:09 2025 GMT Subject: CN=201b4c0e-fc48-47df-abfa-887bc7438098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:0b:1b:56:32:c9:e5:52:a2:fb:66:60:ea: c3:0c:a1:b8:92:e8:bc:c5:aa:a5:d3:a6:39:0b:f9: 3c:5a:59:59:86:ca:d8:94:58:85:1f:2d:33:d9:d8: 54:f3:b8:bf:63:7d:d3:54:7d:80:db:a2:8c:a0:1b: 6f:60:84:c0:26:3f:71:9d:97:cc:a7:c5:0a:9c:f8: f4:ae:61:50:c0:67:ca:03:e7:d3:81:57:cd:0a:04: dc:05:f1:9e:d8:49:6e:fa:61:90:41:2c:1c:30:42: 9d:8b:51:05:fa:e2:a5:32:ef:5d:d3:4a:6d:58:c1: 7f:3a:f7:3e:dd:11:33:08:8b:90:93:51:30:24:29: 8b:d5:79:40:39:90:59:b2:af:e8:9e:28:48:f9:dd: f4:59:21:41:3b:fd:48:4b:28:2a:45:64:0e:ce:7c: be:41:ed:d5:ec:de:c5:bb:d6:97:86:26:a2:c5:af: 34:bc:eb:ea:81:67:ae:81:d0:e0:ed:04:68:cf:97: ff:66:5a:4a:1a:80:27:f6:f4:3a:49:71:22:3b:e1: bb:3a:a3:16:76:2c:7b:66:85:78:67:2e:75:2c:db: ca:cf:80:15:b5:f9:a8:ed:9a:59:be:da:ca:06:77: b3:ff:80:42:73:46:c6:16:c1:bf:21:73:b0:cb:a0: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:60:5E:2B:D7:88:93:74:D6:75:49:CC:1C:69:D1:DD:6A:53:C4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:494::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f0:8e:0f:28:01:a5:42:34:83:4d:02:51:64:a3:5b:5e:56: b2:d9:9b:46:f3:f5:66:48:c2:e9:fb:33:6b:6e:0e:dc:e2:1d: ec:cc:cc:df:9a:f5:8a:70:0c:ef:6c:85:16:99:34:98:eb:95: 20:f6:f9:c7:5e:4d:ef:20:6f:27:52:4b:da:ee:b4:8c:fc:6b: de:d8:0f:8e:09:b4:88:5c:a1:d3:c5:9c:e9:04:a4:af:db:a5: 45:98:d1:78:73:cc:57:ac:76:06:57:ed:0a:9e:fd:99:e4:a0: 98:18:28:42:ad:ab:c6:f7:b0:2e:5d:90:7a:f0:2a:c8:12:c4: d0:6f:11:c6:80:5c:9d:7c:19:8f:4b:67:8f:c7:f2:68:15:3c: 99:b0:2b:24:f7:0a:61:0c:e6:33:bb:74:13:5c:29:28:25:1f: ea:e6:34:50:6b:b2:44:2b:cc:7e:79:36:a2:3b:56:b0:eb:a0: 2e:cb:e8:bb:cd:0b:e2:e2:f6:dd:16:ce:c7:da:0e:ae:b7:fb: 2d:07:12:d0:7e:43:4d:1b:76:4b:15:0b:ad:97:43:4d:ba:83: d3:4a:12:c7:48:e3:06:4a:be:e7:8b:91:52:6f:9a:d0:4b:24: 1c:67:e2:a8:84:15:12:35:26:41:d1:ca:05:42:40:7d:aa:27: 32:b8:2c:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqXqedKodziCWSyVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMTEzMzAwOVoXDTI1MTAxOTEzMzAwOVowLzEtMCsGA1UEAxMk MjAxYjRjMGUtZmM0OC00N2RmLWFiZmEtODg3YmM3NDM4MDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbMLG1YyyeVSovtmYOrDDKG4kui8xaql06Y5 C/k8WllZhsrYlFiFHy0z2dhU87i/Y33TVH2A26KMoBtvYITAJj9xnZfMp8UKnPj0 rmFQwGfKA+fTgVfNCgTcBfGe2Elu+mGQQSwcMEKdi1EF+uKlMu9d00ptWMF/Ovc+ 3REzCIuQk1EwJCmL1XlAOZBZsq/onihI+d30WSFBO/1ISygqRWQOzny+Qe3V7N7F u9aXhiaixa80vOvqgWeugdDg7QRoz5f/ZlpKGoAn9vQ6SXEiO+G7OqMWdix7ZoV4 Zy51LNvKz4AVtfmo7ZpZvtrKBnez/4BCc0bGFsG/IXOwy6A8OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJJgXivXiJN01nVJzBxp0d1qU8TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTVmMWI1ZGUtYzk4YS0z ODYwLWI0ZWQtZGI0NjJhNjU5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfwjg8oAaVCNINNAlFko1teVrLZm0bz9WZIwun7M2tuDtziHezM zN+a9YpwDO9shRaZNJjrlSD2+cdeTe8gbydSS9rutIz8a97YD44JtIhcodPFnOkE pK/bpUWY0XhzzFesdgZX7Qqe/ZnkoJgYKEKtq8b3sC5dkHrwKsgSxNBvEcaAXJ18 GY9LZ4/H8mgVPJmwKyT3CmEM5jO7dBNcKSglH+rmNFBrskQrzH55NqI7VrDroC7L 6LvNC+Li9t0WzsfaDq63+y0HEtB+Q00bdksVC62XQ026g9NKEsdI4wZKvueLkVJv mtBLJBxn4qiEFRI1JkHRygVCQH2qJzK4LLg= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:50 2025 by rpki-client