$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa File: 98ede81b-b24a-3190-8a33-12806a1d7e56.roa (raw, json) Hash identifier: ejPn4mA0H6TV3Yhe4gZRPsev8U5aAPwV12x2qK/f1G8= Subject key identifier: D1:DC:74:F6:9F:32:AF:54:CE:D1:5B:73:23:CF:12:CB:1C:49:A7:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BBE53CF5F2B95B1746200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 32397 IP address blocks: 2001:470:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:be:53:cf:5f:2b:95:b1:74:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=17aa2d56-1abe-418f-9352-4f5129109f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:77:0a:e2:b3:82:e6:b0:45:a3:0a:d0:ac: 8f:c1:74:a1:b8:74:57:1c:ea:b2:94:95:49:9c:84: 55:29:71:ea:13:3c:7c:3a:ec:ae:77:14:25:da:69: 26:3a:8c:d7:05:8b:c8:80:e0:2b:9d:82:43:b9:68: 5b:b2:f2:1c:9a:11:bf:c4:09:6a:d6:d6:98:30:ea: fe:cc:e4:ce:7a:8a:68:b8:de:be:65:22:b6:ef:ca: 8a:1d:19:32:29:48:6f:7b:66:d5:17:82:a8:d1:9a: 15:de:e6:6c:3b:0c:51:68:b8:06:cf:99:37:39:b2: 97:39:c4:b4:96:d1:98:ce:6d:9f:98:00:99:2a:21: a3:db:cc:58:05:f9:46:be:ba:9d:45:87:9c:68:d3: ae:e5:cd:98:dd:4e:d4:c4:6d:b9:bb:aa:5c:d8:ec: 3d:e0:3d:c1:84:cd:fc:8d:ce:fa:8b:f0:ef:bd:de: c3:47:4c:cb:c6:b5:35:5d:7d:7d:ad:1d:e0:dc:c9: b4:a4:0a:8d:a0:ca:6d:de:0a:95:be:0a:c7:8d:24: c4:aa:d8:ac:d2:44:07:55:b0:35:77:37:8b:fe:f7: 1d:20:ed:ab:bd:62:d8:36:f4:0f:d8:cb:2f:e2:12: 19:d8:2e:58:39:75:b3:ff:4f:5b:be:90:5e:79:0b: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:74:F6:9F:32:AF:54:CE:D1:5B:73:23:CF:12:CB:1C:49:A7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98ede81b-b24a-3190-8a33-12806a1d7e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:10:c0:22:34:15:55:16:61:da:6b:cf:23:eb:18:e6:03:f3: 5a:53:4b:65:9c:ba:77:26:22:e3:96:54:fd:89:8b:05:a2:f4: 2e:89:72:5c:03:7b:b3:2f:7e:d0:a3:5f:1b:d8:7b:e0:4b:45: 45:63:7a:6b:30:79:9a:ef:ee:56:44:03:18:4d:3e:25:90:57: 54:0d:00:9d:7d:84:9b:62:dc:f2:b1:6c:d9:67:54:ac:13:82: d4:8d:98:c2:31:68:19:fe:4b:aa:62:a3:f9:31:e3:1d:39:0c: 29:7d:c9:9a:05:93:b1:6c:20:69:f7:28:23:c3:17:09:ed:f4: a9:32:d4:b9:d8:38:d5:f6:aa:a0:10:7a:3f:38:f7:91:88:82: d5:48:9a:2b:b9:7a:7b:d5:9a:99:7d:9e:d3:19:24:b4:c3:2f: 44:58:41:0e:31:d5:4b:59:3d:3e:35:ba:5b:e5:74:14:9e:65: 6c:96:de:26:07:73:84:38:d0:22:ca:c5:53:ae:2e:37:51:9a: fc:39:b3:eb:4a:8e:ec:a5:8f:8b:3b:83:25:c3:a6:71:33:59: b2:8e:a4:63:f0:73:28:c7:28:0a:b2:45:38:c3:8d:26:0a:ce: c2:a6:07:8b:5b:a0:12:ce:2a:ba:7d:0d:60:5f:bc:59:af:9c: d0:66:12:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G75Tz18rlbF0YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTdhYTJkNTYtMWFiZS00MThmLTkzNTItNGY1MTI5MTA5ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVZ3CuKzguawRaMK0KyPwXShuHRXHOqylJVJ nIRVKXHqEzx8OuyudxQl2mkmOozXBYvIgOArnYJDuWhbsvIcmhG/xAlq1taYMOr+ zOTOeopouN6+ZSK278qKHRkyKUhve2bVF4Ko0ZoV3uZsOwxRaLgGz5k3ObKXOcS0 ltGYzm2fmACZKiGj28xYBflGvrqdRYecaNOu5c2Y3U7UxG25u6pc2Ow94D3BhM38 jc76i/Dvvd7DR0zLxrU1XX19rR3g3Mm0pAqNoMpt3gqVvgrHjSTEqtis0kQHVbA1 dzeL/vcdIO2rvWLYNvQP2Msv4hIZ2C5YOXWz/09bvpBeeQuLnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHcdPafMq9UztFbcyPPEsscSadCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOThlZGU4MWItYjI0YS0z MTkwLThhMzMtMTI4MDZhMWQ3ZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMQwCI0FVUWYdprzyPrGOYD81pTS2WcuncmIuOWVP2JiwWi9C6J clwDe7MvftCjXxvYe+BLRUVjemsweZrv7lZEAxhNPiWQV1QNAJ19hJti3PKxbNln VKwTgtSNmMIxaBn+S6pio/kx4x05DCl9yZoFk7FsIGn3KCPDFwnt9Kky1LnYONX2 qqAQej8495GIgtVImiu5envVmpl9ntMZJLTDL0RYQQ4x1UtZPT41ulvldBSeZWyW 3iYHc4Q40CLKxVOuLjdRmvw5s+tKjuylj4s7gyXDpnEzWbKOpGPwcyjHKAqyRTjD jSYKzsKmB4tboBLOKrp9DWBfvFmvnNBmErY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:58 2025 by rpki-client