$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f4bbc4-508a-3ca7-a897-290d7b1ac217.roa File: a1f4bbc4-508a-3ca7-a897-290d7b1ac217.roa (raw, json) Hash identifier: LiTdQQXsPX0leoYSsDAFQrqVRXYByBXs7Y2R2upEczk= Subject key identifier: 6A:87:65:F5:30:89:EE:96:A7:6C:17:0A:D3:A1:D1:30:59:5C:73:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD2FC900B23F560F32980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f4bbc4-508a-3ca7-a897-290d7b1ac217.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 138995 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d2:fc:90:0b:23:f5:60:f3:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=7c63b71e-489e-4a20-8318-b14d2d93a03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:37:f6:d1:08:c4:72:9e:8e:b2:da:e4:3f: fc:58:22:0b:2d:cf:44:8c:f3:f5:69:d3:cc:ca:75: 47:23:03:0e:10:de:8d:e0:e2:33:b2:b1:f6:fc:22: d2:d7:98:b5:7b:76:c4:f3:e7:72:b7:ff:e0:c1:e8: 84:c6:58:4e:29:da:13:33:df:9d:79:6b:38:79:5b: 1f:04:d5:9e:6b:37:a2:74:d5:d4:47:9b:82:28:b6: 9a:ab:16:85:4d:d9:eb:ba:7e:97:43:7f:6d:85:45: ec:55:f3:29:3a:0b:48:3e:6f:8b:ca:c3:22:b9:9f: 64:18:e0:bf:a0:96:d6:93:0b:bb:16:16:87:b9:2c: ea:9e:3f:38:93:71:d5:38:4f:bb:a9:3c:49:9c:2e: 82:ed:3d:ea:0b:99:f0:11:c3:a9:b0:5c:c3:89:36: f9:16:87:e1:20:fd:08:0e:29:88:0b:7b:e2:c9:a9: d2:fc:9b:fe:2b:59:8d:76:82:b9:33:b7:c6:cc:cb: 07:9f:e6:e1:fb:f6:da:03:e9:98:a2:83:42:33:64: f6:32:f0:43:15:8f:02:78:a4:29:8f:fe:d2:af:52: d2:75:13:53:f5:9a:ce:2a:84:d2:83:9b:b7:1a:cd: b9:76:d0:61:88:ff:c6:e7:78:9b:b9:2b:79:a1:b5: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:87:65:F5:30:89:EE:96:A7:6C:17:0A:D3:A1:D1:30:59:5C:73:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f4bbc4-508a-3ca7-a897-290d7b1ac217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:1c:5e:e9:77:96:53:b8:0a:1d:f9:a9:0e:3c:8b:ae:00:4b: 15:b0:e8:d9:1c:81:0e:68:ed:ba:33:05:ca:d1:b2:36:e8:7e: 15:81:7f:dd:a6:8f:9a:f9:26:2d:1b:40:a6:b3:64:7a:7d:94: cd:1b:6b:41:b7:85:58:21:1c:2e:81:e2:07:99:38:d8:4b:2b: 55:f6:70:96:06:9d:28:f3:f1:bc:01:aa:01:35:f7:ea:51:92: e5:c4:73:9f:f7:dc:e8:56:96:e9:54:8b:4d:60:ea:ae:5a:be: 68:a2:2a:35:af:b2:63:78:ad:34:61:37:5c:2d:0e:f4:5c:20: e7:0e:56:a3:13:39:1c:58:7f:6f:3c:2b:36:43:9f:99:72:e6: c6:13:bf:b4:8b:b7:c0:f4:7d:18:45:1e:fa:f0:e2:85:41:59: d2:b8:07:25:3c:68:21:03:31:45:5c:01:19:d3:71:a8:d9:ad: ea:84:5d:ea:25:df:de:43:dd:41:09:63:03:1e:68:7a:2b:cf: 1d:a3:93:55:6d:d4:32:37:a3:1f:a0:52:da:46:42:c1:d4:9d: 38:8c:f3:11:28:29:b6:8d:fc:69:5c:b6:ab:f8:95:f6:39:90: 18:aa:0e:4a:6a:c9:3e:d3:0c:ee:8c:d2:39:fd:b5:aa:02:58: ee:9b:2d:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9L8kAsj9WDzKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2M2M2I3MWUtNDg5ZS00YTIwLTgzMTgtYjE0ZDJkOTNhMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxME39tEIxHKejrLa5D/8WCILLc9EjPP1adPM ynVHIwMOEN6N4OIzsrH2/CLS15i1e3bE8+dyt//gweiExlhOKdoTM9+deWs4eVsf BNWeazeidNXUR5uCKLaaqxaFTdnrun6XQ39thUXsVfMpOgtIPm+LysMiuZ9kGOC/ oJbWkwu7FhaHuSzqnj84k3HVOE+7qTxJnC6C7T3qC5nwEcOpsFzDiTb5FofhIP0I DimIC3viyanS/Jv+K1mNdoK5M7fGzMsHn+bh+/baA+mYooNCM2T2MvBDFY8CeKQp j/7Sr1LSdRNT9ZrOKoTSg5u3Gs25dtBhiP/G53ibuSt5obVEzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqHZfUwie6Wp2wXCtOh0TBZXHOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTFmNGJiYzQtNTA4YS0z Y2E3LWE4OTctMjkwZDdiMWFjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYcXul3llO4Ch35qQ48i64ASxWw6NkcgQ5o7bozBcrRsjbofhWB f92mj5r5Ji0bQKazZHp9lM0ba0G3hVghHC6B4geZONhLK1X2cJYGnSjz8bwBqgE1 9+pRkuXEc5/33OhWlulUi01g6q5avmiiKjWvsmN4rTRhN1wtDvRcIOcOVqMTORxY f288KzZDn5ly5sYTv7SLt8D0fRhFHvrw4oVBWdK4ByU8aCEDMUVcARnTcajZreqE Xeol395D3UEJYwMeaHorzx2jk1Vt1DI3ox+gUtpGQsHUnTiM8xEoKbaN/Glctqv4 lfY5kBiqDkpqyT7TDO6M0jn9taoCWO6bLZg= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:24 2025 by rpki-client