$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa File: a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa (raw, json) Hash identifier: ujYGI362OWAuLamZz1gLQjrz1+rI2d85TOP0qrA3B8s= Subject key identifier: 51:D2:D2:BA:37:C5:96:4C:FF:92:8C:02:7E:89:0C:9C:D9:BC:C8:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFA9B3E4608F031FEAA80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 198408 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fa:9b:3e:46:08:f0:31:fe:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ba1d4d38-de1a-4a45-bf82-cb04d7f1af44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:50:eb:f0:d1:05:27:7c:c5:bc:72:f7:fb: 08:b9:aa:1a:f9:1e:56:2e:61:31:21:ba:66:84:9e: 7f:0a:41:db:c1:89:8e:13:f9:45:e3:83:d5:0b:fb: 08:2a:b4:2b:62:46:b6:6c:e6:a3:5f:54:34:1b:ee: 47:30:7e:af:35:2a:a3:31:83:cf:7d:83:5c:26:4b: a6:b8:31:ea:cd:c7:eb:1d:5c:00:0e:9d:04:ca:82: 54:ef:d5:88:55:fb:2f:79:c4:30:fc:a0:e8:77:13: 65:c1:6d:55:72:43:1c:0a:f8:08:21:8f:cd:aa:18: 1a:29:a1:6d:b2:48:0e:2f:ee:3f:70:20:66:4c:b5: f5:4f:00:1e:bc:cd:6a:94:e1:93:67:02:05:6a:f0: a8:b7:9e:3b:5b:c0:67:39:fc:d0:1b:37:b0:64:2d: e1:6b:f1:a2:1c:11:44:7a:e5:2a:e8:99:3e:a7:d5: 65:2f:04:50:c0:61:52:f5:e3:16:f8:ba:03:e4:e5: ba:05:34:c5:ce:51:30:5a:d3:9c:cc:c5:5e:d9:fe: 61:61:4b:6a:6c:75:01:0c:5c:77:b2:54:c3:ba:36: 25:c8:91:fe:25:23:c7:d7:0f:1b:ee:6c:e9:6b:21: 1b:47:86:50:0c:d0:86:b7:40:84:4b:60:f4:88:ac: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:D2:BA:37:C5:96:4C:FF:92:8C:02:7E:89:0C:9C:D9:BC:C8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d6:04:83:a3:0c:56:3b:9c:75:a4:33:ed:64:fe:d0:3e:8b: 02:72:2e:50:4d:c8:2e:4b:98:d3:1d:69:5f:6d:37:60:3a:88: ec:e7:c2:50:66:58:96:cb:73:17:b4:86:54:15:0f:cf:59:61: 45:af:a0:6c:53:2a:c6:7e:83:9b:7d:81:b7:54:27:a1:26:8a: 3d:c6:07:ee:ea:8d:b7:5e:36:dd:c3:24:19:f1:59:66:1f:7d: 71:55:72:1f:e2:e4:62:ef:af:c1:08:b7:24:70:3a:11:cb:78: 73:e7:42:d5:9d:b8:07:49:3f:69:41:6e:aa:0b:3a:77:16:7a: f6:11:05:cc:d2:ef:e0:65:44:19:93:37:c3:ee:cd:00:bc:e5: b2:f9:42:31:68:82:45:fd:f8:20:9b:05:06:66:93:7d:da:b7: 4a:b6:63:10:5d:dd:24:37:48:24:83:86:43:14:86:d1:da:a5: d1:89:90:c5:8c:ac:c0:7b:cd:4d:75:75:00:ba:19:56:d7:cc: ee:0e:52:4b:13:29:db:6b:f5:ab:c4:4b:7c:c4:76:cf:e8:be: 9a:39:9b:60:60:02:0b:11:62:37:d8:0b:f0:38:27:8e:71:9a: 81:f3:9e:27:6e:75:99:f8:92:2f:f5:a4:f4:d0:40:28:e4:22: b1:d0:35:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/qbPkYI8DH+qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmExZDRkMzgtZGUxYS00YTQ1LWJmODItY2IwNGQ3ZjFhZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoidQ6/DRBSd8xbxy9/sIuaoa+R5WLmExIbpm hJ5/CkHbwYmOE/lF44PVC/sIKrQrYka2bOajX1Q0G+5HMH6vNSqjMYPPfYNcJkum uDHqzcfrHVwADp0EyoJU79WIVfsvecQw/KDodxNlwW1VckMcCvgIIY/NqhgaKaFt skgOL+4/cCBmTLX1TwAevM1qlOGTZwIFavCot547W8BnOfzQGzewZC3ha/GiHBFE euUq6Jk+p9VlLwRQwGFS9eMW+LoD5OW6BTTFzlEwWtOczMVe2f5hYUtqbHUBDFx3 slTDujYlyJH+JSPH1w8b7mzpayEbR4ZQDNCGt0CES2D0iKyj0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFHS0ro3xZZM/5KMAn6JDJzZvMhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTk0Yjk4MmItODBhMi0z Y2Q2LWI2YTAtMTEyZDIzMWNjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDWBIOjDFY7nHWkM+1k/tA+iwJyLlBNyC5LmNMdaV9tN2A6iOzn wlBmWJbLcxe0hlQVD89ZYUWvoGxTKsZ+g5t9gbdUJ6Emij3GB+7qjbdeNt3DJBnx WWYffXFVch/i5GLvr8EItyRwOhHLeHPnQtWduAdJP2lBbqoLOncWevYRBczS7+Bl RBmTN8PuzQC85bL5QjFogkX9+CCbBQZmk33at0q2YxBd3SQ3SCSDhkMUhtHapdGJ kMWMrMB7zU11dQC6GVbXzO4OUksTKdtr9avES3zEds/ovpo5m2BgAgsRYjfYC/A4 J45xmoHznidudZn4ki/1pPTQQCjkIrHQNVA= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:51 2025 by rpki-client