$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa File: acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa (raw, json) Hash identifier: biXc9lh3SGqmh0RWDdYEzewDoKOsRbyzmJyDXYvgfMk= Subject key identifier: 1F:DD:B1:76:DD:23:EA:28:13:03:CF:6D:67:E0:E5:8C:5B:BE:9F:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCE7C913CCD7CC1F30240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 8057 IP address blocks: 2001:470:1c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:7c:91:3c:cd:7c:c1:f3:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b1ab0de5-5208-4fef-a151-4e3e00e9165d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:4e:4b:19:43:73:4d:5a:22:e1:7e:d9:a7: 85:c2:db:5f:73:54:30:c4:88:9c:f6:27:e9:11:70: cc:72:55:eb:86:fa:e1:21:90:07:ee:fb:66:1b:19: 8e:fc:56:6e:37:09:5c:8d:4a:3d:49:1d:e2:7a:ba: 22:1f:3d:cd:a2:01:2c:30:76:7b:ae:5e:c0:6d:3f: 86:0b:c1:68:35:07:0b:a5:d3:8f:05:13:c8:37:cb: 7c:16:6c:8e:83:52:d4:9a:23:d1:ac:d0:87:ae:23: d7:55:10:97:3f:0d:f5:21:78:a5:58:f6:33:7f:69: f8:78:2d:92:af:4a:7f:33:0a:6b:a4:2b:ce:4b:71: 69:a5:f8:ed:99:5a:8f:bc:e8:44:63:91:d0:19:aa: 07:cc:69:f4:a1:85:70:5b:32:b8:2f:6e:b7:23:bd: 9e:39:0e:51:50:b3:b2:6d:25:29:00:98:60:5b:3b: 45:26:52:e8:ea:72:20:1b:c0:e4:e5:9f:a0:ff:d4: 46:0f:24:58:04:78:91:6e:da:84:7c:30:cb:fb:03: 69:bc:96:02:71:1e:6f:a8:53:13:42:11:31:12:90: 33:b9:64:5d:28:7f:6c:41:ae:6c:79:a2:7e:49:92: 52:02:e3:ce:2e:9c:c5:dd:ff:01:c2:81:98:2a:b5: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:B1:76:DD:23:EA:28:13:03:CF:6D:67:E0:E5:8C:5B:BE:9F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acd41c21-9c7d-35f6-b33b-a7eddd68aa60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:11:55:2e:81:aa:ac:2b:34:63:e1:15:1d:b9:cc:01:6d:f5: e3:9e:a7:3a:82:d7:e9:a0:4e:d3:86:d8:e1:83:54:98:b7:73: 32:ff:a7:8e:b7:ca:45:4f:9d:1a:9b:2d:6b:7b:21:17:43:a7: 2a:4a:17:25:77:09:e0:77:e7:9a:24:eb:bb:02:6c:be:82:c9: c4:4f:6d:91:a4:85:58:18:81:78:cc:8a:83:62:20:76:ab:14: c3:fd:d9:d9:28:48:d2:0e:1f:9f:58:ed:c7:ea:da:05:59:dc: ed:0a:6d:93:c6:bf:ad:76:5c:a7:ef:87:78:2d:d2:45:83:a2: 20:36:f0:d2:20:7c:6b:dd:1e:4d:f9:85:58:ac:73:b1:99:3f: a9:51:20:4f:0f:b5:af:d7:df:64:f0:79:9b:d2:4b:bc:b9:9c: b9:34:2a:6f:af:bf:80:25:ac:3b:fb:2d:dd:18:ef:52:94:90: b0:3c:d6:8a:37:82:90:cd:6e:05:6d:a1:fd:cc:17:14:32:4e: c2:8d:2e:d6:52:6f:5e:66:30:d6:ed:e3:28:7a:fd:49:7d:8f: c3:33:62:81:97:76:60:bb:0b:22:5d:d7:39:4b:04:62:90:20: b0:58:f0:f1:bb:78:22:12:30:bd:16:6b:17:c0:5e:ad:fa:e4: d3:d2:c6:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G858kTzNfMHzAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjFhYjBkZTUtNTIwOC00ZmVmLWExNTEtNGUzZTAwZTkxNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bpOSxlDc01aIuF+2aeFwttfc1QwxIic9ifp EXDMclXrhvrhIZAH7vtmGxmO/FZuNwlcjUo9SR3ieroiHz3NogEsMHZ7rl7AbT+G C8FoNQcLpdOPBRPIN8t8FmyOg1LUmiPRrNCHriPXVRCXPw31IXilWPYzf2n4eC2S r0p/MwprpCvOS3FppfjtmVqPvOhEY5HQGaoHzGn0oYVwWzK4L263I72eOQ5RULOy bSUpAJhgWztFJlLo6nIgG8Dk5Z+g/9RGDyRYBHiRbtqEfDDL+wNpvJYCcR5vqFMT QhExEpAzuWRdKH9sQa5seaJ+SZJSAuPOLpzF3f8BwoGYKrUUNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/dsXbdI+ooEwPPbWfg5Yxbvp90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWNkNDFjMjEtOWM3ZC0z NWY2LWIzM2ItYTdlZGRkNjhhYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIRVS6BqqwrNGPhFR25zAFt9eOepzqC1+mgTtOG2OGDVJi3czL/ p463ykVPnRqbLWt7IRdDpypKFyV3CeB355ok67sCbL6CycRPbZGkhVgYgXjMioNi IHarFMP92dkoSNIOH59Y7cfq2gVZ3O0KbZPGv612XKfvh3gt0kWDoiA28NIgfGvd Hk35hVisc7GZP6lRIE8Pta/X32TweZvSS7y5nLk0Km+vv4AlrDv7Ld0Y71KUkLA8 1oo3gpDNbgVtof3MFxQyTsKNLtZSb15mMNbt4yh6/Ul9j8MzYoGXdmC7CyJd1zlL BGKQILBY8PG7eCISML0WaxfAXq365NPSxu4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:37 2025 by rpki-client