$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba3679f0-8cdf-3d35-ac21-dfb3b343dbdf.roa File: ba3679f0-8cdf-3d35-ac21-dfb3b343dbdf.roa (raw, json) Hash identifier: fAZoP+dQBNsR73x8OLHvM1EWReCFRGoD1nn7eStDQKA= Subject key identifier: B0:49:ED:29:88:2D:E3:31:B1:68:D9:45:1B:A5:05:24:78:A4:05:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFC078FDB8150CD75E300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba3679f0-8cdf-3d35-ac21-dfb3b343dbdf.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 51500 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fc:07:8f:db:81:50:cd:75:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=76f94c2b-38bf-429d-9a79-30bb02657d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:39:12:67:63:ff:d8:0d:c1:a0:b0:71:f8: 63:d2:40:57:ae:68:ec:1d:9a:98:64:78:50:ee:9a: 72:84:25:93:09:2f:f1:c2:93:cb:6f:4b:81:3b:c0: 69:4b:a5:b3:fd:50:ad:37:ac:05:45:84:3e:33:d7: 06:84:6d:71:52:3f:30:09:c3:88:8b:d7:aa:02:0e: 0b:8e:ae:17:3b:97:1a:35:6b:89:0c:fd:fc:01:c2: 89:45:42:64:c6:57:75:71:20:c5:c8:fe:28:ec:9f: 36:58:87:51:d6:ca:d8:8c:95:65:84:6c:72:f0:7f: 42:b4:8c:68:49:e0:6b:b7:b1:98:57:39:7c:70:27: 5b:b4:83:df:0a:11:59:11:af:73:2a:b8:2e:98:f0: 4e:95:fd:68:d5:3a:30:a9:ad:b1:44:f8:ee:39:3f: 98:5a:4a:98:8f:cb:3e:50:cb:33:51:aa:6d:11:fb: 65:0a:ef:62:d4:5a:85:4d:6e:fd:9e:f1:04:a7:62: 3f:a5:22:54:c8:32:06:56:3a:16:1f:bb:6b:8f:5e: 86:b6:fd:c0:73:6b:3a:83:b1:00:f4:4f:9a:cf:25: 0d:8f:3b:84:0a:7a:e2:d6:ab:97:af:2e:f5:b9:b8: d9:c2:7b:e9:9a:96:6d:12:58:14:b0:45:3a:2c:93: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:ED:29:88:2D:E3:31:B1:68:D9:45:1B:A5:05:24:78:A4:05:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba3679f0-8cdf-3d35-ac21-dfb3b343dbdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:1f:53:02:49:97:88:bf:8d:f7:18:0d:ae:f8:c5:7b:f4:ca: 2a:4f:7f:63:a6:09:ac:10:30:02:fc:18:cc:77:8b:69:3e:9d: a7:08:28:d7:fc:16:ce:28:07:c3:7f:65:c7:e7:d9:8c:cf:18: 44:54:5d:06:ec:ca:1b:60:72:4e:68:91:c4:ec:12:3e:06:21: 0a:2b:09:4f:42:0c:3a:63:12:14:4f:b8:68:bc:a3:7e:c3:51: b0:a9:34:7c:56:58:48:ea:4f:22:74:e8:d2:88:f2:5f:8f:d7: 43:2d:b3:c4:99:e2:89:77:68:59:d7:0a:a0:8f:07:11:37:75: dd:62:bc:a1:ea:64:e8:a5:b3:43:55:fe:53:28:e9:66:dd:56: ed:90:39:42:46:12:df:5d:06:97:14:ef:3d:ed:02:50:93:c0: 5b:90:8f:92:f0:85:d9:de:ad:2a:de:b1:a7:33:10:16:fd:b0: 8d:90:d2:9a:f6:b2:35:3f:61:11:76:75:db:db:ac:36:b8:19: 89:e2:c4:d7:e0:b6:4b:76:04:77:b6:d7:7f:3f:d2:9f:13:96: 48:fe:06:14:c0:14:79:a1:ae:d9:f2:c4:00:5b:a7:ed:58:4f: 0f:ac:32:58:d4:25:87:9b:28:9e:60:aa:b7:ef:43:bf:33:54: 1a:af:41:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/wHj9uBUM114wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzZmOTRjMmItMzhiZi00MjlkLTlhNzktMzBiYjAyNjU3ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXY5Emdj/9gNwaCwcfhj0kBXrmjsHZqYZHhQ 7ppyhCWTCS/xwpPLb0uBO8BpS6Wz/VCtN6wFRYQ+M9cGhG1xUj8wCcOIi9eqAg4L jq4XO5caNWuJDP38AcKJRUJkxld1cSDFyP4o7J82WIdR1srYjJVlhGxy8H9CtIxo SeBrt7GYVzl8cCdbtIPfChFZEa9zKrgumPBOlf1o1Towqa2xRPjuOT+YWkqYj8s+ UMszUaptEftlCu9i1FqFTW79nvEEp2I/pSJUyDIGVjoWH7trj16Gtv3Ac2s6g7EA 9E+azyUNjzuECnri1quXry71ubjZwnvpmpZtElgUsEU6LJOnvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBJ7SmILeMxsWjZRRulBSR4pAWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmEzNjc5ZjAtOGNkZi0z ZDM1LWFjMjEtZGZiM2IzNDNkYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALsfUwJJl4i/jfcYDa74xXv0yipPf2OmCawQMAL8GMx3i2k+nacI KNf8Fs4oB8N/Zcfn2YzPGERUXQbsyhtgck5okcTsEj4GIQorCU9CDDpjEhRPuGi8 o37DUbCpNHxWWEjqTyJ06NKI8l+P10Mts8SZ4ol3aFnXCqCPBxE3dd1ivKHqZOil s0NV/lMo6WbdVu2QOUJGEt9dBpcU7z3tAlCTwFuQj5LwhdnerSresaczEBb9sI2Q 0pr2sjU/YRF2ddvbrDa4GYnixNfgtkt2BHe2138/0p8Tlkj+BhTAFHmhrtnyxABb p+1YTw+sMljUJYebKJ5gqrfvQ78zVBqvQVs= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:02 2025 by rpki-client