$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba66a3ef-12ac-359d-a40f-1c21022752f3.roa File: ba66a3ef-12ac-359d-a40f-1c21022752f3.roa (raw, json) Hash identifier: lFopOkIHu+rbKtZP9fCxQnNkjvFeeLCCW4v0VKoYpOs= Subject key identifier: 19:9D:38:6B:A5:B6:E6:A6:46:34:BF:86:CC:F1:53:17:5B:15:10:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A884F27B5B90B20B081721400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba66a3ef-12ac-359d-a40f-1c21022752f3.roa Signing time: Wed 16 Jul 2025 01:30:11 +0000 ROA not before: Wed 16 Jul 2025 01:30:11 +0000 ROA not after: Tue 14 Oct 2025 01:30:11 +0000 asID: 14763 IP address blocks: 2001:470:48e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:4f:27:b5:b9:0b:20:b0:81:72:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 16 01:30:11 2025 GMT Not After : Oct 14 01:30:11 2025 GMT Subject: CN=3c1fc13d-1d6c-4b1b-8014-bf341e22a68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:af:ec:53:43:1c:b0:34:ff:c1:8d:f5:f0: 62:d4:d8:36:ba:75:d7:a0:38:67:db:fc:78:b1:3f: fc:68:7e:a2:fb:90:39:19:72:41:b1:80:3f:50:f8: 59:22:de:00:1b:eb:23:81:42:c1:66:48:50:3a:44: 68:96:1c:f9:d6:65:bf:f2:49:c5:2f:0c:56:47:f1: 06:95:fd:ef:bc:3c:ef:96:1b:f4:4d:04:a2:e8:cf: fe:fd:05:88:81:a6:ce:a7:8d:f7:68:e9:33:15:ee: d6:75:8c:55:e4:04:cc:b7:0f:5a:b7:05:ff:1f:db: cf:17:51:20:a9:c8:f9:82:f5:91:64:21:97:8f:e6: 38:f6:1e:fd:1c:cb:ce:25:91:59:d1:96:ef:32:04: 48:a3:62:bc:88:e7:7d:5e:40:7c:58:09:69:0c:88: 51:f9:7b:e3:46:39:8a:c9:49:d5:54:9e:be:a6:92: 03:21:87:d7:57:e0:43:2f:57:5a:af:c0:95:d3:a8: 81:a7:7d:65:50:52:de:e0:39:ce:a8:da:b3:73:29: bb:bc:08:30:6b:f1:27:f3:e5:c3:f8:a2:e3:b6:36: 6c:95:fd:f8:24:74:91:8d:ee:1a:18:b0:ee:45:85: ec:86:7f:05:a7:6f:c7:24:63:7f:95:9d:1c:95:62: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:38:6B:A5:B6:E6:A6:46:34:BF:86:CC:F1:53:17:5B:15:10:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba66a3ef-12ac-359d-a40f-1c21022752f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:48e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4c:21:d2:9f:9b:2d:3b:55:1c:02:f8:ad:46:5c:63:1c:74: ea:74:22:7e:11:8a:7f:39:b3:12:ea:d6:3f:b4:60:aa:23:23: 3e:ce:07:91:42:0c:72:6a:54:92:55:e5:19:5b:59:61:f2:8d: d8:85:0a:3a:d6:a4:a4:d0:76:e7:99:8e:b4:7d:73:27:0c:97: 59:de:40:65:1c:92:eb:32:8b:40:3b:97:45:81:74:ca:41:ed: ee:27:3e:a6:fc:b7:25:a8:99:ff:6f:7a:31:a6:02:c1:ee:6f: 50:3b:0b:67:af:93:d8:e7:41:eb:a8:2b:61:b3:48:a9:c9:2f: d4:b5:2a:92:ee:a7:8b:d1:fe:80:e5:1a:67:7f:34:1e:cb:2b: 42:3c:c5:50:c1:e6:70:59:87:6c:db:d0:9e:86:57:21:ab:fe: d6:75:af:ec:f4:d5:83:30:ec:37:89:33:80:3c:b7:a1:87:85: 61:64:bd:11:88:76:89:f6:27:65:77:c3:f3:33:d2:04:e6:db: be:c6:fd:a4:35:41:cd:ec:42:71:1f:cc:7f:9a:52:e3:6f:8d: a2:4a:6b:93:6c:88:ab:e2:cc:f0:29:81:4f:4a:9f:95:27:5c: 6f:d8:06:5c:ce:00:a5:53:38:73:14:a8:23:2d:0f:1e:89:7e: 1c:bc:14:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqITye1uQsgsIFyFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxNjAxMzAxMVoXDTI1MTAxNDAxMzAxMVowLzEtMCsGA1UEAxMk M2MxZmMxM2QtMWQ2Yy00YjFiLTgwMTQtYmYzNDFlMjJhNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGv7FNDHLA0/8GN9fBi1Ng2unXXoDhn2/x4 sT/8aH6i+5A5GXJBsYA/UPhZIt4AG+sjgULBZkhQOkRolhz51mW/8knFLwxWR/EG lf3vvDzvlhv0TQSi6M/+/QWIgabOp433aOkzFe7WdYxV5ATMtw9atwX/H9vPF1Eg qcj5gvWRZCGXj+Y49h79HMvOJZFZ0ZbvMgRIo2K8iOd9XkB8WAlpDIhR+XvjRjmK yUnVVJ6+ppIDIYfXV+BDL1dar8CV06iBp31lUFLe4DnOqNqzcym7vAgwa/En8+XD +KLjtjZslf34JHSRje4aGLDuRYXshn8Fp2/HJGN/lZ0clWLRpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmdOGultuamRjS/hszxUxdbFRCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmE2NmEzZWYtMTJhYy0z NTlkLWE0MGYtMWMyMTAyMjc1MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpMIdKfmy07VRwC+K1GXGMcdOp0In4Rin85sxLq1j+0YKojIz7O B5FCDHJqVJJV5RlbWWHyjdiFCjrWpKTQdueZjrR9cycMl1neQGUckusyi0A7l0WB dMpB7e4nPqb8tyWomf9vejGmAsHub1A7C2evk9jnQeuoK2GzSKnJL9S1KpLup4vR /oDlGmd/NB7LK0I8xVDB5nBZh2zb0J6GVyGr/tZ1r+z01YMw7DeJM4A8t6GHhWFk vRGIdon2J2V3w/Mz0gTm277G/aQ1Qc3sQnEfzH+aUuNvjaJKa5NsiKvizPApgU9K n5UnXG/YBlzOAKVTOHMUqCMtDx6Jfhy8FCw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:36 2025 by rpki-client