$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdddc481-3cc9-3cfa-b930-41767bd68afd.roa File: bdddc481-3cc9-3cfa-b930-41767bd68afd.roa (raw, json) Hash identifier: wEYCa4rohVLsntYeXhXKfkRcwvsAKz68mrzSxsX2Rk4= Subject key identifier: 34:1D:03:6C:80:08:C5:B9:DE:44:F4:D5:23:E4:39:4F:C5:D6:F5:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDB21FDC6ECD010D82CC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdddc481-3cc9-3cfa-b930-41767bd68afd.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 135423 IP address blocks: 2001:470:2f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:db:21:fd:c6:ec:d0:10:d8:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2558013f-e543-4d86-9654-e5666367e44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:1c:53:1f:90:a0:4f:56:36:e6:6b:22:00: 3a:f4:c9:e7:c3:b0:9c:2c:47:bb:09:60:bf:19:c3: 18:0e:ff:a5:cd:fc:7b:8a:9d:09:7b:68:27:d8:73: 7d:8e:9a:11:57:90:15:3d:e7:08:e7:31:38:b5:22: b9:1f:3b:df:d1:81:93:5f:34:03:4a:e2:94:20:34: 52:db:54:6c:51:8a:74:72:b4:a6:3a:14:e3:a9:cf: 14:ab:16:8d:6c:88:f4:80:13:38:12:21:24:32:a0: e0:3c:a1:8d:d6:17:c7:9e:44:b7:1b:bb:08:fb:9f: f6:b6:22:dc:df:52:32:36:79:45:e5:17:c0:d6:83: 7d:fe:ee:d3:90:09:87:7e:94:09:58:df:e9:eb:49: 30:ba:6f:8b:2c:91:97:8f:39:0d:65:21:98:3d:f2: c6:f2:ff:59:5c:25:38:f3:8f:5c:1d:5e:20:bf:4d: 2f:e9:11:ff:e4:c2:d6:6f:c8:b9:e6:c7:86:4d:cf: b0:3e:4b:bb:f3:2c:de:4c:22:18:f9:ac:2c:a3:8b: f7:41:60:71:1f:e1:e0:71:6f:73:cd:20:51:83:fc: c8:c1:3b:47:c2:d3:2d:26:22:22:b8:4c:fb:c3:35: bc:be:9e:a0:98:a4:3a:16:55:1a:fb:37:60:bc:61: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:03:6C:80:08:C5:B9:DE:44:F4:D5:23:E4:39:4F:C5:D6:F5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdddc481-3cc9-3cfa-b930-41767bd68afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d5:ec:25:25:c7:6e:5c:85:74:70:26:07:4f:75:4c:52:e4: 97:08:d0:8d:5b:bc:c6:f8:70:a3:8c:cf:c7:ee:d5:49:47:90: f1:9a:78:2a:19:db:49:9d:a6:ec:c8:16:58:b8:26:e1:e3:8f: bd:9d:2f:4c:cc:6b:79:f1:39:39:27:01:b5:20:d4:9d:c3:23: 70:8e:cd:cf:65:69:00:b4:4b:a5:0e:19:a7:ba:3c:49:e0:e7: 78:90:7f:8e:61:aa:59:bb:47:d1:ac:ad:ea:cb:51:0b:a5:30: 74:82:b2:58:a3:f0:a0:5e:6f:a3:72:96:12:52:02:24:62:8a: ce:04:5b:ef:cc:12:f6:fd:cc:a2:be:90:b3:2c:1e:61:ab:00: d7:52:a1:26:a4:ff:c4:d3:90:6a:59:05:85:61:af:69:b1:b1: e7:c7:d9:9d:8d:26:c0:bf:34:88:5d:59:86:0a:a7:20:31:38: 6d:34:40:f8:39:03:cb:9c:05:67:53:b5:c6:3f:5c:e4:6a:02: 2e:ab:2b:dc:12:87:29:d8:45:76:56:cd:20:5f:63:b0:1b:a7: d4:37:7b:ca:94:7a:11:9c:45:95:05:ad:d7:ea:d4:bf:20:25: 94:3f:1d:c6:bd:35:b2:44:5e:8a:ef:55:d8:24:7c:21:b6:ab: 67:cc:08:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9sh/cbs0BDYLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjU1ODAxM2YtZTU0My00ZDg2LTk2NTQtZTU2NjYzNjdlNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPgcUx+QoE9WNuZrIgA69Mnnw7CcLEe7CWC/ GcMYDv+lzfx7ip0Je2gn2HN9jpoRV5AVPecI5zE4tSK5Hzvf0YGTXzQDSuKUIDRS 21RsUYp0crSmOhTjqc8UqxaNbIj0gBM4EiEkMqDgPKGN1hfHnkS3G7sI+5/2tiLc 31IyNnlF5RfA1oN9/u7TkAmHfpQJWN/p60kwum+LLJGXjzkNZSGYPfLG8v9ZXCU4 849cHV4gv00v6RH/5MLWb8i55seGTc+wPku78yzeTCIY+awso4v3QWBxH+HgcW9z zSBRg/zIwTtHwtMtJiIiuEz7wzW8vp6gmKQ6FlUa+zdgvGHxXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQdA2yACMW53kT01SPkOU/F1vVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmRkZGM0ODEtM2NjOS0z Y2ZhLWI5MzAtNDE3NjdiZDY4YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnV7CUlx25chXRwJgdPdUxS5JcI0I1bvMb4cKOMz8fu1UlHkPGa eCoZ20mdpuzIFli4JuHjj72dL0zMa3nxOTknAbUg1J3DI3COzc9laQC0S6UOGae6 PEng53iQf45hqlm7R9GsrerLUQulMHSCslij8KBeb6NylhJSAiRiis4EW+/MEvb9 zKK+kLMsHmGrANdSoSak/8TTkGpZBYVhr2mxsefH2Z2NJsC/NIhdWYYKpyAxOG00 QPg5A8ucBWdTtcY/XORqAi6rK9wShynYRXZWzSBfY7Abp9Q3e8qUehGcRZUFrdfq 1L8gJZQ/Hca9NbJEXorvVdgkfCG2q2fMCIo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:07 2025 by rpki-client