$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/befb61ad-8796-36fa-b8cc-8433e562c2f4.roa File: befb61ad-8796-36fa-b8cc-8433e562c2f4.roa (raw, json) Hash identifier: 9leWOiHg5pushVETScBtGOuQ3Dn5f73h77a3pRJ7A5A= Subject key identifier: 1A:32:27:7B:A0:09:01:94:E4:1C:35:10:40:CB:70:30:84:B1:92:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A86DBB819AB3BC60C04D1F180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/befb61ad-8796-36fa-b8cc-8433e562c2f4.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 18596 IP address blocks: 2001:470:375::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:b8:19:ab:3b:c6:0c:04:d1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=9f73f435-f8e4-4745-8acf-512d5d9e2d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:f1:22:e8:46:5f:40:04:80:b8:25:42:94: fc:ee:55:e9:10:a4:ca:29:36:b2:24:81:d8:16:b6: b9:d2:0f:f9:24:c5:d4:3e:dc:4f:f3:15:18:bc:22: d1:dc:32:55:ac:aa:12:9d:98:f6:8a:ba:1e:b8:b9: 2e:40:03:97:4a:dc:26:b9:7f:6d:e0:21:67:59:a1: 2b:b6:f1:b2:90:8b:13:7f:ce:dc:17:f0:16:8e:28: 9c:6d:78:6d:1f:67:b8:67:95:ae:92:12:6d:3d:70: 3e:f4:57:d4:a0:b4:08:72:a3:c8:30:c4:cc:97:2c: 5a:58:f8:2e:ef:8b:a0:54:53:54:90:38:68:31:1b: 4e:4a:d5:05:13:32:35:fd:52:9b:06:27:d5:0c:bc: 0c:9f:29:ef:59:ab:48:58:d6:5e:74:1a:20:84:dd: dd:f4:50:30:fc:6e:af:30:54:d8:cf:3a:41:87:0f: 8a:aa:67:54:be:39:05:8b:94:58:29:99:bc:5c:49: 3b:1b:94:63:bd:d0:83:8f:50:1c:2b:00:37:ff:b7: 7c:32:c7:a1:a5:ff:17:f9:e4:1a:15:a0:44:28:05: 12:6c:34:58:a2:19:00:44:ea:22:a4:ac:a8:fa:a1: 8c:2a:62:ed:72:c6:d3:6b:b0:78:32:14:a4:01:a2: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:27:7B:A0:09:01:94:E4:1C:35:10:40:CB:70:30:84:B1:92:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/befb61ad-8796-36fa-b8cc-8433e562c2f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:375::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:6a:80:2c:54:2e:5a:8d:ec:52:13:48:82:c2:c8:a2:9c:03: a0:93:73:0b:53:5e:0b:c9:41:a7:e7:a7:92:5f:6c:09:5e:a9: 7d:74:dd:1b:97:f9:77:ef:05:5c:53:93:78:a7:ad:3c:f7:96: 2c:26:29:2f:08:4e:b7:37:2e:d0:78:e2:2d:ff:72:66:47:9b: 80:46:e0:20:9e:ac:31:b8:dc:ea:50:57:34:4e:0b:c2:90:a2: 34:a5:ea:be:e3:90:90:90:ad:ca:ff:22:a8:f5:7f:52:cb:53: 07:38:3c:d0:39:19:f6:4c:79:5d:2e:df:63:ac:a4:73:f4:54: f8:29:f5:f4:0a:a6:2e:2f:8d:8e:f6:00:5f:46:56:4d:b3:e0: d2:5b:46:e7:65:5e:ff:b5:c9:a0:e6:0c:e0:5d:ed:bb:e1:66: b2:c8:88:af:57:4b:87:09:3b:7e:2f:f8:a2:0e:d7:23:31:63: de:c1:e3:56:2b:ef:57:2a:ce:cd:79:cb:71:ea:cb:22:9a:bb: ac:ed:80:4f:28:a7:14:7d:a7:15:76:6b:30:b8:21:24:10:c4: ab:b2:ba:33:9e:fb:98:21:3b:91:69:39:f9:42:c8:4c:44:ed: 98:44:f2:78:ef:96:3b:d8:2e:a1:51:1f:fd:ff:6a:61:0a:43: a2:e9:b0:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqG27gZqzvGDATR8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk OWY3M2Y0MzUtZjhlNC00NzQ1LThhY2YtNTEyZDVkOWUyZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNLxIuhGX0AEgLglQpT87lXpEKTKKTayJIHY Fra50g/5JMXUPtxP8xUYvCLR3DJVrKoSnZj2iroeuLkuQAOXStwmuX9t4CFnWaEr tvGykIsTf87cF/AWjiicbXhtH2e4Z5WukhJtPXA+9FfUoLQIcqPIMMTMlyxaWPgu 74ugVFNUkDhoMRtOStUFEzI1/VKbBifVDLwMnynvWatIWNZedBoghN3d9FAw/G6v MFTYzzpBhw+KqmdUvjkFi5RYKZm8XEk7G5RjvdCDj1AcKwA3/7d8Msehpf8X+eQa FaBEKAUSbDRYohkAROoipKyo+qGMKmLtcsbTa7B4MhSkAaIiWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoyJ3ugCQGU5Bw1EEDLcDCEsZJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmVmYjYxYWQtODc5Ni0z NmZhLWI4Y2MtODQzM2U1NjJjMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALVqgCxULlqN7FITSILCyKKcA6CTcwtTXgvJQafnp5JfbAleqX10 3RuX+XfvBVxTk3inrTz3liwmKS8ITrc3LtB44i3/cmZHm4BG4CCerDG43OpQVzRO C8KQojSl6r7jkJCQrcr/Iqj1f1LLUwc4PNA5GfZMeV0u32OspHP0VPgp9fQKpi4v jY72AF9GVk2z4NJbRudlXv+1yaDmDOBd7bvhZrLIiK9XS4cJO34v+KIO1yMxY97B 41Yr71cqzs15y3HqyyKau6ztgE8opxR9pxV2azC4ISQQxKuyujOe+5ghO5FpOflC yExE7ZhE8njvljvYLqFRH/3/amEKQ6LpsPQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:15 2025 by rpki-client