$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa File: bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa (raw, json) Hash identifier: x3ilUfSShqM3BooQDGtv37P5ab5/lPMY/RpES59YhEw= Subject key identifier: 16:62:4E:58:EF:BD:5B:84:85:88:D9:C0:86:53:DA:E8:66:AA:49:3A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C026D3B620F099A183B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 11085 IP address blocks: 2001:470:119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:02:6d:3b:62:0f:09:9a:18:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=77e9ecff-deac-43ec-be2b-76922ec31600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:24:3e:9e:cf:06:67:54:06:d8:84:1d:9a: 02:b5:99:d4:a6:f6:e9:a9:99:8c:b1:d1:44:5e:eb: e9:e2:b9:05:29:1e:73:b7:11:04:3f:3f:e0:47:f2: e7:15:f6:5b:c4:c5:cb:43:b9:15:d9:82:e0:e2:ae: c4:15:02:63:f6:20:ae:76:8f:04:28:78:4e:7e:ce: 2c:ba:14:19:09:9b:be:d6:27:c4:f3:6a:26:76:32: c7:09:b7:fe:53:19:5a:0e:98:9d:51:9d:64:ff:1f: 1e:27:34:71:1d:32:89:be:55:46:f0:3f:b9:49:a5: d3:d4:89:28:c6:1e:cc:aa:64:88:94:42:1f:67:46: 2a:69:d9:50:de:02:af:12:17:92:a8:1c:14:3d:31: cb:27:be:30:45:69:fb:69:8d:ef:17:03:d9:b3:76: 1d:a3:3e:fa:b7:b9:ba:6b:2b:5c:ab:f3:c3:97:e8: be:cd:ba:d4:95:be:69:94:b3:77:ac:b0:5e:cc:0c: ba:a4:fc:a7:d6:f8:d3:00:50:45:47:fc:0a:d9:00: 8c:38:95:c3:91:f2:9f:da:85:fb:6c:d9:43:86:85: 9c:ed:d0:0c:c6:6e:a5:35:54:ae:81:78:de:d2:52: b9:c4:c9:cb:1d:d2:b4:82:5b:b8:ff:41:50:39:a7: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:62:4E:58:EF:BD:5B:84:85:88:D9:C0:86:53:DA:E8:66:AA:49:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:29:21:40:88:d8:f1:23:13:61:38:3b:4a:af:1a:cd:a9:12: 58:53:f6:77:b6:78:7a:dd:61:e8:a1:86:c2:92:e0:5e:df:43: a4:6f:99:e5:b3:95:a0:09:06:44:03:48:de:ed:72:b0:cc:1b: b0:32:76:e1:40:29:2a:94:c5:ff:94:9f:de:c8:90:45:63:52: 2c:87:e8:29:b4:b1:18:99:49:be:c1:82:46:50:45:ca:ec:91: 42:b4:4f:c3:53:0a:73:79:c6:a1:51:99:ca:b7:a2:d5:8f:89: 3b:c1:1b:d2:96:7d:06:9a:c4:f8:a7:ea:24:0a:89:b5:73:b0: b5:e7:64:45:4b:cb:74:8a:2a:d2:eb:08:61:1f:ad:47:e0:53: e2:59:45:af:3a:b9:65:ed:9f:f5:47:a9:72:c5:e9:1c:60:a2: 37:ae:29:0a:8d:ac:c9:50:4e:42:09:4b:96:48:0e:5e:2c:1e: 13:79:c6:ae:fd:65:60:92:d7:03:11:cd:5b:71:ec:b8:74:39: 09:77:f0:0f:1c:bf:20:72:2d:10:8a:51:b7:cb:13:0c:19:94: bd:87:0b:0c:c8:01:e4:ec:e6:f3:83:c9:1d:cd:2b:df:68:38: fa:14:bf:b5:bf:76:ab:5d:6b:18:77:61:8b:36:fa:b9:dc:2f: 7f:11:d3:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAJtO2IPCZoYO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzdlOWVjZmYtZGVhYy00M2VjLWJlMmItNzY5MjJlYzMxNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydckPp7PBmdUBtiEHZoCtZnUpvbpqZmMsdFE Xuvp4rkFKR5ztxEEPz/gR/LnFfZbxMXLQ7kV2YLg4q7EFQJj9iCudo8EKHhOfs4s uhQZCZu+1ifE82omdjLHCbf+UxlaDpidUZ1k/x8eJzRxHTKJvlVG8D+5SaXT1Iko xh7MqmSIlEIfZ0YqadlQ3gKvEheSqBwUPTHLJ74wRWn7aY3vFwPZs3Ydoz76t7m6 aytcq/PDl+i+zbrUlb5plLN3rLBezAy6pPyn1vjTAFBFR/wK2QCMOJXDkfKf2oX7 bNlDhoWc7dAMxm6lNVSugXje0lK5xMnLHdK0glu4/0FQOactMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZiTljvvVuEhYjZwIZT2uhmqkk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1YmQzZTgtYmYzZS0z OWE2LWE4MmQtMjNmNDUwNzk1NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALwpIUCI2PEjE2E4O0qvGs2pElhT9ne2eHrdYeihhsKS4F7fQ6Rv meWzlaAJBkQDSN7tcrDMG7AyduFAKSqUxf+Un97IkEVjUiyH6Cm0sRiZSb7BgkZQ RcrskUK0T8NTCnN5xqFRmcq3otWPiTvBG9KWfQaaxPin6iQKibVzsLXnZEVLy3SK KtLrCGEfrUfgU+JZRa86uWXtn/VHqXLF6RxgojeuKQqNrMlQTkIJS5ZIDl4sHhN5 xq79ZWCS1wMRzVtx7Lh0OQl38A8cvyByLRCKUbfLEwwZlL2HCwzIAeTs5vODyR3N K99oOPoUv7W/dqtdaxh3YYs2+rncL38R01U= -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:43 2025 by rpki-client