$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa File: c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa (raw, json) Hash identifier: ZWlpmD4df+f6qN9c6JNW+NIZOV2Gae2QnrQzZ+5lXE4= Subject key identifier: C4:BB:38:85:30:32:ED:B5:10:AF:7D:6E:A9:FD:F6:F2:B5:47:A0:39 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCF2A9CE57B9908799B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 394256 IP address blocks: 2001:470:1ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:cf:2a:9c:e5:7b:99:08:79:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=191e9c06-f3ef-47a8-a97d-3c16af5d8bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:11:ee:42:af:20:38:77:70:e0:f8:6a:04: 87:11:a3:2d:67:4c:e9:71:81:93:cb:85:fc:41:57: ca:7d:b9:ec:0a:dc:82:c5:9f:59:b2:06:28:5e:47: 39:01:d4:1d:3e:c5:d0:52:a0:33:01:cf:85:da:dd: 33:c2:98:dd:ad:85:00:b0:36:8e:ca:09:78:6e:37: ff:aa:01:39:6c:6d:2d:2b:8b:33:72:51:40:11:59: 56:64:0b:76:a4:2a:a8:10:bf:d2:6c:d9:e7:fe:0c: 6b:d2:6b:c3:f4:b2:57:19:86:e2:37:79:61:4c:3e: a5:59:60:20:f2:50:01:df:35:34:6a:2c:59:23:25: 05:fa:72:4a:21:d4:e1:43:99:7f:d1:e3:cd:7f:39: 8e:f2:e6:4d:c0:e7:aa:53:3b:90:81:60:48:20:49: bc:bb:70:63:c5:2b:ad:cf:c6:c6:16:91:8e:8c:ac: 27:ea:f9:c5:d0:77:7a:3d:3f:fe:2c:a3:b8:35:25: 0e:81:89:34:2e:b2:0c:67:c7:92:0c:4b:85:c3:76: 71:97:be:4b:a5:ab:3a:e1:1e:1f:65:a0:4a:70:c2: 83:14:f6:fb:9c:8f:72:4c:9a:a3:23:fc:fd:b2:6e: 7d:16:bb:8c:41:16:2a:db:57:c2:b0:a7:ec:18:f7: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BB:38:85:30:32:ED:B5:10:AF:7D:6E:A9:FD:F6:F2:B5:47:A0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c321eb2a-dd70-3662-bea6-943e4ec5ad73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:02:34:fd:b8:c8:71:db:94:47:3d:68:dd:7f:ce:48:e3:d9: d8:8f:22:31:33:2a:ac:2f:84:a2:9f:7e:b1:29:05:68:47:75: a1:83:5e:55:60:3f:a7:04:ac:28:fb:98:63:b1:d0:d3:84:93: b8:9f:2f:6b:b1:93:7c:9d:b3:d0:23:08:f9:4d:ac:0c:0d:bc: 06:5a:fc:b0:66:56:cf:5f:1c:7a:9c:c2:65:e5:eb:5b:93:72: 21:ba:c9:59:61:0e:8e:6c:e8:2d:5d:55:8a:66:66:2e:06:96: 42:31:d0:0a:aa:8f:cb:52:f8:d9:e0:d7:f3:b5:22:04:01:9e: 1b:ca:c2:d5:6c:fb:9f:9b:d9:60:af:6b:02:ab:e5:c9:21:b0: 2a:33:89:0e:83:60:58:16:33:d6:91:ba:9e:3a:6d:6c:16:74: 48:dc:f8:92:70:b5:be:d1:30:81:28:9f:2f:3b:7d:cd:79:22: 66:24:90:61:e1:ed:2d:e8:55:e8:bd:2c:a8:e6:d6:54:70:be: b3:1a:07:26:f9:d1:25:f5:28:57:2c:8d:57:26:cd:b6:1c:72: b8:eb:e5:d4:a1:f5:2a:e9:95:71:f4:2b:2f:b6:a7:30:8b:39: 54:16:d1:17:23:a2:4e:6a:ad:b4:ed:00:19:12:b6:28:30:de: 12:c0:ca:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G88qnOV7mQh5m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTkxZTljMDYtZjNlZi00N2E4LWE5N2QtM2MxNmFmNWQ4YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqMR7kKvIDh3cOD4agSHEaMtZ0zpcYGTy4X8 QVfKfbnsCtyCxZ9ZsgYoXkc5AdQdPsXQUqAzAc+F2t0zwpjdrYUAsDaOygl4bjf/ qgE5bG0tK4szclFAEVlWZAt2pCqoEL/SbNnn/gxr0mvD9LJXGYbiN3lhTD6lWWAg 8lAB3zU0aixZIyUF+nJKIdThQ5l/0ePNfzmO8uZNwOeqUzuQgWBIIEm8u3BjxSut z8bGFpGOjKwn6vnF0Hd6PT/+LKO4NSUOgYk0LrIMZ8eSDEuFw3Zxl75Lpas64R4f ZaBKcMKDFPb7nI9yTJqjI/z9sm59FruMQRYq21fCsKfsGPfBNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMS7OIUwMu21EK99bqn99vK1R6A5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzMyMWViMmEtZGQ3MC0z NjYyLWJlYTYtOTQzZTRlYzVhZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwCNP24yHHblEc9aN1/zkjj2diPIjEzKqwvhKKffrEpBWhHdaGD XlVgP6cErCj7mGOx0NOEk7ifL2uxk3yds9AjCPlNrAwNvAZa/LBmVs9fHHqcwmXl 61uTciG6yVlhDo5s6C1dVYpmZi4GlkIx0Aqqj8tS+Nng1/O1IgQBnhvKwtVs+5+b 2WCvawKr5ckhsCoziQ6DYFgWM9aRup46bWwWdEjc+JJwtb7RMIEony87fc15ImYk kGHh7S3oVei9LKjm1lRwvrMaByb50SX1KFcsjVcmzbYccrjr5dSh9SrplXH0Ky+2 pzCLOVQW0Rcjok5qrbTtABkStigw3hLAynE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:53:45 2025 by rpki-client