$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa File: c486f01c-d091-37c9-adb9-b949f7ec5308.roa (raw, json) Hash identifier: pU3scNfcL0a1ZyS9uiOsrzNWiKLT9hSuZ3XPnQg5NMI= Subject key identifier: CC:25:66:6E:BF:3D:38:F9:E9:DA:DD:7B:A2:2A:C1:77:FD:A3:ED:DD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A94D0CC3543957AFAC3F73100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 19661 IP address blocks: 2001:470:356::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:cc:35:43:95:7a:fa:c3:f7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=2546b148-947b-46d9-8c19-f1f543a09bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7b:01:7e:7c:39:ef:f7:ff:1c:c2:43:9e:82: 58:80:2d:56:a2:7b:2e:98:d6:4f:ac:d5:83:3a:26: 28:2f:79:c4:47:b2:a8:34:6d:51:b1:6e:4d:5c:57: 95:d5:e5:d6:5c:b2:3f:dd:ec:ab:f9:6c:7f:7d:b1: ed:78:ed:80:6d:f2:1e:aa:f3:0e:3c:29:40:ff:2a: 46:b2:cc:52:1a:af:d9:2e:f3:53:0a:85:07:9c:7f: a4:14:41:fa:e2:c4:37:71:e9:26:41:c0:62:de:94: 91:ef:b9:86:e4:ba:77:c0:f0:bf:4c:9a:de:46:38: fb:d2:3a:37:4f:ad:be:cd:b3:93:20:2d:8f:a3:98: bf:5d:95:3d:4a:c4:14:c6:ce:67:63:5b:ba:56:47: 32:12:41:a2:0a:e1:60:81:1e:c1:ef:45:52:02:ae: 2f:56:3f:08:85:50:51:23:a2:4d:38:19:5c:ce:89: 0e:17:08:ac:6b:31:a1:36:c5:cb:7e:a4:87:7a:5a: cf:92:68:48:a4:da:ab:82:e2:bd:da:19:d4:3f:3e: 10:67:d8:1f:34:55:f1:a9:55:fd:7e:b5:3f:6e:f3: b9:ea:82:98:31:7e:3a:00:45:c9:50:e6:c5:58:73: 2a:c6:ac:56:7b:96:b7:e8:0f:3a:46:a5:94:65:4b: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:25:66:6E:BF:3D:38:F9:E9:DA:DD:7B:A2:2A:C1:77:FD:A3:ED:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:356::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:95:fa:b9:9e:c3:cf:44:f4:b8:32:7a:b7:05:b6:df:a7:92: be:74:0e:39:bb:84:40:5d:1a:c4:ca:61:4b:30:03:01:18:91: 11:77:d0:14:26:93:25:b2:05:b1:25:69:9e:10:19:9c:5f:46: 0d:d6:88:ad:6e:ab:6d:fe:7d:9d:3e:60:6e:46:7a:d3:d7:20: 8c:55:27:57:d6:76:0c:c8:32:d8:92:15:3f:d7:54:57:b9:8f: 6d:e1:d8:9a:1a:75:b0:c2:2d:74:c4:3c:0b:ba:41:b0:5a:1b: 97:6f:19:78:e8:46:b6:af:75:61:de:a1:4f:79:e5:1a:ed:5f: 7d:1e:ba:5f:34:51:e9:e3:88:c0:3b:39:49:72:97:cd:7c:5d: 68:20:d8:7c:51:4e:36:bc:a8:b8:3a:68:e3:50:e4:5b:02:12: 84:aa:bd:5a:3a:fa:ef:ce:15:b0:38:2c:e1:a0:98:74:00:69: d5:20:b5:91:64:f1:9c:43:a8:bc:b0:96:1e:ee:69:5d:05:1f: d6:1e:8c:0c:86:91:d9:5b:c1:0c:da:7e:3e:64:2c:f6:72:46: d1:ea:a5:41:26:60:bd:3f:45:ab:d2:1e:27:41:48:7a:80:7d: db:d3:57:ad:4b:2b:38:8f:b1:79:8d:30:fa:f3:83:8e:1d:68: 97:04:f5:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqU0Mw1Q5V6+sP3MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk MjU0NmIxNDgtOTQ3Yi00NmQ5LThjMTktZjFmNTQzYTA5YmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXsBfnw57/f/HMJDnoJYgC1WonsumNZPrNWD OiYoL3nER7KoNG1RsW5NXFeV1eXWXLI/3eyr+Wx/fbHteO2AbfIeqvMOPClA/ypG ssxSGq/ZLvNTCoUHnH+kFEH64sQ3cekmQcBi3pSR77mG5Lp3wPC/TJreRjj70jo3 T62+zbOTIC2Po5i/XZU9SsQUxs5nY1u6VkcyEkGiCuFggR7B70VSAq4vVj8IhVBR I6JNOBlczokOFwisazGhNsXLfqSHelrPkmhIpNqrguK92hnUPz4QZ9gfNFXxqVX9 frU/bvO56oKYMX46AEXJUObFWHMqxqxWe5a36A86RqWUZUv5NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwlZm6/PTj56drde6IqwXf9o+3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQ4NmYwMWMtZDA5MS0z N2M5LWFkYjktYjk0OWY3ZWM1MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWV+rmew89E9LgyercFtt+nkr50Djm7hEBdGsTKYUswAwEYkRF3 0BQmkyWyBbElaZ4QGZxfRg3WiK1uq23+fZ0+YG5GetPXIIxVJ1fWdgzIMtiSFT/X VFe5j23h2JoadbDCLXTEPAu6QbBaG5dvGXjoRravdWHeoU955RrtX30eul80Uenj iMA7OUlyl818XWgg2HxRTja8qLg6aONQ5FsCEoSqvVo6+u/OFbA4LOGgmHQAadUg tZFk8ZxDqLywlh7uaV0FH9YejAyGkdlbwQzafj5kLPZyRtHqpUEmYL0/RavSHidB SHqAfdvTV61LKziPsXmNMPrzg44daJcE9Tg= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:50 2025 by rpki-client