$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa File: c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa (raw, json) Hash identifier: P4BfizpcBZZLu3y5tIYE+LItVH8WINwuId5/cEtpvnU= Subject key identifier: F9:AF:AD:7F:7B:64:74:0A:A9:2C:7D:F0:7A:E9:05:24:7A:8C:46:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCEF5FCCB4674157F5DA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 7782 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:f5:fc:cb:46:74:15:7f:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=cf6845bf-c4bb-4b77-91c3-75aff62e6a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:23:8c:8f:92:a0:8b:23:72:0d:0e:be:9f: 68:b8:4e:e0:17:e4:fe:24:b2:49:b1:a0:05:e2:42: 39:08:39:ab:06:b8:59:8a:d7:de:db:75:ad:85:3d: 06:a0:de:5e:f2:26:ef:99:ea:64:a8:62:5d:88:53: 78:af:11:6c:a5:c7:21:67:74:81:64:27:ec:fa:40: aa:94:99:8b:b6:d0:8e:be:0c:a7:16:a5:52:c6:db: 65:3e:f2:03:03:12:4d:a1:29:bb:38:dc:15:f3:d2: ec:cd:cc:dc:a0:de:2a:15:e3:1d:79:d4:a0:17:fc: c2:ea:4d:92:5c:fc:21:47:80:6f:1f:a2:d6:ab:39: db:2e:89:ec:6b:94:62:65:70:c4:f1:e0:d6:58:cb: 65:4c:4d:e7:89:36:30:ac:4d:91:a6:0c:b4:7a:94: ba:8b:f5:df:b1:e9:88:66:9e:06:e4:cb:37:8d:30: be:ec:b6:ed:f7:fb:03:16:e6:da:8b:a0:d0:8c:26: 8e:d9:56:9a:13:97:23:c9:b0:09:fa:4a:76:1f:3d: 51:cf:40:2c:81:6e:d4:0a:6d:3e:f2:b7:a0:55:2b: dc:b8:ba:ee:dc:25:f4:69:8b:6e:c2:2a:90:ca:25: 3f:77:61:c5:6f:28:11:9f:c1:41:7a:f3:4f:3a:5b: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AF:AD:7F:7B:64:74:0A:A9:2C:7D:F0:7A:E9:05:24:7A:8C:46:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e9:a0:e3:06:dd:10:f1:90:e1:49:10:43:cf:67:94:97:80: 54:66:d2:1d:6a:b5:a6:60:c7:2d:ac:2b:34:7a:01:cf:34:5a: fc:97:d7:a0:e2:e1:82:08:d6:c6:6c:84:b1:c9:45:c1:13:45: c9:1a:01:41:85:82:33:7e:69:d6:cb:15:ce:0c:6f:3e:f2:63: 1e:e7:f9:a4:fb:c7:1c:bf:f0:7e:e1:dd:9a:22:e4:1c:13:0b: 86:b1:5f:45:6e:7e:f5:9d:10:b1:f9:56:a4:49:5a:70:b6:d2: 61:93:23:62:7d:2e:c9:c7:e1:51:b2:f8:97:e4:58:e8:2d:d7: 50:ae:d9:c3:65:47:06:1d:00:fb:2b:8f:16:3d:dd:47:cd:3a: cc:2e:c5:9c:1d:bd:60:07:fd:ff:2a:a5:b4:53:b3:c8:20:6f: 4c:08:72:fb:fe:b7:d7:9c:59:34:67:17:3b:7d:06:32:d4:68: 97:63:f6:90:f2:7e:1a:87:9f:73:8d:7d:f4:54:eb:58:98:1f: 65:4e:38:da:68:9a:17:b8:a2:02:1f:c9:55:11:d3:4a:da:c2: aa:7f:30:55:e0:25:e1:7b:02:87:d0:35:ac:c5:68:cd:6d:21: 1d:b4:47:ae:fc:2c:96:59:1b:29:5d:81:ad:0a:c0:c1:fc:8b: 51:fd:ed:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G871/MtGdBV/XaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2Y2ODQ1YmYtYzRiYi00Yjc3LTkxYzMtNzVhZmY2MmU2YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1IjjI+SoIsjcg0Ovp9ouE7gF+T+JLJJsaAF 4kI5CDmrBrhZitfe23WthT0GoN5e8ibvmepkqGJdiFN4rxFspcchZ3SBZCfs+kCq lJmLttCOvgynFqVSxttlPvIDAxJNoSm7ONwV89LszczcoN4qFeMdedSgF/zC6k2S XPwhR4BvH6LWqznbLonsa5RiZXDE8eDWWMtlTE3niTYwrE2Rpgy0epS6i/XfsemI Zp4G5Ms3jTC+7Lbt9/sDFubai6DQjCaO2VaaE5cjybAJ+kp2Hz1Rz0AsgW7UCm0+ 8regVSvcuLru3CX0aYtuwiqQyiU/d2HFbygRn8FBevNPOlsSdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPmvrX97ZHQKqSx98HrpBSR6jEZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVkMGUzZDUtNzZmYi0z Y2U0LTlmMzItOTcxNGYyMGJkMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGTpoOMG3RDxkOFJEEPPZ5SXgFRm0h1qtaZgxy2sKzR6Ac80WvyX 16Di4YII1sZshLHJRcETRckaAUGFgjN+adbLFc4Mbz7yYx7n+aT7xxy/8H7h3Zoi 5BwTC4axX0VufvWdELH5VqRJWnC20mGTI2J9LsnH4VGy+JfkWOgt11Cu2cNlRwYd APsrjxY93UfNOswuxZwdvWAH/f8qpbRTs8ggb0wIcvv+t9ecWTRnFzt9BjLUaJdj 9pDyfhqHn3ONffRU61iYH2VOONpomhe4ogIfyVUR00rawqp/MFXgJeF7AofQNazF aM1tIR20R678LJZZGyldga0KwMH8i1H97cA= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:29 2025 by rpki-client