$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa File: c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa (raw, json) Hash identifier: AS82AMmHpfvgjorxNqyhGRJuK3P1d6LfpGFDZH66P/g= Subject key identifier: A3:DA:40:FD:2C:F1:6E:D0:16:8E:78:FB:5D:D2:AF:5C:52:2C:CB:D3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCE5B81589A7B581C2E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 394256 IP address blocks: 2001:470:1bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:5b:81:58:9a:7b:58:1c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=de6445c3-2be9-4311-a9f4-2449bacffdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:2b:d4:29:3d:31:1c:85:88:1a:92:bc:67: f3:7f:75:10:cf:fc:ff:8b:a9:d6:c3:7f:fb:82:a7: c7:7e:70:b5:02:6f:d7:ab:46:f9:e3:49:fd:f6:cf: 4e:91:52:9d:ca:89:c6:99:f4:c5:36:83:fa:0a:d0: 1c:86:32:2a:69:f3:5d:3e:c7:c0:8e:39:cf:a4:1b: da:3e:13:c6:64:f0:d2:ed:6c:26:95:0f:3d:40:b6: 8a:32:49:d4:07:1a:f5:57:02:e4:c1:d3:35:77:08: 57:cc:65:ba:09:c3:04:d8:b7:07:96:ee:aa:f8:5f: 6f:2c:d5:b1:72:cf:64:d9:98:84:90:43:05:f6:cf: 1d:b6:59:5c:85:f3:33:e5:65:4f:50:f9:d8:e4:d1: 26:b0:91:eb:ba:02:c6:ab:ca:04:86:32:92:cd:4a: 63:87:c6:eb:8e:94:b4:20:e4:ab:b8:56:18:67:a4: 86:f7:c0:5b:d6:33:e3:e7:6d:78:55:ba:0c:e8:2b: 26:5f:c3:5a:ef:99:7f:a8:3c:ac:9c:6c:09:c0:be: 96:26:34:b0:ac:c4:26:c2:a4:d6:80:f9:24:0f:15: 9f:2c:23:19:77:77:47:ef:e5:a4:2d:ec:87:1d:9a: 32:a9:56:05:68:51:f8:c0:86:5c:29:96:4a:b7:ee: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DA:40:FD:2C:F1:6E:D0:16:8E:78:FB:5D:D2:AF:5C:52:2C:CB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5e:33:61:3e:0a:69:19:fe:12:09:74:ed:70:ec:db:85:7b: 66:a9:7d:3c:12:89:fb:b2:d3:73:ac:c5:2c:46:1d:26:85:13: ad:04:f6:0c:43:cd:88:bc:d2:e2:70:72:0b:ed:12:8d:11:19: bc:3c:df:1a:fc:22:56:76:a7:9d:49:83:44:63:f6:02:67:66: 42:57:7c:40:f7:be:c2:58:5b:37:63:a0:a0:fa:89:ba:cb:aa: 54:8c:a9:42:2e:78:da:ce:48:ea:d8:89:89:d5:c3:fe:a0:2b: d4:74:62:cd:c5:52:4f:51:b2:0f:8b:3c:37:ea:78:e7:1e:5c: d8:95:55:b0:57:c3:30:62:77:cd:ee:2d:ff:c2:8e:a6:bb:9d: de:29:e7:40:3c:ee:92:1a:cb:d7:02:45:3c:96:05:6b:7d:31: b1:71:57:3f:78:5f:9b:52:c4:f7:ad:aa:2a:b0:b0:bd:39:7c: f8:8d:a6:aa:4e:65:e2:02:ff:11:e5:99:e5:87:7c:39:16:1a: 39:af:87:85:e3:9f:ca:3c:2a:5d:0f:15:78:c7:ef:e9:72:38: 30:25:51:eb:5d:f6:d7:57:c7:0a:5d:1d:40:ad:64:7c:af:58: df:e3:72:ba:e1:dc:d1:91:64:b5:15:48:86:24:78:06:d2:8f: 48:53:c4:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G85bgViae1gcLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGU2NDQ1YzMtMmJlOS00MzExLWE5ZjQtMjQ0OWJhY2ZmZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCwr1Ck9MRyFiBqSvGfzf3UQz/z/i6nWw3/7 gqfHfnC1Am/Xq0b540n99s9OkVKdyonGmfTFNoP6CtAchjIqafNdPsfAjjnPpBva PhPGZPDS7WwmlQ89QLaKMknUBxr1VwLkwdM1dwhXzGW6CcME2LcHlu6q+F9vLNWx cs9k2ZiEkEMF9s8dtllchfMz5WVPUPnY5NEmsJHrugLGq8oEhjKSzUpjh8brjpS0 IOSruFYYZ6SG98Bb1jPj5214VboM6CsmX8Na75l/qDysnGwJwL6WJjSwrMQmwqTW gPkkDxWfLCMZd3dH7+WkLeyHHZoyqVYFaFH4wIZcKZZKt+79mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPaQP0s8W7QFo54+13Sr1xSLMvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg4ZjYxYzMtN2NkYi0z NGRlLThkNTgtMWNkOWNhY2RmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBeM2E+CmkZ/hIJdO1w7NuFe2apfTwSifuy03OsxSxGHSaFE60E 9gxDzYi80uJwcgvtEo0RGbw83xr8IlZ2p51Jg0Rj9gJnZkJXfED3vsJYWzdjoKD6 ibrLqlSMqUIueNrOSOrYiYnVw/6gK9R0Ys3FUk9Rsg+LPDfqeOceXNiVVbBXwzBi d83uLf/Cjqa7nd4p50A87pIay9cCRTyWBWt9MbFxVz94X5tSxPetqiqwsL05fPiN pqpOZeIC/xHlmeWHfDkWGjmvh4Xjn8o8Kl0PFXjH7+lyODAlUetd9tdXxwpdHUCt ZHyvWN/jcrrh3NGRZLUVSIYkeAbSj0hTxBk= -----END CERTIFICATE-----Generated at Mon Aug 4 07:57:11 2025 by rpki-client