$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa File: d4983d51-e8de-379f-9f45-b391bbab4125.roa (raw, json) Hash identifier: o0QPZBpmy6pslpUZx4qUu+O4R1dI9uksZj7BzdLCNMA= Subject key identifier: 66:16:88:3A:3A:8F:1B:F1:68:A4:0E:38:AA:C6:4A:5E:B2:DF:21:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCEB2430E36D7A01B8700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 19863 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:b2:43:0e:36:d7:a0:1b:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=f7972a8f-e540-4823-a568-731b1f18ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:90:05:4f:eb:c6:86:9d:11:5f:46:37:b7: 52:b9:44:20:6d:49:f2:60:ff:46:14:08:cb:2d:d3: c1:ca:80:0e:f6:2f:95:58:90:2a:ec:0a:e9:f5:7f: 13:f7:3c:17:b9:04:e7:46:71:4e:df:cd:f6:a8:ec: af:5e:83:f4:bb:8f:96:73:82:00:6e:8e:65:30:33: 89:92:56:1a:0e:a4:61:23:f9:1e:51:ed:cc:9d:70: fa:0e:aa:a8:cf:75:98:76:8a:de:fd:08:0b:4a:a1: 7c:e1:5b:63:dc:ec:de:0d:fa:6d:7b:5e:39:22:c5: a9:1e:af:21:2c:05:1c:c0:9b:fa:da:20:b4:db:6f: 78:49:50:5f:84:5c:e8:bd:17:38:79:79:31:fc:2b: 33:05:0c:8b:18:32:1d:c9:33:fb:79:7b:ea:e6:83: 7d:46:32:23:e6:34:e9:af:bb:64:19:44:fa:2d:c6: 63:7d:84:ed:e8:c5:d5:ae:33:0b:3d:69:3b:0b:f7: 8a:21:7d:7a:b5:74:d8:51:3d:c8:11:ef:48:f6:76: 35:68:80:1a:64:48:ec:07:be:a2:38:74:65:e5:98: 83:c5:42:38:91:65:72:fd:66:66:c5:56:2a:8c:ee: 12:06:63:79:23:cb:38:fd:f2:51:39:93:45:16:72: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:16:88:3A:3A:8F:1B:F1:68:A4:0E:38:AA:C6:4A:5E:B2:DF:21:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e3:6e:46:1f:06:ce:bf:7f:b2:f4:80:b0:5b:43:13:c8:ca: d7:82:a3:45:71:db:31:05:e2:36:37:19:38:f9:1d:6e:52:48: 31:a3:78:9b:30:5a:ee:ab:cf:a2:18:29:f0:bf:c0:0f:fe:88: b0:41:eb:68:99:f5:f1:64:12:75:f6:f0:ae:76:f9:87:12:7f: ec:12:13:29:09:29:09:32:6e:08:7b:91:d1:7e:22:0d:d5:fa: 8d:f3:3c:a6:a3:6e:a4:e6:21:7a:88:74:2c:94:e9:b8:e8:91: e6:7a:fb:b5:4d:e8:2a:df:4f:81:7b:d0:b2:9c:7b:24:b7:4f: 72:cd:21:dc:e9:cb:6b:92:8e:7e:f3:b4:67:9b:24:aa:14:6e: 38:93:8d:5e:2d:a7:bc:af:32:24:f2:7a:9f:0c:d4:c6:78:25: 60:e4:80:e1:41:36:68:a6:f4:77:f5:73:46:24:3b:17:3b:de: c3:69:a9:3b:ef:b6:b1:17:d3:4c:44:6b:73:e9:0e:48:e2:f2: 11:84:8e:5f:95:e0:80:6b:a1:61:dd:6e:a5:5d:ab:96:d1:24: 2f:04:a7:4b:03:55:32:d4:e4:51:b3:b3:1f:52:01:9c:5b:fd: 8c:b1:6c:1b:a9:b9:55:38:41:0e:bc:9e:dd:a3:2f:d8:32:2f: 96:52:19:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G86yQw4216AbhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Zjc5NzJhOGYtZTU0MC00ODIzLWE1NjgtNzMxYjFmMThlZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpqQBU/rxoadEV9GN7dSuUQgbUnyYP9GFAjL LdPByoAO9i+VWJAq7Arp9X8T9zwXuQTnRnFO3832qOyvXoP0u4+Wc4IAbo5lMDOJ klYaDqRhI/keUe3MnXD6Dqqoz3WYdore/QgLSqF84Vtj3OzeDfpte145IsWpHq8h LAUcwJv62iC02294SVBfhFzovRc4eXkx/CszBQyLGDIdyTP7eXvq5oN9RjIj5jTp r7tkGUT6LcZjfYTt6MXVrjMLPWk7C/eKIX16tXTYUT3IEe9I9nY1aIAaZEjsB76i OHRl5ZiDxUI4kWVy/WZmxVYqjO4SBmN5I8s4/fJROZNFFnJrYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYWiDo6jxvxaKQOOKrGSl6y3yGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDQ5ODNkNTEtZThkZS0z NzlmLTlmNDUtYjM5MWJiYWI0MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7jbkYfBs6/f7L0gLBbQxPIyteCo0Vx2zEF4jY3GTj5HW5SSDGj eJswWu6rz6IYKfC/wA/+iLBB62iZ9fFkEnX28K52+YcSf+wSEykJKQkybgh7kdF+ Ig3V+o3zPKajbqTmIXqIdCyU6bjokeZ6+7VN6CrfT4F70LKceyS3T3LNIdzpy2uS jn7ztGebJKoUbjiTjV4tp7yvMiTyep8M1MZ4JWDkgOFBNmim9Hf1c0YkOxc73sNp qTvvtrEX00xEa3PpDkji8hGEjl+V4IBroWHdbqVdq5bRJC8Ep0sDVTLU5FGzsx9S AZxb/YyxbBupuVU4QQ68nt2jL9gyL5ZSGaw= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:50 2025 by rpki-client