$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa File: d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa (raw, json) Hash identifier: kbwhT7zwfaBTynfECKskc+31/c9ViLjs3y8D2QqfpU4= Subject key identifier: DE:CE:21:34:20:50:3C:44:3F:F8:79:CD:6F:FD:4A:E4:FC:49:D6:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BEB8916F508F1FC5308E6 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 32621 IP address blocks: 2001:470:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:eb:89:16:f5:08:f1:fc:53:08:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=3c0f2c37-914a-4457-acc6-df8a9b2616d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:77:56:7a:db:74:22:ad:03:1c:f4:49:cc: 4c:e5:10:53:ba:8a:27:4c:78:33:64:ec:67:57:af: f1:c3:00:ac:29:37:02:c4:7b:93:dc:c0:64:85:46: 79:d5:bb:27:95:6f:2e:fd:80:59:cc:32:e9:d2:fe: e6:d1:db:16:21:ec:11:7d:e0:79:cb:b0:be:6e:92: d0:a8:89:7e:50:8a:60:07:c3:fe:6a:ab:bf:0d:86: 92:cb:2d:e0:98:a0:22:3f:78:15:4f:91:fa:24:98: 0e:9d:5e:05:a5:24:79:18:82:b4:e7:05:d2:ea:2c: 6f:89:25:85:db:ec:38:e9:a7:34:83:d0:65:8c:a0: 85:17:60:83:f3:15:63:83:10:87:4f:5e:06:a0:58: c3:10:8c:2f:c0:98:2b:00:20:1e:d4:94:05:28:ba: 50:f7:39:a4:e8:0f:83:b2:63:02:49:2d:fe:fe:01: 7d:32:5e:f9:5d:d2:78:73:7a:89:d0:fb:68:c8:47: 20:a3:78:bf:b0:2f:9d:5f:5d:d0:1d:d0:7e:53:a2: c4:b0:c6:b5:f1:c3:65:d1:20:19:d6:58:7b:66:5b: 7a:9b:90:32:af:0d:d1:a8:21:cc:2e:ff:0c:7a:46: 8b:b2:d0:d4:00:e8:b5:6d:bf:f1:ed:ee:cb:ee:a1: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CE:21:34:20:50:3C:44:3F:F8:79:CD:6F:FD:4A:E4:FC:49:D6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:76:ab:d9:b8:a0:83:a5:4a:2c:f3:a0:5e:84:b7:66:ea:83: a2:34:67:5d:39:ed:52:79:14:a1:37:3b:1e:f9:38:54:d8:00: 7e:c0:83:cf:5d:4d:c2:b4:11:6c:a6:d0:1a:d7:7f:28:61:5a: b8:d2:a8:0d:ee:44:74:a6:71:22:36:3e:ab:d8:bd:80:f3:2e: 47:3a:ea:f1:f1:a9:2d:d3:1d:4e:f7:79:f5:28:3b:10:a9:80: 17:14:96:22:ec:17:15:dc:52:28:e6:a0:f6:9c:06:04:a0:82: f2:bb:cc:61:2d:b8:d4:73:e5:e5:39:88:f3:8f:0a:ab:10:ed: b2:d9:3a:8d:e4:09:74:fc:0f:2f:f2:9f:d8:1b:5f:0d:c4:92: 00:8a:66:9e:4f:1e:d9:af:3f:09:5c:cc:36:56:07:d2:11:8b: f2:09:d9:8b:4e:36:8c:41:bf:6c:34:e1:c0:65:e2:3d:0b:58: 2f:a2:57:e5:15:6e:b2:f7:bb:54:25:af:97:89:7f:b3:04:d2: 55:f6:06:56:c9:99:f1:b9:e5:75:e2:aa:05:4c:2d:39:a0:6a: 60:f5:ca:98:7a:55:a5:e2:92:20:28:88:ec:f1:09:dc:8c:5f: 43:bf:f6:f8:08:99:97:6f:06:f8:5e:b2:a9:a7:43:f0:10:2b: d0:77:69:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G+uJFvUI8fxTCOYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk M2MwZjJjMzctOTE0YS00NDU3LWFjYzYtZGY4YTliMjYxNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Z3VnrbdCKtAxz0ScxM5RBTuoonTHgzZOxn V6/xwwCsKTcCxHuT3MBkhUZ51bsnlW8u/YBZzDLp0v7m0dsWIewRfeB5y7C+bpLQ qIl+UIpgB8P+aqu/DYaSyy3gmKAiP3gVT5H6JJgOnV4FpSR5GIK05wXS6ixviSWF 2+w46ac0g9BljKCFF2CD8xVjgxCHT14GoFjDEIwvwJgrACAe1JQFKLpQ9zmk6A+D smMCSS3+/gF9Ml75XdJ4c3qJ0PtoyEcgo3i/sC+dX13QHdB+U6LEsMa18cNl0SAZ 1lh7Zlt6m5Ayrw3RqCHMLv8MekaLstDUAOi1bb/x7e7L7qF8kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7OITQgUDxEP/h5zW/9SuT8SdYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDdkN2I1NDEtZWQwMi0z ZjE1LWJjNDYtZWUxZGNkZDVkNTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAER2q9m4oIOlSizzoF6Et2bqg6I0Z1057VJ5FKE3Ox75OFTYAH7A g89dTcK0EWym0BrXfyhhWrjSqA3uRHSmcSI2PqvYvYDzLkc66vHxqS3THU73efUo OxCpgBcUliLsFxXcUijmoPacBgSggvK7zGEtuNRz5eU5iPOPCqsQ7bLZOo3kCXT8 Dy/yn9gbXw3EkgCKZp5PHtmvPwlczDZWB9IRi/IJ2YtONoxBv2w04cBl4j0LWC+i V+UVbrL3u1Qlr5eJf7ME0lX2BlbJmfG55XXiqgVMLTmgamD1yph6VaXikiAoiOzx CdyMX0O/9vgImZdvBvhesqmnQ/AQK9B3aVc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:11 2025 by rpki-client