$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa File: de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa (raw, json) Hash identifier: k7Is1T/Dh8Xd9c2tBlU0QPA678u4xi+r9kAMefD5jak= Subject key identifier: AF:31:3B:BF:8B:54:08:51:0C:B5:E9:63:0B:44:6E:9D:2B:24:2C:A6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC88C7F876034EAD041B8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 394230 IP address blocks: 2001:470:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c8:8c:7f:87:60:34:ea:d0:41:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=01e118a4-e5a9-417c-942a-a361492be93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:ea:92:dd:9e:35:bf:37:1c:f3:1b:5b:d1: 07:1b:ac:2d:85:d6:5c:7d:b7:e2:8b:8e:b1:7c:3b: cd:03:ba:ce:4b:79:f6:6a:04:3f:6d:d9:4e:24:1a: 90:46:13:ef:95:0f:b8:ed:3d:2c:63:6c:b2:6a:4b: cf:50:01:5b:74:24:0b:fb:7d:10:05:25:13:88:46: 87:06:3b:17:ec:b0:6e:bd:a5:11:cf:24:4c:93:57: c5:bd:7f:1a:a6:dc:2d:46:86:ea:55:0f:e6:4b:fc: 65:8f:a1:00:50:ed:38:79:9e:16:f0:97:32:c1:cd: 2d:db:0c:77:7e:fc:b5:e1:71:3e:e1:32:a3:09:a2: 5e:46:e8:47:2b:56:d5:26:b4:d9:4c:ae:8d:4b:e8: 4d:bd:98:ae:1f:17:c6:96:02:eb:e9:86:d8:f2:49: 6f:94:3f:b1:03:36:9c:80:96:3c:f4:44:75:0f:ae: c4:21:ed:9e:8c:50:fe:a8:16:af:60:d7:9b:6c:17: 45:c6:98:3f:c9:32:9e:a6:95:90:42:70:b9:b1:e9: 60:04:a9:f1:e5:a6:bb:fb:58:7d:17:c1:5f:ab:0e: 27:e4:55:cd:fc:86:2e:46:71:c8:6e:a6:de:d5:32: e7:dc:f2:c4:53:b3:f9:68:83:a6:40:c7:35:a0:bc: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:3B:BF:8B:54:08:51:0C:B5:E9:63:0B:44:6E:9D:2B:24:2C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de9bacbb-f8be-3977-8fb6-d9d7ba3ad85c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:07:8a:fd:54:b8:74:d2:02:94:3d:30:dc:32:b3:52:3d:12: a2:52:37:cf:ce:44:7a:57:4c:b5:91:25:e6:d2:45:18:f4:57: b9:f8:2e:55:2f:85:63:75:5a:2e:0e:51:d4:98:5f:48:2e:42: bd:df:b5:bb:f7:eb:2c:ba:35:09:5e:f6:91:b9:38:c0:70:b2: 0b:24:7c:83:8e:8d:ad:6a:4f:92:25:cf:a4:20:51:84:16:30: 62:d0:ad:67:f5:4f:97:b4:91:f9:d7:e9:66:cb:1a:48:af:7b: 2d:b4:14:9d:a0:fd:c7:d3:39:59:30:21:c1:2e:4b:3d:13:d1: 9a:6a:83:3f:a4:6f:45:60:97:99:88:97:f1:32:a0:a6:3a:58: d0:7f:d9:a9:0c:d7:7d:1a:5f:aa:93:52:fb:cf:32:80:1c:e0: 06:ee:d6:b7:e8:20:e1:3c:3e:65:e2:ad:4a:45:72:e0:d8:e4: f2:54:07:4a:d2:09:ce:77:f5:fe:54:a8:36:4a:ea:e8:0b:f4: d6:b6:6a:25:3a:4f:83:c7:bb:05:55:20:f1:7c:ec:29:8a:f7: 7e:cb:97:52:88:66:b9:8d:8c:f8:5f:3b:ef:26:06:f8:e8:79: 3b:2a:f3:cf:74:d0:08:90:f5:51:1a:0e:4f:c9:d5:ad:e9:e9: 2c:a4:61:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8iMf4dgNOrQQbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDFlMTE4YTQtZTVhOS00MTdjLTk0MmEtYTM2MTQ5MmJlOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNXqkt2eNb83HPMbW9EHG6wthdZcfbfii46x fDvNA7rOS3n2agQ/bdlOJBqQRhPvlQ+47T0sY2yyakvPUAFbdCQL+30QBSUTiEaH BjsX7LBuvaURzyRMk1fFvX8aptwtRobqVQ/mS/xlj6EAUO04eZ4W8Jcywc0t2wx3 fvy14XE+4TKjCaJeRuhHK1bVJrTZTK6NS+hNvZiuHxfGlgLr6YbY8klvlD+xAzac gJY89ER1D67EIe2ejFD+qBavYNebbBdFxpg/yTKeppWQQnC5selgBKnx5aa7+1h9 F8Ffqw4n5FXN/IYuRnHIbqbe1TLn3PLEU7P5aIOmQMc1oLwLEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8xO7+LVAhRDLXpYwtEbp0rJCymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU5YmFjYmItZjhiZS0z OTc3LThmYjYtZDlkN2JhM2FkODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEHiv1UuHTSApQ9MNwys1I9EqJSN8/ORHpXTLWRJebSRRj0V7n4 LlUvhWN1Wi4OUdSYX0guQr3ftbv36yy6NQle9pG5OMBwsgskfIOOja1qT5Ilz6Qg UYQWMGLQrWf1T5e0kfnX6WbLGkivey20FJ2g/cfTOVkwIcEuSz0T0Zpqgz+kb0Vg l5mIl/EyoKY6WNB/2akM130aX6qTUvvPMoAc4Abu1rfoIOE8PmXirUpFcuDY5PJU B0rSCc539f5UqDZK6ugL9Na2aiU6T4PHuwVVIPF87CmK937Ll1KIZrmNjPhfO+8m BvjoeTsq88900AiQ9VEaDk/J1a3p6SykYSk= -----END CERTIFICATE-----Generated at Mon Aug 4 07:45:10 2025 by rpki-client