$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa File: e2794a0f-04b2-3f30-9997-493db90290d9.roa (raw, json) Hash identifier: kxjW2zy4ttJ2Lpe5IcHiHDJ7jXPxaHgvcO9Zk8cJHH4= Subject key identifier: BE:8C:1F:D3:EB:CC:18:A1:56:10:D0:7D:B0:46:A6:99:46:52:8F:6A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD2B4FA1C559F51188340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 133905 IP address blocks: 2001:470:25a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d2:b4:fa:1c:55:9f:51:18:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ff1c6a3c-fcda-46c4-9252-b2ef88bf1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:9b:e1:e5:0c:dc:19:6a:64:70:a4:64:61: bc:68:28:0b:5b:e9:f6:3b:c5:f8:a2:03:f9:94:b1: 01:8e:de:89:ad:0a:d0:c2:88:fb:8f:fb:86:09:b2: 2f:82:aa:78:c6:60:37:fd:06:5e:8e:fd:6a:c8:87: f1:a7:4b:09:72:0e:4f:2a:e9:13:07:28:33:4e:56: 3a:84:a2:87:cc:f9:fc:f2:46:20:dc:f4:64:1d:30: ee:7b:25:ef:66:08:fb:7b:11:65:99:09:24:cc:27: 6a:c1:d9:9b:3e:14:3f:3f:79:2b:3c:35:7a:06:b4: 99:d8:25:9e:1c:19:82:e8:60:5f:2f:48:80:cb:c1: d7:64:f1:17:a0:89:d1:9d:84:04:10:61:ae:d7:2e: b7:68:60:87:9b:65:b5:a4:74:44:1b:52:bb:e8:3f: 9b:ab:c6:9b:3d:f5:f6:61:2a:4d:a3:7f:82:0f:1f: 7e:2e:3e:60:e9:74:be:cc:e3:1d:f3:dd:b0:eb:cb: 3f:76:14:10:c6:8c:d4:63:a8:e7:d1:3a:07:d9:ac: d2:47:09:0a:e5:60:f9:88:2c:16:b5:6e:77:07:3f: 97:2c:89:8d:78:b8:81:80:11:1c:d8:20:29:80:00: a6:79:a3:f7:7a:ef:e8:a6:96:11:20:29:48:69:68: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:1F:D3:EB:CC:18:A1:56:10:D0:7D:B0:46:A6:99:46:52:8F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cb:0d:fe:5a:b0:f7:64:d6:12:9f:e3:4a:67:f2:fc:f7:89: 9f:4c:d3:c8:f2:6c:f2:65:f6:7d:38:17:47:a2:32:d1:f9:9f: 71:9d:46:c8:2c:9e:d1:b9:35:0a:41:ad:22:6e:ab:f8:0c:26: 4b:7d:6a:7c:94:82:cf:63:c8:ec:d4:2a:2e:f2:08:f9:61:48: e5:cf:e8:2a:ad:84:39:fa:db:95:5e:39:e4:2c:87:c9:5a:c0: 33:40:0b:d2:22:79:aa:31:57:ee:be:07:0c:72:81:f2:e3:76: 02:72:cf:7c:12:29:b6:bd:f2:3f:87:7a:53:34:d5:97:bb:a3: 82:08:5d:44:3b:5e:03:69:33:76:4f:0b:fc:e4:00:7d:59:1c: ae:f4:23:ac:2b:c6:82:ef:5f:8c:88:d0:b3:f9:a8:c4:c5:97: 0d:28:12:45:44:ea:63:bf:42:10:41:94:b1:cf:89:1b:c9:9a: 60:16:01:9a:fe:57:e6:ea:87:6b:5c:df:1e:1f:3a:d4:53:1c: d5:68:61:d4:48:39:7d:61:3d:7c:87:f8:2b:77:6b:8d:f5:2a: 70:28:a8:b8:54:41:65:7b:04:67:d2:2b:42:e3:6c:34:73:e4: 1d:51:c7:b6:bf:80:1b:7a:54:55:17:71:11:b2:f2:27:ba:a0: f1:1a:77:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9K0+hxVn1EYg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmYxYzZhM2MtZmNkYS00NmM0LTkyNTItYjJlZjg4YmYxMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOb4eUM3BlqZHCkZGG8aCgLW+n2O8X4ogP5 lLEBjt6JrQrQwoj7j/uGCbIvgqp4xmA3/QZejv1qyIfxp0sJcg5PKukTBygzTlY6 hKKHzPn88kYg3PRkHTDueyXvZgj7exFlmQkkzCdqwdmbPhQ/P3krPDV6BrSZ2CWe HBmC6GBfL0iAy8HXZPEXoInRnYQEEGGu1y63aGCHm2W1pHREG1K76D+bq8abPfX2 YSpNo3+CDx9+Lj5g6XS+zOMd892w68s/dhQQxozUY6jn0ToH2azSRwkK5WD5iCwW tW53Bz+XLImNeLiBgBEc2CApgACmeaP3eu/oppYRIClIaWiY6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6MH9PrzBihVhDQfbBGpplGUo9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI3OTRhMGYtMDRiMi0z ZjMwLTk5OTctNDkzZGI5MDI5MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbLDf5asPdk1hKf40pn8vz3iZ9M08jybPJl9n04F0eiMtH5n3Gd RsgsntG5NQpBrSJuq/gMJkt9anyUgs9jyOzUKi7yCPlhSOXP6CqthDn625VeOeQs h8lawDNAC9IieaoxV+6+BwxygfLjdgJyz3wSKba98j+HelM01Ze7o4IIXUQ7XgNp M3ZPC/zkAH1ZHK70I6wrxoLvX4yI0LP5qMTFlw0oEkVE6mO/QhBBlLHPiRvJmmAW AZr+V+bqh2tc3x4fOtRTHNVoYdRIOX1hPXyH+Ct3a431KnAoqLhUQWV7BGfSK0Lj bDRz5B1Rx7a/gBt6VFUXcRGy8ie6oPEadw0= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:05 2025 by rpki-client