$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa File: e987f505-6ba4-3ada-8736-654c9b72a3af.roa (raw, json) Hash identifier: kjd87s8kZdST5KZxsIRkcjoqscFeCbKQm9RVSh6OWtE= Subject key identifier: BD:5D:49:6C:0A:93:7A:01:B5:45:6E:54:88:2F:2F:E9:8F:C7:22:81 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD7D2B915981EAAC7D500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 51500 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d7:d2:b9:15:98:1e:aa:c7:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=699089be-dbe2-48b8-a0d7-fea195e57027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c5:3a:d8:2e:67:d8:0e:6a:bc:36:c4:b9:fb: 42:ce:cb:11:0d:05:c5:d3:12:51:64:a0:1a:ec:51: ff:ff:4b:17:4d:30:c1:8d:4a:81:29:b9:e0:04:d6: fe:68:3a:1c:71:a2:0b:f1:9c:9d:e5:49:16:1a:97: aa:93:ce:e7:71:6d:51:05:92:bc:f4:5e:b2:8f:fb: 7c:71:fb:d6:bc:86:fe:ac:be:c5:e5:b4:d7:10:e8: 62:85:75:e0:20:f7:83:57:50:7a:4a:b5:68:1d:fc: e0:e1:33:73:73:b2:65:5d:1f:5b:44:31:c8:df:8b: 79:1e:28:3a:fe:22:e7:37:df:6d:15:5d:1c:26:73: c9:30:c5:a7:4a:28:b3:ae:a1:23:c0:6b:04:82:c6: 16:e0:e9:92:6c:04:ea:7a:33:1b:fe:b8:0b:c0:17: c7:ae:a0:70:3d:05:ef:76:13:44:ec:77:b1:66:c0: be:6e:f8:59:eb:b6:3a:1c:15:c0:de:01:5d:a8:70: d8:1a:ed:e8:a7:61:63:26:11:83:ea:aa:e5:bf:86: 4b:b2:9c:94:7d:c2:db:f0:25:6e:e1:6f:9e:42:d1: 6a:ef:b3:60:da:85:32:d0:99:92:bd:05:b3:cf:c6: 75:9f:59:ff:64:b6:39:02:5d:0d:04:0b:36:7d:ba: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5D:49:6C:0A:93:7A:01:B5:45:6E:54:88:2F:2F:E9:8F:C7:22:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:38:2e:27:d7:49:fe:24:45:f3:4a:4f:6f:b6:cd:53:b0:dc: 96:80:94:44:e9:c6:79:27:bd:30:d3:6b:f4:e7:8c:ab:2c:f5: ba:66:b5:d6:f6:dc:01:0e:c7:f0:b8:d9:e8:4b:b4:80:46:fb: 6d:b8:82:ac:0d:7f:68:69:53:e3:6d:f8:2f:16:6b:ce:07:dd: 44:bb:f8:b4:8c:b0:53:94:f2:f9:50:74:35:18:c9:a2:8c:d5: 5d:ca:f1:a9:99:b5:3a:63:0c:43:7c:b9:75:6d:60:fb:8d:82: 24:04:6f:90:47:0a:bf:5e:d5:25:8e:9a:c3:9d:14:bb:bc:2d: b5:f3:cd:4a:dc:77:98:12:cb:8e:b8:48:fc:28:67:9c:0c:d3: 6d:cf:78:1b:78:b2:3c:ab:50:96:f3:c3:21:df:6a:4b:d1:17: ba:36:0f:bf:65:52:ea:e7:b4:73:80:2e:c3:85:71:9b:f8:d6: 29:7e:f4:e2:70:91:ea:84:c4:e6:92:75:24:8e:f1:3a:70:9e: 7e:42:ff:6e:ad:13:91:3e:88:11:cb:1a:0f:57:b0:27:97:ed: 52:4b:ef:3c:b8:f1:04:40:29:5c:87:04:06:a4:b6:45:36:74: 6f:a7:80:26:4e:05:6c:3b:da:e5:9c:2e:a3:d1:df:f2:eb:3c: 7d:2b:d7:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9fSuRWYHqrH1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Njk5MDg5YmUtZGJlMi00OGI4LWEwZDctZmVhMTk1ZTU3MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcU62C5n2A5qvDbEuftCzssRDQXF0xJRZKAa 7FH//0sXTTDBjUqBKbngBNb+aDoccaIL8Zyd5UkWGpeqk87ncW1RBZK89F6yj/t8 cfvWvIb+rL7F5bTXEOhihXXgIPeDV1B6SrVoHfzg4TNzc7JlXR9bRDHI34t5Hig6 /iLnN99tFV0cJnPJMMWnSiizrqEjwGsEgsYW4OmSbATqejMb/rgLwBfHrqBwPQXv dhNE7HexZsC+bvhZ67Y6HBXA3gFdqHDYGu3op2FjJhGD6qrlv4ZLspyUfcLb8CVu 4W+eQtFq77Ng2oUy0JmSvQWzz8Z1n1n/ZLY5Al0NBAs2fbp91QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1dSWwKk3oBtUVuVIgvL+mPxyKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTk4N2Y1MDUtNmJhNC0z YWRhLTg3MzYtNjU0YzliNzJhM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFY4LifXSf4kRfNKT2+2zVOw3JaAlETpxnknvTDTa/TnjKss9bpm tdb23AEOx/C42ehLtIBG+224gqwNf2hpU+Nt+C8Wa84H3US7+LSMsFOU8vlQdDUY yaKM1V3K8amZtTpjDEN8uXVtYPuNgiQEb5BHCr9e1SWOmsOdFLu8LbXzzUrcd5gS y464SPwoZ5wM023PeBt4sjyrUJbzwyHfakvRF7o2D79lUurntHOALsOFcZv41il+ 9OJwkeqExOaSdSSO8Tpwnn5C/26tE5E+iBHLGg9XsCeX7VJL7zy48QRAKVyHBAak tkU2dG+ngCZOBWw72uWcLqPR3/LrPH0r1/U= -----END CERTIFICATE-----Generated at Mon Aug 4 07:53:40 2025 by rpki-client