$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0c6a46c-0271-340e-82b5-1235a36ca40f.roa File: f0c6a46c-0271-340e-82b5-1235a36ca40f.roa (raw, json) Hash identifier: we8seBmpLYczvrp2rByNWo6FAbB+ARhUi0wYWZs1iPo= Subject key identifier: AB:DE:0E:FC:18:C1:D2:A8:B8:8B:BB:4C:33:29:69:14:38:5D:31:25 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC4116EF807DE8E40CB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0c6a46c-0271-340e-82b5-1235a36ca40f.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 63343 IP address blocks: 2001:470:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c4:11:6e:f8:07:de:8e:40:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=21635394-9eaa-4eac-b8fa-15d76bcc319e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:00:fa:36:8c:77:f0:b8:a4:e3:b5:98:b6: 16:ad:b6:a4:c2:ae:12:8b:ce:b0:ed:44:04:1b:5c: 69:82:55:69:29:d8:92:a5:49:24:ab:f3:05:f2:ae: 51:ce:28:8b:c1:62:25:af:9a:cf:52:5c:eb:61:31: 9c:88:47:32:ee:31:fb:bb:be:8f:e2:36:09:85:1f: 42:11:1b:16:4c:1b:dd:67:5d:fb:d2:82:f4:d8:86: e3:96:a6:07:ee:c0:a7:c8:22:b1:1d:e2:8f:a8:61: 65:b5:51:ce:9f:32:a4:f9:7f:09:7e:2a:40:3b:c8: 07:7d:50:17:de:fd:10:ef:7c:36:7f:1b:24:51:d5: 52:28:c4:57:01:c1:7b:c4:62:bf:49:26:9a:f9:99: ba:73:e9:3c:18:2a:13:ca:fd:71:e8:8b:85:c9:81: eb:60:ad:e6:80:3b:36:81:0c:fb:68:be:58:c0:56: 30:8b:f0:94:41:f1:29:53:da:fd:0c:a8:6f:72:1b: de:51:83:3a:e5:d8:d1:c5:b8:3d:f8:f2:c6:a8:0a: 26:66:6f:ad:b8:f6:96:4a:ea:51:a3:01:12:18:70: 55:04:2d:48:9b:f8:3b:3b:69:83:d0:27:5e:77:1b: ef:8c:e1:b3:25:bf:6d:2a:3b:95:cf:5a:79:fc:d0: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DE:0E:FC:18:C1:D2:A8:B8:8B:BB:4C:33:29:69:14:38:5D:31:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0c6a46c-0271-340e-82b5-1235a36ca40f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5b:da:86:d0:6e:7d:d6:e4:d7:1e:a5:d8:24:96:26:4f:a8: 89:2d:c9:d7:05:69:81:c9:10:22:d4:f8:ee:96:b7:f0:86:63: 73:b6:d8:3b:41:cf:be:dd:10:68:7f:db:13:92:6a:83:ac:ad: 16:dd:64:e8:60:b9:06:5a:47:06:64:f0:67:b3:e3:58:c5:72: 1c:fb:dc:30:c9:d4:e6:3a:07:a4:0f:1f:07:c1:1c:87:5e:4f: 24:d8:49:db:78:32:d2:90:96:1c:59:ab:40:e5:37:ee:43:1a: 92:8a:f6:af:6a:f3:60:71:8b:88:a4:1d:60:20:f5:0d:12:66: ca:26:a7:58:4b:59:d1:b7:da:f9:5e:28:7b:f2:88:0f:34:17: 97:fa:69:78:16:4a:8b:ad:74:8d:b7:5f:e6:32:a3:24:2f:f4: 06:6e:ac:e8:b9:9b:9e:89:18:05:27:f8:97:e2:ab:83:ba:e7: f3:c9:11:16:cb:32:a3:40:23:4a:20:b5:a0:f6:0a:d3:2d:ff: ae:ae:65:57:76:52:d1:35:99:23:98:c5:48:69:13:54:60:4f: fb:cc:5a:6f:38:a8:65:55:9f:67:f5:51:6e:0d:cc:31:6e:d1: 03:7e:a7:a7:00:cd:ee:55:ba:58:93:77:6f:27:a2:ea:50:63: 73:c6:0b:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8QRbvgH3o5AywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjE2MzUzOTQtOWVhYS00ZWFjLWI4ZmEtMTVkNzZiY2MzMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWYA+jaMd/C4pOO1mLYWrbakwq4Si86w7UQE G1xpglVpKdiSpUkkq/MF8q5RziiLwWIlr5rPUlzrYTGciEcy7jH7u76P4jYJhR9C ERsWTBvdZ1370oL02IbjlqYH7sCnyCKxHeKPqGFltVHOnzKk+X8JfipAO8gHfVAX 3v0Q73w2fxskUdVSKMRXAcF7xGK/SSaa+Zm6c+k8GCoTyv1x6IuFyYHrYK3mgDs2 gQz7aL5YwFYwi/CUQfEpU9r9DKhvchveUYM65djRxbg9+PLGqAomZm+tuPaWSupR owESGHBVBC1Im/g7O2mD0CdedxvvjOGzJb9tKjuVz1p5/NDK+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKveDvwYwdKouIu7TDMpaRQ4XTElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjBjNmE0NmMtMDI3MS0z NDBlLTgyYjUtMTIzNWEzNmNhNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZb2obQbn3W5NcepdgkliZPqIktydcFaYHJECLU+O6Wt/CGY3O2 2DtBz77dEGh/2xOSaoOsrRbdZOhguQZaRwZk8Gez41jFchz73DDJ1OY6B6QPHwfB HIdeTyTYSdt4MtKQlhxZq0DlN+5DGpKK9q9q82Bxi4ikHWAg9Q0SZsomp1hLWdG3 2vleKHvyiA80F5f6aXgWSoutdI23X+YyoyQv9AZurOi5m56JGAUn+Jfiq4O65/PJ ERbLMqNAI0ogtaD2CtMt/66uZVd2UtE1mSOYxUhpE1RgT/vMWm84qGVVn2f1UW4N zDFu0QN+p6cAze5VuliTd28noupQY3PGC+s= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:13 2025 by rpki-client