$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa File: f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa (raw, json) Hash identifier: msfEhmQsshiUdIF3Tweyd8GfpyeGwPN3hmr6zYiw2GM= Subject key identifier: 62:0A:CB:FE:EB:2F:21:6C:22:52:20:2A:DD:C4:E8:B1:19:B7:47:BB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDA1E582DAAFC680EAE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 26806 IP address blocks: 2001:470:2d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:da:1e:58:2d:aa:fc:68:0e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=88511161-35b0-4044-b8f9-e0bddda40734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:fe:8c:4d:47:ca:b5:1a:e0:f0:c2:87:47: 1e:a9:f5:64:62:6d:da:97:af:3a:d3:3c:40:f1:46: e7:6a:9a:23:eb:32:62:f1:51:3d:92:29:8e:77:5a: 8f:ce:f1:a8:b0:94:29:a3:1b:b4:66:65:23:91:5d: e3:63:6a:b7:80:18:b0:1d:51:8e:3f:36:33:ec:43: ed:b9:80:c8:5d:80:a5:50:f5:6f:2e:e9:0f:44:e2: 12:97:44:92:fd:13:32:57:d1:38:8d:09:1d:e9:dd: 10:d9:2d:39:6f:68:0d:84:66:a2:8d:bc:33:d4:e7: d9:c2:64:43:fb:3f:b2:f9:c4:59:b4:a5:3b:ad:fb: f9:b1:09:c7:35:bf:39:96:7f:4a:8a:43:4e:48:99: ed:40:5e:94:e3:5b:5f:a5:ac:08:99:98:56:67:7a: e0:0e:c3:c4:7f:00:d5:1f:d2:66:bf:5a:a1:2b:cd: 57:18:c9:5c:33:e5:78:36:07:f8:13:2b:a1:74:37: c5:c6:f2:d5:5a:15:88:08:c3:58:7e:60:3a:b5:ae: f0:bc:c0:94:47:fe:27:c0:ad:7c:85:40:ba:1b:5f: 95:19:88:d0:e3:73:64:af:90:ac:02:5f:45:02:75: 0e:81:56:d4:87:d0:08:46:32:e7:5f:28:d7:40:ae: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:CB:FE:EB:2F:21:6C:22:52:20:2A:DD:C4:E8:B1:19:B7:47:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:43:a1:b0:68:3d:d6:ff:c8:3e:b2:fb:60:a0:5c:f9:74:c1: c2:fb:8a:4e:de:b6:10:8e:0d:a8:12:63:2e:d0:e0:6a:21:71: 8b:06:c8:2e:1e:cd:0d:34:19:4a:ba:64:ae:ad:d1:59:22:8b: 00:a4:15:b1:9e:a4:ba:b1:db:b6:b9:05:60:b6:5a:7f:14:dd: ef:2f:b1:f1:40:bb:1d:57:16:70:49:ab:5d:5b:54:20:25:c0: 8b:67:9e:1a:5e:b0:2a:d8:ca:0f:b7:1e:b1:1f:50:df:8e:3c: 62:3a:27:2e:f6:b5:24:e5:bf:f6:d3:46:f2:a9:dd:38:36:18: 11:ab:2e:32:eb:f1:54:b7:e9:75:3b:d1:c3:2f:0d:a2:a2:e3: 14:26:34:4b:28:85:f6:ee:fe:62:fa:1f:55:48:a1:58:13:45: 94:ab:2a:68:52:da:64:a6:93:e2:1c:08:cf:3c:d1:15:76:7a: 80:2d:e8:a1:b8:a1:73:8d:7b:5a:36:66:b7:2d:f7:19:ea:22: bf:40:17:7a:e2:aa:dd:b4:a1:fd:65:d8:fb:7f:ce:c6:2d:e7: 75:8a:04:b5:8b:74:d5:c2:43:69:12:07:f5:d9:3d:81:83:f5: 67:bd:55:c6:7d:3c:b2:69:d6:38:d8:10:53:e4:1c:ab:3a:9f: fa:d7:43:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9oeWC2q/GgOrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODg1MTExNjEtMzViMC00MDQ0LWI4ZjktZTBiZGRkYTQwNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrr+jE1HyrUa4PDCh0ceqfVkYm3al6860zxA 8Ubnapoj6zJi8VE9kimOd1qPzvGosJQpoxu0ZmUjkV3jY2q3gBiwHVGOPzYz7EPt uYDIXYClUPVvLukPROISl0SS/RMyV9E4jQkd6d0Q2S05b2gNhGaijbwz1OfZwmRD +z+y+cRZtKU7rfv5sQnHNb85ln9KikNOSJntQF6U41tfpawImZhWZ3rgDsPEfwDV H9Jmv1qhK81XGMlcM+V4Ngf4EyuhdDfFxvLVWhWICMNYfmA6ta7wvMCUR/4nwK18 hUC6G1+VGYjQ43Nkr5CsAl9FAnUOgVbUh9AIRjLnXyjXQK49/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGIKy/7rLyFsIlIgKt3E6LEZt0e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjBjZWMyZDEtNTdjMi0z MmY5LWFiMDUtYmEzNTEzZGQ5ZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKhDobBoPdb/yD6y+2CgXPl0wcL7ik7ethCODagSYy7Q4GohcYsG yC4ezQ00GUq6ZK6t0VkiiwCkFbGepLqx27a5BWC2Wn8U3e8vsfFAux1XFnBJq11b VCAlwItnnhpesCrYyg+3HrEfUN+OPGI6Jy72tSTlv/bTRvKp3Tg2GBGrLjLr8VS3 6XU70cMvDaKi4xQmNEsohfbu/mL6H1VIoVgTRZSrKmhS2mSmk+IcCM880RV2eoAt 6KG4oXONe1o2Zrct9xnqIr9AF3riqt20of1l2Pt/zsYt53WKBLWLdNXCQ2kSB/XZ PYGD9We9VcZ9PLJp1jjYEFPkHKs6n/rXQ0s= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:41 2025 by rpki-client