$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f11c09f9-de09-3da7-b27f-d0466fd643c3.roa File: f11c09f9-de09-3da7-b27f-d0466fd643c3.roa (raw, json) Hash identifier: +Z4tWuYbBdDmUarJnmB1yKGe4Xp9UDUBltYWNk+c7r8= Subject key identifier: 3F:9C:39:7A:EE:A4:F8:69:C8:5C:55:06:A5:7D:74:02:A4:A4:41:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD9B5BB709956461C2700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f11c09f9-de09-3da7-b27f-d0466fd643c3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 27425 IP address blocks: 2001:470:2d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d9:b5:bb:70:99:56:46:1c:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ff85490f-5a49-41ae-aab7-1709ff698423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:d6:3c:87:62:0a:4c:6f:35:61:5c:85:1d: 8a:ad:87:86:16:41:b4:3c:03:b1:a8:bb:0f:c7:76: cd:32:5a:42:0e:fa:e6:df:05:e8:ec:a2:9f:c9:ea: 96:98:ac:cd:bf:96:27:4a:58:06:88:54:fa:f5:d4: 18:a9:ff:91:9f:bb:e4:68:53:eb:85:f9:78:a4:d9: 36:49:c2:61:7e:a2:98:f5:c3:b7:0b:19:d5:d0:d9: 43:86:0f:44:ce:0d:f7:95:4c:21:75:0f:05:c9:81: 73:f2:ec:77:4c:24:8c:2f:ba:7c:44:43:e5:3d:12: 57:1d:cd:85:9c:38:ba:e0:82:8c:8c:59:28:6c:cd: 2f:c1:4d:c9:8e:6b:8f:99:b7:07:06:74:f2:19:fc: df:3a:8c:e5:25:15:c2:c0:e3:a5:1b:56:a1:93:14: 8f:05:54:10:54:26:0c:36:6a:3f:41:04:ea:67:ef: 16:28:f0:f2:a8:60:0b:32:7b:3f:97:b8:14:f4:2d: 38:aa:55:a0:d1:e9:2a:cb:86:b8:0e:3c:b1:d2:0b: f0:9c:cc:52:8c:89:20:19:69:5b:34:3e:61:19:a9: ab:11:dc:33:d6:47:69:1b:e3:7e:e5:5e:a7:d5:a5: 55:6e:37:c1:a6:97:6b:54:95:dd:d9:b0:a3:33:8f: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:39:7A:EE:A4:F8:69:C8:5C:55:06:A5:7D:74:02:A4:A4:41:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f11c09f9-de09-3da7-b27f-d0466fd643c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:17:b6:08:29:8b:6f:8e:38:e2:32:f0:fc:62:9c:09:87:20: 3b:2b:3b:ff:67:cd:a6:c2:ae:08:69:13:61:9d:a4:d9:0a:d3: ed:e5:ab:a3:30:cb:a9:93:93:9a:f2:a9:4a:04:18:96:ec:e7: bf:c1:50:af:28:49:07:78:b2:ed:b4:0a:2a:07:d9:59:42:7b: de:3c:1a:d8:0a:ed:bc:ad:b5:de:34:d8:a7:b1:f7:71:e6:df: af:18:c3:ba:52:13:48:73:46:3d:46:62:a8:de:93:08:df:c7: 08:1b:3d:06:61:ae:09:19:99:07:fd:19:5c:d3:97:ce:a1:14: d6:75:3e:25:71:bd:02:2a:0b:6a:d6:ce:c7:de:18:1d:f2:9b: 4d:91:f3:e3:5f:0c:b5:c0:ef:0a:e2:57:ac:a5:a4:07:6f:76: 1a:78:d4:44:c6:61:0e:72:d2:01:41:be:e6:ab:41:8c:ee:29: 28:09:7a:84:d7:9e:31:64:ec:86:a2:09:34:4d:ae:51:46:c0: 93:89:08:29:46:93:b5:f0:78:c2:b1:b9:56:e9:79:66:ba:8c: 65:3c:b5:11:31:22:d5:7b:e3:56:d5:54:73:ba:9b:20:67:f0: ba:70:d2:f3:32:55:b6:23:5f:5b:77:84:31:68:e6:ba:df:45: b6:8e:ba:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9m1u3CZVkYcJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmY4NTQ5MGYtNWE0OS00MWFlLWFhYjctMTcwOWZmNjk4NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmXWPIdiCkxvNWFchR2KrYeGFkG0PAOxqLsP x3bNMlpCDvrm3wXo7KKfyeqWmKzNv5YnSlgGiFT69dQYqf+Rn7vkaFPrhfl4pNk2 ScJhfqKY9cO3CxnV0NlDhg9Ezg33lUwhdQ8FyYFz8ux3TCSML7p8REPlPRJXHc2F nDi64IKMjFkobM0vwU3JjmuPmbcHBnTyGfzfOozlJRXCwOOlG1ahkxSPBVQQVCYM Nmo/QQTqZ+8WKPDyqGALMns/l7gU9C04qlWg0ekqy4a4Djyx0gvwnMxSjIkgGWlb ND5hGamrEdwz1kdpG+N+5V6n1aVVbjfBppdrVJXd2bCjM48sHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+cOXrupPhpyFxVBqV9dAKkpEHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjExYzA5ZjktZGUwOS0z ZGE3LWIyN2YtZDA0NjZmZDY0M2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0Xtggpi2+OOOIy8PxinAmHIDsrO/9nzabCrghpE2GdpNkK0+3l q6Mwy6mTk5ryqUoEGJbs57/BUK8oSQd4su20CioH2VlCe948GtgK7byttd402Kex 93Hm368Yw7pSE0hzRj1GYqjekwjfxwgbPQZhrgkZmQf9GVzTl86hFNZ1PiVxvQIq C2rWzsfeGB3ym02R8+NfDLXA7wriV6ylpAdvdhp41ETGYQ5y0gFBvuarQYzuKSgJ eoTXnjFk7IaiCTRNrlFGwJOJCClGk7XweMKxuVbpeWa6jGU8tRExItV741bVVHO6 myBn8Lpw0vMyVbYjX1t3hDFo5rrfRbaOug4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:51 2025 by rpki-client