$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa File: f1dfff41-259a-363f-8767-1c74571560ee.roa (raw, json) Hash identifier: /2KGly138c/GYoZiQUG3aJwVvd8nE5EbXh5HS6KT/Tc= Subject key identifier: 55:1E:E4:AA:24:6E:D2:92:6E:4F:31:71:54:33:3E:41:B0:F9:07:2D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C01124AE57F2DA1DC2800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 41568 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:01:12:4a:e5:7f:2d:a1:dc:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ae42f491-8d43-4e58-bd63-32b5ac3d0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:69:b1:7b:72:37:57:6a:b8:c9:dc:60:97: a7:f8:29:49:d8:70:e7:4b:e9:14:39:83:fe:0b:c6: 9b:e2:7b:3e:03:49:ea:91:65:ce:ef:92:64:f4:2d: 56:ed:1a:19:f3:01:0f:21:bd:d6:41:bb:52:c6:b3: 5e:af:35:12:f2:dc:b6:28:e1:ea:d7:7b:fa:0a:3e: eb:9d:21:d4:c9:48:9f:2c:fd:ae:7d:07:04:87:c0: 5a:0c:81:a6:be:ec:0d:8c:23:f5:aa:7a:83:f2:ea: 79:92:f9:33:b7:39:16:69:58:80:e7:6a:38:fa:f0: a8:86:d4:23:be:61:a4:8f:cd:b6:1a:32:f5:c1:72: e6:b7:5a:27:0f:0f:07:a9:9e:39:ac:ad:4c:60:7c: 3e:9b:61:5d:a4:29:c6:9c:71:49:67:1c:a7:19:c9: 2f:07:ec:b5:0a:31:65:77:3f:75:da:c6:e8:c9:6b: ba:06:71:7f:19:2b:c0:85:b5:43:98:71:1e:14:f4: c5:40:eb:a4:b0:17:bf:af:93:ad:16:aa:4f:84:72: cf:da:ff:03:b4:d4:62:ef:a0:b5:26:9f:fc:60:c1: 51:6e:f2:1c:e6:d2:25:4e:ae:a2:0d:f3:42:99:ce: 78:fd:6f:42:46:a0:ed:52:0f:5b:cb:50:a7:11:8d: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:E4:AA:24:6E:D2:92:6E:4F:31:71:54:33:3E:41:B0:F9:07:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2f:ef:57:70:6d:79:5a:53:f5:83:52:51:ea:95:8c:aa:08: a2:02:5e:86:97:b4:10:24:51:19:4b:a3:91:55:94:99:a8:80: db:86:50:c1:9b:9f:a8:e9:5b:f4:89:31:e1:4a:fb:38:70:1f: 0a:2c:a3:66:72:68:88:bd:81:c9:84:02:12:4c:ec:27:6b:e2: b4:0d:05:17:e1:35:6f:72:ec:54:0a:72:eb:3a:42:ac:fc:7d: 72:79:2c:c8:89:95:36:2e:52:c6:d8:d7:d0:37:b1:4e:0f:ad: b1:ca:ed:75:f9:1f:87:2b:23:7b:43:2e:8c:81:38:d1:c9:f4: 6c:5c:87:de:07:4a:cc:b4:67:e4:3b:bf:c8:68:c6:ef:a3:21: d4:01:b0:1c:00:ed:9a:86:35:a0:d7:ac:a5:17:12:55:5e:07: 23:1e:54:68:44:91:4b:4d:94:c7:51:4e:48:e1:08:8f:19:c5: 6b:49:d0:fc:c1:e3:87:7d:69:c7:39:a0:b9:e5:bf:33:51:97: a4:56:3c:62:80:96:0e:8e:17:c1:72:49:f9:18:ac:1a:6a:7d: 4f:f3:10:23:2c:9a:5a:4a:ad:a7:e6:2b:8e:67:df:79:7e:69: 26:c1:be:4f:be:6b:46:65:6b:f7:71:ca:d5:e9:fd:42:20:bf: a0:42:4a:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAESSuV/LaHcKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWU0MmY0OTEtOGQ0My00ZTU4LWJkNjMtMzJiNWFjM2QwYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyppsXtyN1dquMncYJen+ClJ2HDnS+kUOYP+ C8ab4ns+A0nqkWXO75Jk9C1W7RoZ8wEPIb3WQbtSxrNerzUS8ty2KOHq13v6Cj7r nSHUyUifLP2ufQcEh8BaDIGmvuwNjCP1qnqD8up5kvkztzkWaViA52o4+vCohtQj vmGkj822GjL1wXLmt1onDw8HqZ45rK1MYHw+m2FdpCnGnHFJZxynGckvB+y1CjFl dz912sboyWu6BnF/GSvAhbVDmHEeFPTFQOuksBe/r5OtFqpPhHLP2v8DtNRi76C1 Jp/8YMFRbvIc5tIlTq6iDfNCmc54/W9CRqDtUg9by1CnEY239QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUe5KokbtKSbk8xcVQzPkGw+QctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjFkZmZmNDEtMjU5YS0z NjNmLTg3NjctMWM3NDU3MTU2MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYv71dwbXlaU/WDUlHqlYyqCKICXoaXtBAkURlLo5FVlJmogNuG UMGbn6jpW/SJMeFK+zhwHwoso2ZyaIi9gcmEAhJM7Cdr4rQNBRfhNW9y7FQKcus6 Qqz8fXJ5LMiJlTYuUsbY19A3sU4PrbHK7XX5H4crI3tDLoyBONHJ9Gxch94HSsy0 Z+Q7v8hoxu+jIdQBsBwA7ZqGNaDXrKUXElVeByMeVGhEkUtNlMdRTkjhCI8ZxWtJ 0PzB44d9acc5oLnlvzNRl6RWPGKAlg6OF8FySfkYrBpqfU/zECMsmlpKrafmK45n 33l+aSbBvk++a0Zla/dxytXp/UIgv6BCSt0= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:55 2025 by rpki-client