$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f22c5936-69db-3d10-84c0-299caf455999.roa File: f22c5936-69db-3d10-84c0-299caf455999.roa (raw, json) Hash identifier: c+yq51WTZxDcKLli+akZmLLN4r/r8Qz8ROwBjsC2Mxc= Subject key identifier: 60:30:0C:C2:79:19:B3:82:CA:E3:29:F5:F2:A3:71:7D:48:7D:47:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A655B3C10096D3346E35E1CC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f22c5936-69db-3d10-84c0-299caf455999.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 53586 IP address blocks: 2001:470:3fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:3c:10:09:6d:33:46:e3:5e:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=734617eb-c86d-48b5-97ce-561b4eb01c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:ab:0b:2a:98:bb:0e:f6:6a:e9:be:c5:44: a9:30:a2:03:ca:6e:24:32:6a:e8:45:83:25:eb:ee: 42:c0:30:9f:1c:8c:85:6e:5c:f7:b4:ee:6e:12:50: 32:fd:49:61:bb:cd:9e:59:08:c6:a0:6f:1f:60:cf: b6:8c:bb:f1:ff:ee:2b:ff:0a:ed:dd:b4:13:b6:61: eb:0f:45:3e:6b:14:bf:aa:bf:31:2c:3c:dc:c8:cf: 29:d0:11:11:9e:cc:d4:cd:a6:38:7b:d4:77:86:87: 30:4c:5e:23:dd:89:ee:5f:f6:5e:20:1a:4e:e0:7e: 8f:3e:e2:e5:ef:11:94:0e:51:46:4b:53:52:e3:0c: 80:71:5f:13:f3:b0:ed:a9:22:23:75:b6:66:34:4d: 95:95:c4:5f:7e:a0:93:2c:21:ac:01:fb:30:a6:4e: d7:56:93:c3:59:1a:3b:18:b8:8b:d6:61:5a:65:e4: 0e:19:37:cd:06:fb:f5:c6:fc:f4:86:9d:24:dd:09: bc:5d:0b:cc:cd:67:1a:cf:a2:14:05:e8:b3:09:38: 1e:f8:9f:fa:ba:f1:d7:27:1d:05:af:02:01:ad:4b: a4:e5:5b:dd:c3:96:7d:bb:63:7f:0a:60:23:a6:d0: 3c:3d:88:b2:34:58:d1:2f:e4:81:eb:74:24:12:00: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:30:0C:C2:79:19:B3:82:CA:E3:29:F5:F2:A3:71:7D:48:7D:47:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f22c5936-69db-3d10-84c0-299caf455999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:58:61:4e:8e:5c:7a:20:a9:be:a9:98:da:1b:c8:11:24:66: a0:7c:ec:6b:58:63:1a:13:9f:46:49:14:e0:a5:47:7f:40:65: 7a:d6:b8:14:b6:b5:6e:e9:1d:89:e5:1f:28:6c:4b:8c:44:89: f0:c5:4a:bc:b8:0e:f3:85:00:6f:32:20:65:a5:d0:9d:12:a8: 31:19:2b:28:0f:e8:87:22:28:d5:a1:ce:0c:55:e5:d1:23:68: d2:3e:5b:93:ce:59:fc:5c:a0:51:8e:ea:3b:25:fc:62:6f:23: fa:c2:64:e2:6e:0b:75:d2:9d:4d:7a:21:e0:84:44:f5:1f:0d: b7:f3:4d:2e:34:ab:9a:d8:a7:24:a5:02:1a:1b:bd:cd:df:84: 91:40:0a:29:6c:1b:1f:de:c1:4f:ab:f7:d2:28:b7:1b:c6:38: 02:01:4f:e5:cb:1f:92:b0:af:f4:a8:5e:d1:fe:50:fb:ae:e0: 70:c5:17:9e:8f:ce:54:a3:59:eb:a9:f0:6c:3f:1f:ec:a1:61: 4b:ec:42:6f:0b:a9:3b:ef:88:3b:f0:f3:0d:c8:73:8b:f1:45: 56:c1:a4:05:14:1a:4a:0a:ea:cf:2e:fe:ea:d0:5d:f2:08:e0: 04:4f:84:72:60:74:2e:a3:c8:41:74:a1:7e:54:94:7d:cd:93: ba:56:98:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEplWzwQCW0zRuNeHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk NzM0NjE3ZWItYzg2ZC00OGI1LTk3Y2UtNTYxYjRlYjAxYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksyrCyqYuw72aum+xUSpMKIDym4kMmroRYMl 6+5CwDCfHIyFblz3tO5uElAy/Ulhu82eWQjGoG8fYM+2jLvx/+4r/wrt3bQTtmHr D0U+axS/qr8xLDzcyM8p0BERnszUzaY4e9R3hocwTF4j3YnuX/ZeIBpO4H6PPuLl 7xGUDlFGS1NS4wyAcV8T87DtqSIjdbZmNE2VlcRffqCTLCGsAfswpk7XVpPDWRo7 GLiL1mFaZeQOGTfNBvv1xvz0hp0k3Qm8XQvMzWcaz6IUBeizCTge+J/6uvHXJx0F rwIBrUuk5Vvdw5Z9u2N/CmAjptA8PYiyNFjRL+SB63QkEgDgDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAwDMJ5GbOCyuMp9fKjcX1IfUfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjIyYzU5MzYtNjlkYi0z ZDEwLTg0YzAtMjk5Y2FmNDU1OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJlYYU6OXHogqb6pmNobyBEkZqB87GtYYxoTn0ZJFOClR39AZXrW uBS2tW7pHYnlHyhsS4xEifDFSry4DvOFAG8yIGWl0J0SqDEZKygP6IciKNWhzgxV 5dEjaNI+W5POWfxcoFGO6jsl/GJvI/rCZOJuC3XSnU16IeCERPUfDbfzTS40q5rY pySlAhobvc3fhJFACilsGx/ewU+r99IotxvGOAIBT+XLH5Kwr/SoXtH+UPuu4HDF F56PzlSjWeup8Gw/H+yhYUvsQm8LqTvviDvw8w3Ic4vxRVbBpAUUGkoK6s8u/urQ XfII4ARPhHJgdC6jyEF0oX5UlH3Nk7pWmMY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:09 2025 by rpki-client