$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b75084-2cba-3e1d-97e5-8c4fe3a54f1e.roa File: f3b75084-2cba-3e1d-97e5-8c4fe3a54f1e.roa (raw, json) Hash identifier: S3EuPKtH3JmPFr7J2ybaiUzz4zIkAoz73Lkz86SS5io= Subject key identifier: 7F:BE:66:23:6F:EE:DD:95:28:D9:26:55:12:EE:05:8E:F6:9C:3F:56 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFAAB860236372A21FE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b75084-2cba-3e1d-97e5-8c4fe3a54f1e.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 198493 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fa:ab:86:02:36:37:2a:21:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=7470b873-bc91-4e8f-8d91-ddecc4459d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:f2:78:ae:58:cd:ef:ce:92:02:63:8a:52: a1:1c:ad:d2:79:38:6a:12:c1:73:82:f9:de:26:f5: d6:6b:60:27:d1:46:ef:db:9e:e0:e3:b3:e6:cd:4a: 1a:82:94:1e:a3:f4:4d:b2:f5:29:34:10:cb:35:1b: 0e:49:e0:06:04:5e:cd:fa:49:58:36:5d:a1:ec:b1: 3e:17:58:a1:e6:16:4d:0e:3c:ed:5f:a4:cc:be:b8: 2e:74:3f:ae:d3:c7:10:03:0b:30:7a:db:1c:e5:3d: 1d:81:c7:68:7a:b8:75:c6:5d:7f:62:75:94:93:ff: 66:1f:71:be:6b:13:d6:c8:e4:a6:a4:9a:71:80:39: 10:5d:f4:32:92:b1:71:a2:ff:85:1e:1c:f9:52:7b: 4b:92:aa:3a:3e:7f:be:84:e5:68:ec:19:af:0c:5b: d9:66:4e:7b:5e:af:62:e8:99:7f:38:13:c7:cf:1a: 8f:3a:21:7f:3e:8c:a7:ee:5c:bc:f3:4b:c5:74:a3: 42:60:35:76:01:14:b5:1a:56:22:44:35:10:db:6e: 68:5c:6d:59:07:d1:08:18:f0:75:50:c6:1e:4a:26: 07:81:8c:d1:2f:40:70:b2:b1:cb:24:48:dc:ee:43: 8b:31:e5:50:47:ef:ba:29:74:94:79:20:e2:7a:bd: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:66:23:6F:EE:DD:95:28:D9:26:55:12:EE:05:8E:F6:9C:3F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b75084-2cba-3e1d-97e5-8c4fe3a54f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:56:40:b5:da:1a:5e:4d:bd:54:84:7a:67:8f:d8:79:f5:5c: 8f:22:59:bb:74:fb:99:bc:77:58:e0:8a:75:83:47:a9:38:9f: 8f:dd:bf:36:8a:74:e0:07:ff:15:56:f6:3c:95:c4:53:29:4f: a3:3c:c6:1a:10:17:b3:38:02:d6:fa:3d:75:e1:e0:88:5e:30: ec:ea:2f:2b:cd:e7:a5:ab:e1:d1:3c:46:30:45:85:36:a9:65: ee:c4:3c:bd:4b:78:71:14:33:db:58:b0:2a:50:67:8e:56:cc: ec:ad:04:f9:5e:aa:fb:a7:7e:98:b4:34:69:53:97:a6:7c:ad: 95:03:4d:43:cc:90:25:d5:42:39:46:41:60:23:80:19:36:90: d3:55:a3:db:73:f5:bc:7f:ed:80:d6:d4:21:ea:fb:d8:2f:bd: cb:73:76:e4:5a:d3:86:29:34:c4:33:3a:7d:95:94:fb:02:75: ac:c0:38:0b:3b:19:3d:99:7a:6f:44:9b:06:cf:57:b1:f6:d9: 75:47:1d:ab:1d:05:1c:84:52:7f:75:17:30:26:55:25:19:b5: 3a:96:94:58:36:3c:b5:62:c9:d7:df:ca:76:95:78:b6:66:71: 33:02:98:35:cd:63:dd:33:03:5a:9f:d0:f3:80:80:68:71:db: 63:8b:65:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/qrhgI2Nyoh/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzQ3MGI4NzMtYmM5MS00ZThmLThkOTEtZGRlY2M0NDU5ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+7yeK5Yze/OkgJjilKhHK3SeThqEsFzgvne JvXWa2An0Ubv257g47PmzUoagpQeo/RNsvUpNBDLNRsOSeAGBF7N+klYNl2h7LE+ F1ih5hZNDjztX6TMvrgudD+u08cQAwswetsc5T0dgcdoerh1xl1/YnWUk/9mH3G+ axPWyOSmpJpxgDkQXfQykrFxov+FHhz5UntLkqo6Pn++hOVo7BmvDFvZZk57Xq9i 6Jl/OBPHzxqPOiF/Poyn7ly880vFdKNCYDV2ARS1GlYiRDUQ225oXG1ZB9EIGPB1 UMYeSiYHgYzRL0BwsrHLJEjc7kOLMeVQR++6KXSUeSDier2MGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH++ZiNv7t2VKNkmVRLuBY72nD9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjNiNzUwODQtMmNiYS0z ZTFkLTk3ZTUtOGM0ZmUzYTU0ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpWQLXaGl5NvVSEemeP2Hn1XI8iWbt0+5m8d1jginWDR6k4n4/d vzaKdOAH/xVW9jyVxFMpT6M8xhoQF7M4Atb6PXXh4IheMOzqLyvN56Wr4dE8RjBF hTapZe7EPL1LeHEUM9tYsCpQZ45WzOytBPleqvunfpi0NGlTl6Z8rZUDTUPMkCXV QjlGQWAjgBk2kNNVo9tz9bx/7YDW1CHq+9gvvctzduRa04YpNMQzOn2VlPsCdazA OAs7GT2Zem9EmwbPV7H22XVHHasdBRyEUn91FzAmVSUZtTqWlFg2PLViydffynaV eLZmcTMCmDXNY90zA1qf0POAgGhx22OLZUc= -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:47 2025 by rpki-client