$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f469f724-13f5-3417-a68c-e948d53611de.roa File: f469f724-13f5-3417-a68c-e948d53611de.roa (raw, json) Hash identifier: XQVvDkQWrmxPU6V6+wSh/oCSjwS966+y+EggOvGzkN4= Subject key identifier: E1:83:CC:64:F1:0E:47:D4:F3:8C:58:D5:11:B2:FB:F5:10:03:90:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFCB3E7BA298D611BDFD8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f469f724-13f5-3417-a68c-e948d53611de.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 40217 IP address blocks: 2001:470:24e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fc:b3:e7:ba:29:8d:61:1b:df:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b7fd95ca-ca63-4029-a4c0-fc8592b11335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:6e:d6:a0:6a:a0:ba:e7:02:4d:2f:cb:46: 04:05:ff:7a:99:14:a0:3c:42:ca:3a:7b:e8:d4:ad: f0:18:b2:51:96:85:44:7a:f8:d7:94:9a:5b:05:a2: ae:17:e9:7a:ca:14:4c:67:ef:dd:a0:68:a0:ec:18: ad:65:df:92:fe:9b:b7:4a:88:74:f8:8e:6a:68:36: 47:47:b7:81:5a:fe:de:39:a5:18:f7:85:d0:34:da: 85:c4:4f:ae:11:3c:c2:18:6e:9f:b5:a7:bc:1a:1d: 6d:96:56:89:1d:11:28:ab:ff:75:9a:fe:3c:bd:94: c0:f4:67:ad:9c:f6:2e:bf:18:92:5a:ef:99:12:1a: cc:2c:8f:c9:68:a8:43:fe:e3:b7:8e:19:d8:a7:ef: 22:1e:73:00:dc:79:2e:05:03:d1:f3:14:d6:fd:da: fc:54:6c:b4:5e:ea:21:22:88:f1:68:a2:80:75:0b: f6:77:fc:b5:6c:b5:92:21:06:52:30:ee:10:f7:24: d7:77:80:36:9a:a4:f4:d7:55:f8:66:50:d7:e8:d5: 3e:c1:5c:f1:97:38:9e:3c:b3:2d:bd:8e:29:1a:98: 50:e2:99:0e:0e:dd:cd:0c:f6:af:31:60:aa:31:4a: 64:4e:c6:f2:e5:53:70:e7:53:00:91:9b:85:5a:5a: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:83:CC:64:F1:0E:47:D4:F3:8C:58:D5:11:B2:FB:F5:10:03:90:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f469f724-13f5-3417-a68c-e948d53611de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:24e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:cd:f8:23:be:08:fc:e6:30:75:51:13:49:5d:f6:74:31:1e: c0:ae:19:d5:46:d9:e2:fb:f9:dc:1f:b4:1f:f1:07:e2:dd:27: 63:3b:c4:b5:a5:d3:8b:e2:66:9a:c7:71:93:c3:d3:07:49:54: 1f:1e:6c:a5:92:58:cd:a0:6e:0d:5a:bb:04:1a:55:48:ac:dd: 40:a1:ec:26:d8:6c:37:c3:c7:78:0a:f9:54:7e:85:5a:d7:0e: ad:f7:6b:ff:f3:8c:2d:36:f1:ec:3d:59:66:c2:69:f9:e1:fb: 23:8a:19:0f:6e:83:32:04:7c:0a:6c:a7:2c:da:52:00:ae:1a: 16:ea:37:f6:4d:89:38:46:48:a7:4f:d4:3e:b9:49:25:cd:c4: 5f:70:56:c2:96:c5:33:e2:49:87:6e:d9:2f:18:1f:58:9a:48: e2:2f:18:93:fe:bb:c3:65:70:b5:18:bc:b4:27:8f:38:51:d1: a5:3e:4a:f1:3b:60:d0:02:95:4a:3f:b1:f0:9d:29:76:c4:b9: 47:33:ec:b6:e8:0c:53:79:86:49:bf:59:65:5c:be:ce:66:06: 93:5f:19:28:54:da:29:fa:b3:ec:07:10:ca:fa:c4:50:2b:cc: 94:af:c7:2b:10:30:3c:2d:f1:74:29:02:2a:3b:37:c8:41:ac: e0:5f:0f:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/yz57opjWEb39gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjdmZDk1Y2EtY2E2My00MDI5LWE0YzAtZmM4NTkyYjExMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jBu1qBqoLrnAk0vy0YEBf96mRSgPELKOnvo 1K3wGLJRloVEevjXlJpbBaKuF+l6yhRMZ+/doGig7BitZd+S/pu3Soh0+I5qaDZH R7eBWv7eOaUY94XQNNqFxE+uETzCGG6ftae8Gh1tllaJHREoq/91mv48vZTA9Get nPYuvxiSWu+ZEhrMLI/JaKhD/uO3jhnYp+8iHnMA3HkuBQPR8xTW/dr8VGy0Xuoh IojxaKKAdQv2d/y1bLWSIQZSMO4Q9yTXd4A2mqT011X4ZlDX6NU+wVzxlziePLMt vY4pGphQ4pkODt3NDPavMWCqMUpkTsby5VNw51MAkZuFWlpEpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOGDzGTxDkfU84xY1RGy+/UQA5AIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjQ2OWY3MjQtMTNmNS0z NDE3LWE2OGMtZTk0OGQ1MzYxMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALnN+CO+CPzmMHVRE0ld9nQxHsCuGdVG2eL7+dwftB/xB+LdJ2M7 xLWl04viZprHcZPD0wdJVB8ebKWSWM2gbg1auwQaVUis3UCh7CbYbDfDx3gK+VR+ hVrXDq33a//zjC028ew9WWbCafnh+yOKGQ9ugzIEfApspyzaUgCuGhbqN/ZNiThG SKdP1D65SSXNxF9wVsKWxTPiSYdu2S8YH1iaSOIvGJP+u8NlcLUYvLQnjzhR0aU+ SvE7YNAClUo/sfCdKXbEuUcz7LboDFN5hkm/WWVcvs5mBpNfGShU2in6s+wHEMr6 xFArzJSvxysQMDwt8XQpAio7N8hBrOBfD+Q= -----END CERTIFICATE-----Generated at Mon Aug 4 07:42:49 2025 by rpki-client