$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa File: ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa (raw, json) Hash identifier: u4H1VpWHwJnYi1Hsv2LgbjQNuHSNzw2zpZgBpxC5Xx0= Subject key identifier: 0D:55:FC:6D:F1:C6:A5:F6:27:D8:CA:57:F0:8E:55:C6:7D:07:37:FE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A6825F5A72847440951561780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 25912 IP address blocks: 2001:470:3fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:f5:a7:28:47:44:09:51:56:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=72ab1f6b-7bbe-43f9-b741-7ab917bd3ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:ff:3d:39:73:70:ea:f0:08:28:17:ac:56: d0:ea:c8:05:fc:4d:06:70:22:87:ad:e8:6d:e4:be: 64:0d:9f:25:75:4d:ae:28:11:d8:ac:77:07:dc:96: 24:91:5c:2e:32:5f:13:83:ac:7b:e9:f3:59:bf:d8: ed:f8:0d:ff:cd:fa:41:8d:09:b7:1a:75:41:86:15: be:aa:af:7d:59:7f:31:d1:aa:a8:5c:68:4b:25:22: 0a:f7:b9:2d:c3:77:ea:82:c1:29:ed:72:76:d3:56: 4b:f2:17:38:b2:20:84:39:fa:55:d1:96:61:1f:62: 74:5b:02:26:76:10:53:24:8a:fd:14:06:57:eb:af: bd:74:40:eb:4b:67:b5:aa:5a:79:d8:3e:c0:8f:fd: 6d:aa:77:2e:73:14:c4:3d:e7:85:70:33:47:68:f1: f4:27:11:e2:1c:3f:7a:5e:19:27:4d:38:4c:ff:17: d0:1b:73:d3:19:0a:c8:3d:4b:73:f1:79:e0:1a:a5: 8c:43:4b:06:ff:9c:3a:8a:f7:a5:78:c5:22:76:19: c2:95:55:12:7c:72:9d:f6:3d:ea:80:87:cb:52:0d: ec:69:03:d1:9d:9d:eb:fc:6a:62:03:a4:8d:18:dc: b3:88:0b:6d:e3:a7:ea:14:3c:5f:da:69:e5:cf:f5: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:FC:6D:F1:C6:A5:F6:27:D8:CA:57:F0:8E:55:C6:7D:07:37:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff22bff8-79ed-3de1-a9fe-44b114229d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:30:83:42:ce:38:0f:af:6f:bc:63:b6:33:0c:12:8d:83:a3: 83:43:a6:c6:38:59:af:08:8f:5c:b0:9f:e5:c4:7a:09:0c:b4: 5b:b4:6b:32:4f:34:cc:2c:25:13:44:ae:c4:a6:90:71:0a:6c: 68:98:98:91:20:95:65:30:43:8a:95:25:c5:44:83:db:67:27: 4c:8a:71:b8:f9:d4:f8:a6:03:ef:2e:f8:31:43:9f:ed:ee:1b: 7c:9a:cd:67:2d:fb:92:b8:c7:53:c6:87:f3:df:a1:38:0e:77: 1a:8b:cc:25:4b:a7:67:d1:97:91:54:d3:36:65:df:60:b5:98: 86:13:13:04:ca:7f:01:f3:59:2e:de:64:07:2b:3d:c6:59:3f: fb:2b:0a:b6:0d:6e:56:07:dd:d1:fb:90:e8:c5:bf:2a:83:fd: 87:da:01:4b:02:67:55:76:4a:e7:4b:1e:42:39:29:b5:29:4e: df:e4:82:0f:68:02:b0:ba:f8:68:5a:5a:cf:fb:dd:f9:66:56: 35:8f:6e:f4:86:d7:e6:b7:bb:9c:80:cf:a0:0f:9d:13:2a:89: 4f:97:d3:80:23:e9:29:36:ea:8d:9b:cc:10:2f:e3:aa:ac:59: d4:69:f8:18:f7:7a:20:0f:eb:26:f0:12:b1:f1:bd:5a:09:5a: ef:9b:b4:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfWnKEdECVFWF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NzJhYjFmNmItN2JiZS00M2Y5LWI3NDEtN2FiOTE3YmQzZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrD/PTlzcOrwCCgXrFbQ6sgF/E0GcCKHreht 5L5kDZ8ldU2uKBHYrHcH3JYkkVwuMl8Tg6x76fNZv9jt+A3/zfpBjQm3GnVBhhW+ qq99WX8x0aqoXGhLJSIK97ktw3fqgsEp7XJ201ZL8hc4siCEOfpV0ZZhH2J0WwIm dhBTJIr9FAZX66+9dEDrS2e1qlp52D7Aj/1tqncucxTEPeeFcDNHaPH0JxHiHD96 XhknTThM/xfQG3PTGQrIPUtz8XngGqWMQ0sG/5w6iveleMUidhnClVUSfHKd9j3q gIfLUg3saQPRnZ3r/GpiA6SNGNyziAtt46fqFDxf2mnlz/WMZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1V/G3xxqX2J9jKV/COVcZ9Bzf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmYyMmJmZjgtNzllZC0z ZGUxLWE5ZmUtNDRiMTE0MjI5ZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHowg0LOOA+vb7xjtjMMEo2Do4NDpsY4Wa8Ij1ywn+XEegkMtFu0 azJPNMwsJRNErsSmkHEKbGiYmJEglWUwQ4qVJcVEg9tnJ0yKcbj51PimA+8u+DFD n+3uG3yazWct+5K4x1PGh/PfoTgOdxqLzCVLp2fRl5FU0zZl32C1mIYTEwTKfwHz WS7eZAcrPcZZP/srCrYNblYH3dH7kOjFvyqD/YfaAUsCZ1V2SudLHkI5KbUpTt/k gg9oArC6+GhaWs/73flmVjWPbvSG1+a3u5yAz6APnRMqiU+X04Aj6Sk26o2bzBAv 46qsWdRp+Bj3eiAP6ybwErHxvVoJWu+btOA= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:55 2025 by rpki-client