$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa File: 2628e785-3aa0-3d4c-b55f-53daa1551db8.roa (raw, json) Hash identifier: uXrQ1ah2Gt+e680tU870Q7vxw/d7/FabxTuncqvyChg= Subject key identifier: 13:E6:EB:78:47:0B:51:65:0A:DD:07:80:8B:AC:0D:CA:E2:FC:DA:FE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9FFB91929A135CDAD14CC880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 39522 IP address blocks: 2001:470:32d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:91:92:9a:13:5c:da:d1:4c:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=64a32a69-7d7d-4adf-a96d-22d0c010e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:e9:67:bb:e1:34:d0:b8:9b:0f:14:19:22: e7:5a:4f:b5:5e:e7:2d:0f:65:ea:56:9b:2f:fa:7c: 9e:24:d1:bf:44:a1:41:83:2a:22:24:2d:a8:4e:59: d8:bb:74:b4:4a:36:f6:70:50:cc:14:9c:53:ed:7a: 8f:54:5c:a5:26:7c:82:2b:b1:bc:47:4f:9a:46:1d: e9:8f:e3:14:86:7d:a9:75:af:bd:5a:29:df:b7:a8: 99:4a:24:94:be:17:a4:d3:db:bd:ae:0c:e9:ae:b1: 28:8f:f9:86:d9:43:35:b9:9c:55:83:8c:ce:15:73: d3:de:d2:4f:a1:e8:42:a1:fe:c3:db:ba:f4:1b:8f: 2a:f0:59:e7:eb:ff:dd:17:93:cc:50:bd:93:75:a0: b8:fa:73:b5:6a:0a:da:08:90:3b:ff:8c:ef:d5:9d: 41:60:ee:14:01:58:04:12:09:de:6d:41:0b:10:7d: 15:14:7d:d9:82:12:4a:08:ff:a4:e9:66:4d:c0:85: 4b:2e:cf:f8:b2:a3:44:72:59:cd:6f:15:1f:9e:fb: 46:10:8a:d3:54:b4:dc:46:4a:73:c8:9e:28:5b:cb: ee:c4:a7:ee:e5:fe:5a:d8:ed:4b:c6:11:7c:88:d7: ea:1b:85:8e:24:17:f2:e5:cf:2c:e7:74:26:60:06: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E6:EB:78:47:0B:51:65:0A:DD:07:80:8B:AC:0D:CA:E2:FC:DA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:32d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3c:e0:9a:78:29:20:0f:04:3e:86:71:a2:a8:9d:05:fe:6b: ae:6a:36:89:56:2a:c9:54:b1:59:e4:33:b9:87:e2:36:89:d3: 02:d4:ce:c2:30:39:aa:2c:83:71:f7:60:1c:f6:33:4b:f0:aa: ef:bd:90:e2:69:79:da:07:37:f8:b7:53:82:20:11:d5:60:d4: 87:6f:01:ce:4e:66:64:82:6d:0a:66:f8:d9:7c:54:24:e5:43: 9a:f7:f3:18:8a:bf:c8:36:03:1b:da:7b:35:be:fb:08:7f:a7: e4:a2:2e:3a:c9:99:55:7a:47:49:f4:f6:ea:45:a0:b3:14:c0: 44:0d:0a:9e:6f:3f:ce:02:36:32:c6:ea:b7:4b:cd:5d:c3:45: 7b:2d:56:a7:c9:67:33:0c:d8:d9:11:3b:24:19:c3:26:2e:ff: cf:5f:51:6b:96:de:29:08:e8:76:44:42:c9:e3:57:35:af:60: 92:c3:39:ac:c9:9a:01:ee:bc:b0:43:f6:12:6d:ff:a4:02:19: 00:20:5c:22:70:6c:3d:b2:fd:ff:91:12:e9:1a:38:b3:f6:99: 7b:60:8b:48:8a:25:20:17:17:8e:e1:9e:81:e9:0f:4a:28:1c: c8:57:85:83:4d:fa:23:43:a3:ff:e0:f6:c9:01:77:50:cc:ac: 7e:b4:2a:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+5GSmhNc2tFMyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NjRhMzJhNjktN2Q3ZC00YWRmLWE5NmQtMjJkMGMwMTBlMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzODpZ7vhNNC4mw8UGSLnWk+1XuctD2XqVpsv +nyeJNG/RKFBgyoiJC2oTlnYu3S0Sjb2cFDMFJxT7XqPVFylJnyCK7G8R0+aRh3p j+MUhn2pda+9Winft6iZSiSUvhek09u9rgzprrEoj/mG2UM1uZxVg4zOFXPT3tJP oehCof7D27r0G48q8Fnn6//dF5PMUL2TdaC4+nO1agraCJA7/4zv1Z1BYO4UAVgE EgnebUELEH0VFH3ZghJKCP+k6WZNwIVLLs/4sqNEclnNbxUfnvtGEIrTVLTcRkpz yJ4oW8vuxKfu5f5a2O1LxhF8iNfqG4WOJBfy5c8s53QmYAalLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPm63hHC1FlCt0HgIusDcri/Nr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjYyOGU3ODUtM2FhMC0z ZDRjLWI1NWYtNTNkYWExNTUxZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFs84Jp4KSAPBD6GcaKonQX+a65qNolWKslUsVnkM7mH4jaJ0wLU zsIwOaosg3H3YBz2M0vwqu+9kOJpedoHN/i3U4IgEdVg1IdvAc5OZmSCbQpm+Nl8 VCTlQ5r38xiKv8g2AxvaezW++wh/p+SiLjrJmVV6R0n09upFoLMUwEQNCp5vP84C NjLG6rdLzV3DRXstVqfJZzMM2NkROyQZwyYu/89fUWuW3ikI6HZEQsnjVzWvYJLD OazJmgHuvLBD9hJt/6QCGQAgXCJwbD2y/f+REukaOLP2mXtgi0iKJSAXF47hnoHp D0ooHMhXhYNN+iNDo//g9skBd1DMrH60Kkg= -----END CERTIFICATE-----Generated at Tue Jul 29 01:51:13 2025 by rpki-client