$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa File: 4806d9a4-dceb-3143-9904-9beadf5a65b4.roa (raw, json) Hash identifier: dIngGSTCNrvdYmUjeSg48ana+4zFnPWz74wepFapPvU= Subject key identifier: 3F:1F:D9:44:9F:1A:76:A1:FD:DC:49:43:B2:81:10:62:9C:A5:2B:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A81465A3F071EA6473A4F3B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 46432 IP address blocks: 2001:470:371::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:5a:3f:07:1e:a6:47:3a:4f:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=474d4dfb-c729-4b70-bb27-6f523b9af5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:31:8a:15:75:5d:8a:98:92:cf:00:b6:bd: 0f:b0:f4:39:82:cc:07:e6:f0:5f:98:46:b0:03:78: 89:bf:3c:1b:e5:ef:17:5c:5e:78:0c:4d:90:c0:b3: 4e:d8:c8:79:b2:6d:4f:b6:cd:fa:f1:55:2e:6b:88: 7b:cb:df:a9:22:9d:8c:bc:53:a5:7d:ac:67:12:6c: 6e:15:0d:1c:5c:65:13:0d:a7:b7:5a:19:52:ad:5b: 39:d1:1e:7c:9b:f9:35:21:ce:02:27:7a:c2:a3:68: a5:7c:61:b9:cb:fe:14:07:77:b6:7b:e7:2e:ef:6d: 72:8b:b9:a7:07:b7:e7:60:99:17:80:a9:80:fa:58: dd:6b:96:a1:10:a6:7f:0e:4b:c4:31:6a:a4:5a:e4: e2:80:6d:ae:62:9b:2d:f2:03:a3:68:7b:e9:51:19: 14:01:ad:09:6c:51:c5:b3:6d:3d:a5:de:ca:fc:7d: 6d:bf:57:2f:1e:1d:ea:a9:c4:1b:75:02:f5:67:e9: 43:1f:8a:2c:d6:71:e1:73:1a:73:f2:bf:f0:35:3e: 31:d9:0a:17:77:2c:ca:ad:5d:af:e6:8f:49:00:60: 93:96:27:03:1d:a8:d7:59:9a:30:19:ae:cf:c9:68: f6:20:a1:dc:87:c6:4d:34:b1:87:7f:ea:5b:81:5d: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1F:D9:44:9F:1A:76:A1:FD:DC:49:43:B2:81:10:62:9C:A5:2B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:371::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:11:48:83:ef:ae:2e:24:b2:f0:f8:b4:4a:74:4d:a5:41:46: 2e:4d:da:98:dd:86:7b:d0:24:b8:fa:0e:18:15:7a:31:87:94: ad:eb:87:8f:82:c1:ef:d8:b3:2d:c7:2b:b6:70:9c:98:9c:79: 38:3c:03:be:43:12:66:57:82:d0:30:63:e5:a8:20:2b:91:ab: b1:ca:87:37:77:00:99:48:d9:4e:39:83:62:d5:02:19:e4:dd: fb:e4:40:bd:d3:21:b6:03:68:80:78:68:b1:18:66:9f:e8:9d: 5a:13:90:5d:bd:89:08:f2:76:da:da:d6:66:d2:02:c7:d2:e7: 7c:64:60:63:1a:0e:a5:93:75:5a:11:6a:74:93:b6:8f:54:b9: 36:fc:1b:02:92:4b:13:93:e2:50:83:33:bd:00:e1:ea:41:2b: d1:e9:50:6f:c6:34:c0:ed:d9:6e:31:36:36:a1:ab:da:1e:55: 83:87:a9:32:5d:68:87:3d:1c:4e:29:54:9d:69:88:f0:50:09: fd:0c:fb:23:c7:a3:a7:e1:15:f4:31:07:d1:61:2e:eb:11:7a: 13:f5:84:f5:35:ad:78:6d:01:9a:93:0f:2e:7c:9c:78:a4:ca: fa:75:60:cf:74:62:28:8e:16:50:af:fa:8f:09:2f:9c:d2:b0: 33:e9:bd:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRlo/Bx6mRzpPO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NDc0ZDRkZmItYzcyOS00YjcwLWJiMjctNmY1MjNiOWFmNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVExihV1XYqYks8Atr0PsPQ5gswH5vBfmEaw A3iJvzwb5e8XXF54DE2QwLNO2Mh5sm1Pts368VUua4h7y9+pIp2MvFOlfaxnEmxu FQ0cXGUTDae3WhlSrVs50R58m/k1Ic4CJ3rCo2ilfGG5y/4UB3e2e+cu721yi7mn B7fnYJkXgKmA+ljda5ahEKZ/DkvEMWqkWuTigG2uYpst8gOjaHvpURkUAa0JbFHF s209pd7K/H1tv1cvHh3qqcQbdQL1Z+lDH4os1nHhcxpz8r/wNT4x2QoXdyzKrV2v 5o9JAGCTlicDHajXWZowGa7PyWj2IKHch8ZNNLGHf+pbgV31swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8f2USfGnah/dxJQ7KBEGKcpSvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDgwNmQ5YTQtZGNlYi0z MTQzLTk5MDQtOWJlYWRmNWE2NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0RSIPvri4ksvD4tEp0TaVBRi5N2pjdhnvQJLj6DhgVejGHlK3r h4+Cwe/Ysy3HK7ZwnJiceTg8A75DEmZXgtAwY+WoICuRq7HKhzd3AJlI2U45g2LV Ahnk3fvkQL3TIbYDaIB4aLEYZp/onVoTkF29iQjydtra1mbSAsfS53xkYGMaDqWT dVoRanSTto9UuTb8GwKSSxOT4lCDM70A4epBK9HpUG/GNMDt2W4xNjahq9oeVYOH qTJdaIc9HE4pVJ1piPBQCf0M+yPHo6fhFfQxB9FhLusRehP1hPU1rXhtAZqTDy58 nHikyvp1YM90YiiOFlCv+o8JL5zSsDPpvZQ= -----END CERTIFICATE-----Generated at Sat Jul 26 21:45:55 2025 by rpki-client