$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa File: 79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa (raw, json) Hash identifier: 8VhQ57P0TtXdRNccZKYQuuHJG9KukggVi+WYLbyG1wM= Subject key identifier: 65:DD:C0:AD:FF:34:2B:8D:ED:58:3A:AE:5A:41:ED:A7:3F:2A:A6:39 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A6290BC3213C43ADF369F0A40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 12129 IP address blocks: 2001:470:36a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:bc:32:13:c4:3a:df:36:9f:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ca41a6dc-6c35-4117-90a3-35a6e5c2c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:d4:6c:bb:fc:4f:1e:26:8c:83:1c:a5:39: cb:60:bc:aa:a4:1c:1e:4b:32:25:26:d0:4d:fa:c9: e5:35:55:54:a4:96:f3:48:cb:41:87:c3:af:6f:79: 53:5b:b3:04:c9:d8:50:a4:10:8c:2b:94:fe:a3:05: 58:db:c1:98:1a:7c:cb:a1:84:93:fa:16:55:f6:41: 04:9d:8d:75:d2:c1:70:a6:b2:5a:98:53:93:c5:d4: 1b:26:4e:b3:99:21:f4:3e:eb:ad:c9:52:07:8d:1e: 39:a2:60:7e:21:6e:c3:b6:72:c5:7e:51:69:bc:1b: a5:e5:90:26:8e:7c:07:44:55:f7:76:9b:73:91:ce: c0:fb:89:9e:af:aa:14:c1:12:ad:c2:b0:de:bd:32: e0:0d:fd:2e:e1:73:4c:00:08:48:c0:64:e2:87:49: f7:76:7c:e3:23:c1:12:8d:0f:7e:07:cf:0d:51:c8: 5b:d7:81:fd:f2:2d:1b:39:43:b6:07:27:5d:e9:f1: a1:8b:12:99:45:86:10:7c:41:27:51:af:56:06:7e: 23:c0:6f:22:8d:90:89:a6:55:a0:eb:f9:0d:7d:67: 7d:ba:67:86:59:ab:65:d7:38:57:b9:86:79:3d:0e: 6a:c3:e1:e8:d2:3d:7e:cb:8c:91:f0:16:9f:76:4d: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DD:C0:AD:FF:34:2B:8D:ED:58:3A:AE:5A:41:ED:A7:3F:2A:A6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:36a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:58:54:04:57:03:37:52:a5:18:fd:c2:41:e1:22:e9:d1:dd: 31:83:46:8c:9b:6b:7e:17:c9:9e:a8:f2:2d:04:1a:39:07:65: a0:a4:3e:d7:03:5e:b1:b5:9e:4e:e6:d3:fc:f3:3f:c1:5a:f1: ad:68:2d:83:4b:16:39:51:ea:68:3b:3e:97:ce:25:cb:83:c9: ae:c1:3a:cf:ee:e8:82:4f:2c:38:49:69:3e:73:4d:fe:eb:ef: be:ce:86:53:bf:4b:4d:48:71:7d:70:46:9c:6d:c0:85:20:5d: 22:f0:31:7e:e1:80:3d:e9:ab:8a:0e:52:24:85:72:f4:85:f7: 11:1b:8a:62:41:87:ea:2a:21:b6:f2:0b:b0:63:ba:e6:5a:14: 86:4f:89:c9:7e:a1:ee:cd:d2:ab:e7:30:19:7c:4d:44:22:dd: 9d:b6:7f:b3:1d:db:63:15:9e:af:49:4e:63:19:12:1c:a7:9d: bb:ea:2e:5e:5a:2c:14:34:e1:8e:43:b4:4b:64:58:8d:97:93: ed:b2:52:90:e3:38:4c:2c:f4:81:2a:6b:3b:28:01:1c:ec:7e: b2:46:ec:d9:5b:9f:85:36:05:21:11:d2:32:14:1e:1b:14:b6: 6a:39:ea:30:ad:cb:a6:3a:0a:b5:85:5b:6a:eb:57:8c:42:09: c0:1e:80:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikLwyE8Q63zafCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2E0MWE2ZGMtNmMzNS00MTE3LTkwYTMtMzVhNmU1YzJjODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzTUbLv8Tx4mjIMcpTnLYLyqpBweSzIlJtBN +snlNVVUpJbzSMtBh8Ovb3lTW7MEydhQpBCMK5T+owVY28GYGnzLoYST+hZV9kEE nY110sFwprJamFOTxdQbJk6zmSH0PuutyVIHjR45omB+IW7DtnLFflFpvBul5ZAm jnwHRFX3dptzkc7A+4mer6oUwRKtwrDevTLgDf0u4XNMAAhIwGTih0n3dnzjI8ES jQ9+B88NUchb14H98i0bOUO2Bydd6fGhixKZRYYQfEEnUa9WBn4jwG8ijZCJplWg 6/kNfWd9umeGWatl1zhXuYZ5PQ5qw+Ho0j1+y4yR8Bafdk1UrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXdwK3/NCuN7Vg6rlpB7ac/KqY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzlkY2NiMWItNzQ2My0z NzUzLTlkZTUtZDRjZjY3NjlmZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxYVARXAzdSpRj9wkHhIunR3TGDRoyba34XyZ6o8i0EGjkHZaCk PtcDXrG1nk7m0/zzP8Fa8a1oLYNLFjlR6mg7PpfOJcuDya7BOs/u6IJPLDhJaT5z Tf7r777OhlO/S01IcX1wRpxtwIUgXSLwMX7hgD3pq4oOUiSFcvSF9xEbimJBh+oq IbbyC7BjuuZaFIZPicl+oe7N0qvnMBl8TUQi3Z22f7Md22MVnq9JTmMZEhynnbvq Ll5aLBQ04Y5DtEtkWI2Xk+2yUpDjOEws9IEqazsoARzsfrJG7Nlbn4U2BSER0jIU HhsUtmo56jCty6Y6CrWFW2rrV4xCCcAegAY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:47 2025 by rpki-client