$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861eaab8-6c9c-3a2e-9c2e-9a48686c9428.roa File: 861eaab8-6c9c-3a2e-9c2e-9a48686c9428.roa (raw, json) Hash identifier: fLi2qR4NXjgkCLGJOtSWUKNc+DxQXDtlKMN79cH/v1o= Subject key identifier: 88:25:04:8B:1E:E1:AA:6B:09:79:94:F9:74:AA:7C:3B:D9:F2:80:5F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A884F246BCD69C14FC1B6AD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861eaab8-6c9c-3a2e-9c2e-9a48686c9428.roa Signing time: Wed 16 Jul 2025 01:30:10 +0000 ROA not before: Wed 16 Jul 2025 01:30:10 +0000 ROA not after: Tue 14 Oct 2025 01:30:10 +0000 asID: 50917 IP address blocks: 2001:470:3d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:4f:24:6b:cd:69:c1:4f:c1:b6:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 16 01:30:10 2025 GMT Not After : Oct 14 01:30:10 2025 GMT Subject: CN=239c92fe-bc73-4fe3-8ee3-87fd520c3a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:fb:6f:da:4c:e2:81:18:9e:d2:3c:a4:5c: 40:7f:0e:03:24:f6:d3:39:2d:af:53:e0:73:42:23: 6e:b6:b8:a6:80:31:0e:5b:83:72:c0:13:7e:02:65: 69:69:d5:51:0d:a8:be:6d:99:a4:63:fd:0f:04:e3: 95:de:59:e3:1b:de:bd:ca:53:cf:01:65:ee:22:78: 51:00:c9:d8:78:6c:59:56:61:fe:6c:19:46:d4:d7: 09:29:5e:99:f0:ef:a4:22:40:de:eb:78:15:fc:c3: 22:7f:c1:40:01:d9:e5:6d:36:fa:4b:b7:a9:7c:9b: 30:9f:20:95:5f:8a:23:0d:fa:ad:3c:30:3d:be:8d: 92:1f:8f:2c:dc:d6:ed:0a:59:2b:61:47:ea:07:8c: 5e:4a:53:02:35:9d:b5:51:00:a8:da:c0:57:9c:3f: 4f:a7:0e:22:9b:fd:1f:32:8b:ec:ea:1d:95:cd:5b: b4:1b:dc:e1:96:22:6b:70:c4:7f:eb:cd:3c:a1:37: 73:23:8d:a3:d9:24:72:73:91:01:88:0d:31:0a:b7: fe:8d:31:0a:58:cf:ce:f9:16:23:a0:38:f6:46:66: 05:c9:56:00:ab:25:ff:fe:1c:c6:a9:5c:51:17:02: b3:8c:2d:8b:f3:f2:a5:41:c4:06:05:72:38:19:12: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:25:04:8B:1E:E1:AA:6B:09:79:94:F9:74:AA:7C:3B:D9:F2:80:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861eaab8-6c9c-3a2e-9c2e-9a48686c9428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9e:c0:2f:56:07:6e:e9:e1:3b:a6:9a:fe:4a:84:25:28:5a: 01:39:75:6d:7d:28:46:d3:c9:50:e9:99:ee:64:20:02:52:8c: dd:8c:e4:b1:ad:f4:46:4f:b7:9b:9b:0e:f9:36:87:ef:7b:ff: e9:17:44:1a:69:7b:2a:8b:0f:1c:b0:f7:6a:09:4d:b0:d1:ff: 0c:10:35:f0:f8:3e:cf:91:b5:f7:d3:f3:67:4d:2b:02:8d:40: 59:a0:01:6b:98:9f:da:fc:99:bd:32:63:89:48:85:db:ac:79: 7b:d9:45:85:69:d8:68:3c:00:c1:d9:1d:04:f3:dd:c6:94:77: a1:fd:83:1b:af:d9:77:60:6f:be:c3:cf:17:51:5a:17:7b:c9: fe:8f:70:7f:b0:f8:40:41:ad:44:4d:fc:fe:50:ba:d7:b1:13: 21:ff:8a:28:18:9d:a6:00:32:c4:ce:91:43:64:ba:c7:a9:bb: 68:24:65:c5:1c:cc:b8:33:fb:b9:98:da:7c:c7:fb:7c:da:8f: 2f:94:0a:5b:cd:5e:45:40:0b:75:ca:39:a9:9c:26:72:f6:8d: d3:71:60:0f:61:c4:c3:77:76:e1:c0:15:df:87:40:65:59:18: 2e:34:98:a8:4f:4f:9b:b9:eb:b4:7b:15:8b:46:75:ad:91:41: ab:60:09:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqITyRrzWnBT8G2rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxNjAxMzAxMFoXDTI1MTAxNDAxMzAxMFowLzEtMCsGA1UEAxMk MjM5YzkyZmUtYmM3My00ZmUzLThlZTMtODdmZDUyMGMzYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DT7b9pM4oEYntI8pFxAfw4DJPbTOS2vU+Bz QiNutrimgDEOW4NywBN+AmVpadVRDai+bZmkY/0PBOOV3lnjG969ylPPAWXuInhR AMnYeGxZVmH+bBlG1NcJKV6Z8O+kIkDe63gV/MMif8FAAdnlbTb6S7epfJswnyCV X4ojDfqtPDA9vo2SH48s3NbtClkrYUfqB4xeSlMCNZ21UQCo2sBXnD9Ppw4im/0f Movs6h2VzVu0G9zhliJrcMR/6808oTdzI42j2SRyc5EBiA0xCrf+jTEKWM/O+RYj oDj2RmYFyVYAqyX//hzGqVxRFwKzjC2L8/KlQcQGBXI4GRL2OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIglBIse4aprCXmU+XSqfDvZ8oBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODYxZWFhYjgtNmM5Yy0z YTJlLTljMmUtOWE0ODY4NmM5NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiewC9WB27p4Tummv5KhCUoWgE5dW19KEbTyVDpme5kIAJSjN2M 5LGt9EZPt5ubDvk2h+97/+kXRBppeyqLDxyw92oJTbDR/wwQNfD4Ps+RtffT82dN KwKNQFmgAWuYn9r8mb0yY4lIhduseXvZRYVp2Gg8AMHZHQTz3caUd6H9gxuv2Xdg b77DzxdRWhd7yf6PcH+w+EBBrURN/P5QutexEyH/iigYnaYAMsTOkUNkusepu2gk ZcUczLgz+7mY2nzH+3zajy+UClvNXkVAC3XKOamcJnL2jdNxYA9hxMN3duHAFd+H QGVZGC40mKhPT5u567R7FYtGda2RQatgCaY= -----END CERTIFICATE-----Generated at Mon Jul 21 12:22:47 2025 by rpki-client