$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa File: a8086cc8-fcbe-3427-b170-7540edab1ef1.roa (raw, json) Hash identifier: dNshOCPI0nWrlMSeTWhcmCR5+On4SrYGlCtkcqHVmSU= Subject key identifier: 1B:EE:A9:04:46:8E:17:59:75:BD:04:48:32:29:08:3D:76:6D:F1:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A682643E429D51080309C9100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 52129 IP address blocks: 2001:470:3fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:43:e4:29:d5:10:80:30:9c:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=405d0f76-43f7-4f99-adb1-778dd5eb17b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:41:99:eb:c6:38:da:00:00:1f:0c:23:ac: 75:f7:48:05:b8:72:20:7b:8c:aa:ec:44:10:f3:3c: af:ad:9f:30:0b:4e:94:9f:a3:4d:04:73:99:c8:de: 8d:8f:7d:77:a7:0b:84:4c:cb:9c:60:fb:cb:40:84: 1c:1c:ae:bc:d5:32:b6:4b:cc:1f:5e:d4:8a:c7:13: 7f:e5:40:1b:54:19:9e:77:e0:ae:27:52:7f:89:83: b5:3f:84:19:02:20:14:d1:b9:99:04:08:6c:f0:2f: 30:08:e6:08:f5:9f:e2:c5:6b:35:97:aa:76:1a:47: 14:f6:b9:12:96:eb:b1:ae:4c:81:f4:be:f3:78:18: b5:ea:db:ed:46:6a:25:c7:6e:5f:ec:cb:c7:15:3c: a1:bc:22:76:6a:05:54:7b:3a:b7:8f:c8:67:eb:e2: 62:79:01:f5:53:44:49:db:89:71:2b:88:9d:0c:e8: 2e:a0:0a:c2:85:f5:29:48:77:62:e0:c0:c0:f2:89: de:48:6d:6f:52:8d:52:94:d9:e1:69:55:7e:e9:1e: bd:df:cc:54:2b:74:fc:d0:6e:e9:07:fd:2d:ba:17: 8f:47:8f:6b:87:e7:7a:00:c5:1a:b2:b9:17:21:48: 6b:f9:dd:ca:b3:4a:d4:23:da:1b:c2:45:0d:52:dd: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EE:A9:04:46:8E:17:59:75:BD:04:48:32:29:08:3D:76:6D:F1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:29:f1:18:23:89:45:d2:3c:c0:e6:cb:14:fc:95:1c:d3:66: 42:ed:15:c5:af:0e:6f:9b:5c:f8:15:b5:50:7b:fa:36:85:38: d2:84:24:4f:41:54:9d:83:bf:b1:de:1e:51:bf:83:57:58:d4: 32:ea:c2:4e:3c:f8:b0:32:19:f7:0a:49:56:94:3b:70:3c:d2: f1:79:87:46:81:04:c5:83:91:7a:45:06:d6:c1:cf:d6:98:cd: 2e:1d:81:42:0b:96:e9:55:b7:a3:f0:83:80:e7:00:73:3c:11: f2:6c:25:f2:0f:ab:dd:f5:fe:7b:fb:a2:80:c9:a5:02:73:d7: 19:dc:ec:ea:53:b7:c7:31:36:8a:38:b3:0b:34:2e:40:43:1b: 52:25:7d:24:69:bb:a1:df:16:51:d2:eb:d3:c2:e8:c2:7f:f0: e0:12:f7:89:bf:47:36:e1:7f:44:c0:66:bd:a7:68:8b:66:59: c9:df:33:1a:18:0b:1c:ae:cd:55:f5:20:35:57:52:92:82:e9: 74:de:52:b4:ad:cf:0c:08:9d:4c:97:b4:4d:1e:48:89:ca:2a: fb:0d:c1:50:e6:1d:b3:f5:80:41:51:e6:ec:ed:0e:b6:2a:ea: 60:d2:9f:8b:27:ce:31:78:67:c0:0a:a4:4a:bf:b4:7f:25:7d: dc:4d:5c:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJkPkKdUQgDCckQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDA1ZDBmNzYtNDNmNy00Zjk5LWFkYjEtNzc4ZGQ1ZWIxN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwdBmevGONoAAB8MI6x190gFuHIge4yq7EQQ 8zyvrZ8wC06Un6NNBHOZyN6Nj313pwuETMucYPvLQIQcHK681TK2S8wfXtSKxxN/ 5UAbVBmed+CuJ1J/iYO1P4QZAiAU0bmZBAhs8C8wCOYI9Z/ixWs1l6p2GkcU9rkS luuxrkyB9L7zeBi16tvtRmolx25f7MvHFTyhvCJ2agVUezq3j8hn6+JieQH1U0RJ 24lxK4idDOguoArChfUpSHdi4MDA8oneSG1vUo1SlNnhaVV+6R6938xUK3T80G7p B/0tuhePR49rh+d6AMUasrkXIUhr+d3Ks0rUI9obwkUNUt2WMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBvuqQRGjhdZdb0ESDIpCD12bfFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTgwODZjYzgtZmNiZS0z NDI3LWIxNzAtNzU0MGVkYWIxZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAP+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUp8RgjiUXSPMDmyxT8lRzTZkLtFcWvDm+bXPgVtVB7+jaFONKE JE9BVJ2Dv7HeHlG/g1dY1DLqwk48+LAyGfcKSVaUO3A80vF5h0aBBMWDkXpFBtbB z9aYzS4dgUILlulVt6Pwg4DnAHM8EfJsJfIPq931/nv7ooDJpQJz1xnc7OpTt8cx Noo4sws0LkBDG1IlfSRpu6HfFlHS69PC6MJ/8OAS94m/Rzbhf0TAZr2naItmWcnf MxoYCxyuzVX1IDVXUpKC6XTeUrStzwwInUyXtE0eSInKKvsNwVDmHbP1gEFR5uzt DrYq6mDSn4snzjF4Z8AKpEq/tH8lfdxNXKM= -----END CERTIFICATE-----Generated at Sun Jul 27 11:56:09 2025 by rpki-client