$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa File: bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa (raw, json) Hash identifier: Z791fU97yrKhcXHY6/gCiCv8eIEOnb3i1jl7c0Nsx4M= Subject key identifier: 4A:86:6E:92:74:9C:C1:81:EC:49:D9:53:50:BD:30:32:31:56:78:81 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A7E7B7D02BB5C95F57A7AC9C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 27257 IP address blocks: 2001:470:3c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:7d:02:bb:5c:95:f5:7a:7a:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=fe107976-fdce-4bde-ada5-01aaf91c39b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:49:47:8e:80:86:12:d2:6a:4b:96:f9:c4:75: cb:42:42:0e:32:62:bd:a7:64:4c:53:a4:e0:0d:22: 76:e6:5a:e2:a8:55:5e:97:69:13:7f:2a:08:9c:e0: 18:4c:40:28:b6:4f:0a:29:16:c4:e6:5f:09:d6:93: 55:fa:73:ed:47:fb:00:f0:37:4b:cc:d5:ae:1e:cd: 66:e6:0b:ae:bc:c4:9e:66:be:30:2c:32:89:1a:18: 08:77:3d:67:f6:13:92:97:71:52:04:16:83:1b:ba: 68:73:8f:21:f3:90:0d:4b:6f:5a:6a:4b:4b:ed:f5: e3:de:ec:00:ad:da:fe:b0:b3:7d:1f:aa:65:49:67: dd:83:99:61:46:bf:e4:83:3a:9f:ac:73:89:d0:5a: 3e:84:f5:0e:58:2f:0d:eb:4b:ba:b1:13:89:0d:3d: ac:6f:aa:01:b2:da:90:15:da:fe:83:5a:40:18:a0: 14:6c:7a:7d:cc:73:cc:87:54:b4:91:7d:f8:cd:e4: 38:7c:f9:53:eb:ae:92:aa:39:bc:cd:b3:34:03:07: cb:d1:ff:12:8e:93:73:bf:cf:aa:05:fe:d7:4f:a8: f7:9e:6e:a2:97:b6:bb:15:b0:6e:2b:3b:91:3f:d1: 43:a0:72:34:d1:a2:3b:9b:d0:02:87:d2:cd:f4:7f: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:6E:92:74:9C:C1:81:EC:49:D9:53:50:BD:30:32:31:56:78:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:93:0a:fb:b9:2e:5d:47:cf:49:07:ee:b1:a1:4d:8e:82:98: a2:5f:1a:f1:05:cc:aa:24:68:0c:8e:73:50:7a:40:83:fe:3b: e6:90:43:bb:a4:c2:c8:e0:fb:f3:50:d2:86:c3:52:f6:b3:09: f8:72:19:d4:53:b7:ab:74:c3:22:f8:a4:13:df:ce:2f:86:56: 77:d7:8d:3c:76:14:66:f3:39:a3:d0:f9:e2:12:10:62:d2:cf: 7b:d6:92:0f:fc:cc:54:0e:02:89:ba:92:76:a2:7b:94:c5:79: 9d:07:39:ab:42:ba:3c:51:52:b9:0a:5d:2a:a5:7f:78:7a:a1: 69:2f:a4:65:2e:72:e7:52:7e:38:18:f5:ab:97:0a:ca:d7:77: 81:91:5c:e3:a2:16:85:f7:c8:76:f5:77:40:26:38:79:c2:d3: d7:ae:bc:fa:e8:a4:b6:c9:50:5c:71:ae:1c:66:27:d6:a6:da: 3b:0f:ec:c5:e4:9a:d0:e5:e3:e9:b1:ea:d9:ae:77:16:c4:a6: 07:34:2e:3c:3f:0c:d9:4a:74:13:d6:e3:b1:cf:de:c6:eb:81: a4:48:7e:35:18:b0:60:37:cf:c4:03:41:69:b9:d4:f1:f9:de: 5b:25:54:56:a8:f3:0b:39:c4:eb:67:34:f1:b7:a4:0c:eb:95: f0:a9:9a:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp+e30Cu1yV9Xp6ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmUxMDc5NzYtZmRjZS00YmRlLWFkYTUtMDFhYWY5MWMzOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20lHjoCGEtJqS5b5xHXLQkIOMmK9p2RMU6Tg DSJ25lriqFVel2kTfyoInOAYTEAotk8KKRbE5l8J1pNV+nPtR/sA8DdLzNWuHs1m 5guuvMSeZr4wLDKJGhgIdz1n9hOSl3FSBBaDG7poc48h85ANS29aaktL7fXj3uwA rdr+sLN9H6plSWfdg5lhRr/kgzqfrHOJ0Fo+hPUOWC8N60u6sROJDT2sb6oBstqQ Fdr+g1pAGKAUbHp9zHPMh1S0kX34zeQ4fPlT666Sqjm8zbM0AwfL0f8SjpNzv8+q Bf7XT6j3nm6il7a7FbBuKzuRP9FDoHI00aI7m9ACh9LN9H9rhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqGbpJ0nMGB7EnZU1C9MDIxVniBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI3ZjI4MGUtOWEwNS0z ODFjLTk3NDEtMmRiY2YyYjIxNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOTCvu5Ll1Hz0kH7rGhTY6CmKJfGvEFzKokaAyOc1B6QIP+O+aQ Q7ukwsjg+/NQ0obDUvazCfhyGdRTt6t0wyL4pBPfzi+GVnfXjTx2FGbzOaPQ+eIS EGLSz3vWkg/8zFQOAom6knaie5TFeZ0HOatCujxRUrkKXSqlf3h6oWkvpGUucudS fjgY9auXCsrXd4GRXOOiFoX3yHb1d0AmOHnC09euvPropLbJUFxxrhxmJ9am2jsP 7MXkmtDl4+mx6tmudxbEpgc0Ljw/DNlKdBPW47HP3sbrgaRIfjUYsGA3z8QDQWm5 1PH53lslVFao8ws5xOtnNPG3pAzrlfCpmlI= -----END CERTIFICATE-----Generated at Sun Jul 27 12:28:08 2025 by rpki-client