$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02b2ce55-edf5-36f3-8ada-27b38f14aa60.roa File: 02b2ce55-edf5-36f3-8ada-27b38f14aa60.roa (raw, json) Hash identifier: ostE7m5Merh+BdQFxWcgX6bB97MN6scAi/VFTBSz9dI= Subject key identifier: 19:38:98:15:08:01:44:09:93:3C:1E:93:BB:CE:7C:4B:07:83:21:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A94D0CC5202F5A587C4D3DD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02b2ce55-edf5-36f3-8ada-27b38f14aa60.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 204279 IP address blocks: 2001:470:451::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:cc:52:02:f5:a5:87:c4:d3:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=e65d019a-07ad-468c-8585-ef7308d8a6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:4e:36:c3:63:a4:71:50:82:ab:b8:68:c7: 39:1e:ee:78:09:ea:c9:fb:52:fb:cd:bc:c1:50:b5: 0f:d4:74:cb:8b:d6:a6:6c:6d:07:26:f3:0a:bf:bf: 93:7a:30:14:dd:71:90:4e:5a:96:0d:18:35:f2:fd: bc:fa:6c:29:de:ad:93:9d:51:99:d7:cb:75:81:42: e0:62:47:d7:39:91:05:1c:94:b9:ca:d2:6e:a1:4c: 06:39:90:13:86:f0:7e:85:98:e7:65:97:24:f7:f9: 4f:0c:d0:07:9b:98:2e:9b:08:e9:6f:be:00:e5:a3: 23:e4:c8:52:d6:bc:48:0e:64:f3:0a:93:ab:e5:6d: ad:93:ac:19:65:da:d1:33:c7:3b:a9:07:25:fa:b2: a7:2c:10:64:1f:c9:3a:57:cf:6f:b8:22:d4:ae:57: a1:30:7f:d5:9a:ec:ee:15:80:c7:99:d1:09:89:6f: 81:01:a5:14:02:b3:ce:98:d8:b9:50:90:f6:33:67: 25:75:f8:50:44:d0:b2:07:b2:bb:4f:03:0f:c7:6f: 77:4b:9a:72:30:54:4a:c4:fa:cd:07:be:2e:85:db: 62:82:43:96:c2:37:13:e7:cb:54:81:4e:6a:7f:12: a5:22:9a:8c:3b:f1:6f:3a:03:f1:a1:3a:ed:08:00: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:98:15:08:01:44:09:93:3C:1E:93:BB:CE:7C:4B:07:83:21:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02b2ce55-edf5-36f3-8ada-27b38f14aa60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:451::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ab:f3:75:92:9e:9d:c2:8c:9a:e4:69:7b:6f:5f:48:24:8e: 07:c9:50:27:7a:b1:e1:84:75:91:eb:41:51:e4:b9:5d:b5:51: 71:78:66:60:52:6c:8a:52:c1:6b:24:c5:32:0f:f6:e9:6d:12: 8a:c6:bc:1f:43:97:47:f2:c5:4b:05:5e:77:6b:9e:3a:95:dd: e8:8a:bd:fc:1b:f9:4f:4c:6b:c0:a7:2e:63:a1:34:b4:e9:e1: 7d:b7:90:9a:99:d4:f1:df:30:06:a7:c4:10:e7:06:73:83:cc: 93:30:0a:6a:cd:d2:e2:f1:ce:47:69:db:14:14:61:5e:09:93: f8:2a:2a:96:4a:71:f8:f4:5c:20:3a:b4:27:09:f4:8a:2f:51: 2b:c7:15:11:61:53:34:b0:55:52:e5:40:8f:15:63:c5:71:47: 9e:26:eb:da:aa:7c:20:78:82:d7:91:cb:11:b2:15:c1:03:01: 28:d8:52:d3:3a:ca:0b:56:5b:0f:2e:15:50:13:11:19:ad:89: 87:ca:d0:81:56:25:5f:92:9a:07:fc:aa:af:39:98:e4:cd:27: da:04:11:e9:bf:c4:77:0c:ad:c1:93:d8:d7:de:15:83:ed:40: 43:74:20:19:a0:8e:93:c4:0d:90:b4:57:7f:08:b5:39:33:47: e5:63:e4:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqU0MxSAvWlh8TT3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk ZTY1ZDAxOWEtMDdhZC00NjhjLTg1ODUtZWY3MzA4ZDhhNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR9ONsNjpHFQgqu4aMc5Hu54CerJ+1L7zbzB ULUP1HTLi9ambG0HJvMKv7+TejAU3XGQTlqWDRg18v28+mwp3q2TnVGZ18t1gULg YkfXOZEFHJS5ytJuoUwGOZAThvB+hZjnZZck9/lPDNAHm5gumwjpb74A5aMj5MhS 1rxIDmTzCpOr5W2tk6wZZdrRM8c7qQcl+rKnLBBkH8k6V89vuCLUrlehMH/Vmuzu FYDHmdEJiW+BAaUUArPOmNi5UJD2M2cldfhQRNCyB7K7TwMPx293S5pyMFRKxPrN B74uhdtigkOWwjcT58tUgU5qfxKlIpqMO/FvOgPxoTrtCAAAxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBk4mBUIAUQJkzwek7vOfEsHgyGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJiMmNlNTUtZWRmNS0z NmYzLThhZGEtMjdiMzhmMTRhYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqr83WSnp3CjJrkaXtvX0gkjgfJUCd6seGEdZHrQVHkuV21UXF4 ZmBSbIpSwWskxTIP9ultEorGvB9Dl0fyxUsFXndrnjqV3eiKvfwb+U9Ma8CnLmOh NLTp4X23kJqZ1PHfMAanxBDnBnODzJMwCmrN0uLxzkdp2xQUYV4Jk/gqKpZKcfj0 XCA6tCcJ9IovUSvHFRFhUzSwVVLlQI8VY8VxR54m69qqfCB4gteRyxGyFcEDASjY UtM6ygtWWw8uFVATERmtiYfK0IFWJV+Smgf8qq85mOTNJ9oEEem/xHcMrcGT2Nfe FYPtQEN0IBmgjpPEDZC0V38ItTkzR+Vj5G0= -----END CERTIFICATE-----Generated at Thu Jul 31 05:17:18 2025 by rpki-client