$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa File: 3e095c3c-157c-3a77-af99-2101d8759075.roa (raw, json) Hash identifier: ExQKCOiwTBbP2cR6UuRreDCHgkKOTQScKuOi765IT0E= Subject key identifier: F4:23:A6:4C:0B:CC:F1:4B:C7:72:14:08:2D:04:27:13:85:90:A9:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A66CEEC607DE17FA8FE65F668 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa Signing time: Fri 04 Jul 2025 01:30:08 +0000 ROA not before: Fri 04 Jul 2025 01:30:08 +0000 ROA not after: Thu 02 Oct 2025 01:30:08 +0000 asID: 398362 IP address blocks: 2001:470:1b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:ce:ec:60:7d:e1:7f:a8:fe:65:f6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 4 01:30:08 2025 GMT Not After : Oct 2 01:30:08 2025 GMT Subject: CN=898dfd0e-bdcb-4bc3-9218-a54f0a3ade69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:c4:e4:39:06:f3:c0:59:66:cc:f9:e4:12: 63:8d:c9:83:d9:65:e9:c8:0b:82:20:70:4a:a6:a1: c6:fa:b6:80:f1:17:42:66:2f:55:92:53:5a:b5:52: 7a:36:cc:01:51:28:d9:2a:b0:e2:2e:b2:45:98:91: ad:89:dc:31:03:90:48:4f:d0:39:92:b9:2f:9f:59: 8c:4d:60:f3:d5:8b:33:17:f7:42:3c:c0:f6:05:82: d3:05:04:3b:24:f7:97:02:48:ac:5a:64:87:dd:0e: 89:80:30:3d:46:78:5d:30:17:2a:0c:7b:d8:8a:fd: 93:4b:ea:bd:06:89:10:5f:e3:fd:be:55:c2:ff:41: 94:35:ed:65:ea:44:bb:3f:d7:5e:e4:c3:cd:81:94: ef:f0:53:40:38:4f:8c:5c:0d:ec:1a:3e:07:67:33: 9e:f7:8a:61:02:ae:be:ca:e9:14:f2:58:49:98:60: 2a:07:8f:01:91:ec:23:d0:63:d0:56:6f:5a:f6:89: 0d:67:b2:59:33:75:d9:fc:17:db:68:a0:65:e6:d6: 5b:d3:c8:a8:3e:8c:2a:f7:d8:1e:22:90:85:58:12: 86:1f:1c:51:13:0a:ba:24:eb:a7:a7:31:58:50:8b: d7:82:05:03:4a:ef:e2:b1:61:dc:9c:45:a5:96:a2: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:23:A6:4C:0B:CC:F1:4B:C7:72:14:08:2D:04:27:13:85:90:A9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f6:3a:b4:49:af:9b:00:3e:39:e8:ac:c4:84:0c:6b:55:83: f9:06:5f:bc:aa:69:a8:09:1e:af:15:0d:1c:fb:90:e0:69:aa: 4e:9c:46:f0:40:82:88:b9:a3:4a:0e:da:6a:76:b6:99:87:90: ba:f0:3c:de:c8:27:7d:d2:87:80:17:30:7f:b7:04:10:61:02: a8:f5:e0:3f:51:eb:02:1e:5c:a7:2c:95:eb:70:1c:e2:2e:64: 32:7b:54:5c:09:7a:73:07:53:6e:85:86:05:14:87:78:46:a8: 40:b2:65:56:91:28:7b:16:2d:0b:fa:ce:b9:fa:c3:49:1d:c1: ae:b2:7e:15:9c:90:69:ed:d5:98:13:a3:67:68:5c:a5:be:6b: bd:92:ca:3b:ec:39:00:e3:65:59:43:ab:15:cb:a1:d2:68:73: 3e:f6:b7:74:05:d6:ba:f6:4b:9d:ee:fd:d1:a1:68:b3:ed:71: 6e:66:97:85:a9:ea:d0:a3:d4:d3:01:4e:a7:f9:92:c6:37:50: e2:2a:6a:56:f9:b7:4d:df:ec:b4:6e:de:85:e1:d0:74:9e:79: 07:3c:b8:b1:14:0b:ed:8e:da:8e:fe:65:88:a2:82:12:6e:fa: ca:9f:cd:68:09:72:b5:a6:02:0f:5a:10:d7:19:a4:9e:f3:bb: 8a:da:82:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpmzuxgfeF/qP5l9mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwNDAxMzAwOFoXDTI1MTAwMjAxMzAwOFowLzEtMCsGA1UEAxMk ODk4ZGZkMGUtYmRjYi00YmMzLTkyMTgtYTU0ZjBhM2FkZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDE5DkG88BZZsz55BJjjcmD2WXpyAuCIHBK pqHG+raA8RdCZi9VklNatVJ6NswBUSjZKrDiLrJFmJGtidwxA5BIT9A5krkvn1mM TWDz1YszF/dCPMD2BYLTBQQ7JPeXAkisWmSH3Q6JgDA9RnhdMBcqDHvYiv2TS+q9 BokQX+P9vlXC/0GUNe1l6kS7P9de5MPNgZTv8FNAOE+MXA3sGj4HZzOe94phAq6+ yukU8lhJmGAqB48Bkewj0GPQVm9a9okNZ7JZM3XZ/BfbaKBl5tZb08ioPowq99ge IpCFWBKGHxxREwq6JOunpzFYUIvXggUDSu/isWHcnEWllqIvyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQjpkwLzPFLx3IUCC0EJxOFkKlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2UwOTVjM2MtMTU3Yy0z YTc3LWFmOTktMjEwMWQ4NzU5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALr2OrRJr5sAPjnorMSEDGtVg/kGX7yqaagJHq8VDRz7kOBpqk6c RvBAgoi5o0oO2mp2tpmHkLrwPN7IJ33Sh4AXMH+3BBBhAqj14D9R6wIeXKcsletw HOIuZDJ7VFwJenMHU26FhgUUh3hGqECyZVaRKHsWLQv6zrn6w0kdwa6yfhWckGnt 1ZgTo2doXKW+a72SyjvsOQDjZVlDqxXLodJocz72t3QF1rr2S53u/dGhaLPtcW5m l4Wp6tCj1NMBTqf5ksY3UOIqalb5t03f7LRu3oXh0HSeeQc8uLEUC+2O2o7+ZYii ghJu+sqfzWgJcrWmAg9aENcZpJ7zu4ragiA= -----END CERTIFICATE-----Generated at Thu Jul 31 05:18:35 2025 by rpki-client