$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa File: 5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa (raw, json) Hash identifier: QQjKLsgJduBX9bvKT22sAF508zHbRjUVXffKTESaX9M= Subject key identifier: 01:E9:31:14:E1:77:B6:B5:95:18:73:B6:F5:5F:AA:83:27:9D:3D:A0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A655B39495A8F003BFBD39DC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 62943 IP address blocks: 2001:470:3c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:39:49:5a:8f:00:3b:fb:d3:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=9eeff737-e13d-4b0d-bae3-97329bd90d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:f2:08:5e:24:9e:b4:7f:c4:ed:e7:4e:3a: 26:72:e4:85:9e:7d:9e:75:15:98:7c:be:99:84:47: d9:61:1b:48:7a:a6:59:97:0f:1c:db:b7:94:79:0b: 47:38:60:c4:de:cd:1c:d8:96:81:02:1d:00:ef:b1: 87:ce:9c:67:82:0d:56:ba:e8:dc:07:aa:57:31:4e: ec:ff:e8:16:83:b1:08:12:24:b9:84:1c:d0:60:1f: 4e:09:a9:98:d5:aa:49:d7:93:6b:a5:7a:31:d2:d0: 9d:c3:93:15:91:e3:4e:b9:65:e0:67:ce:56:67:4a: 59:5d:fa:08:a2:8a:37:0a:e2:24:f7:4e:0d:b6:ee: ed:fc:86:19:6d:af:2b:8b:0f:3c:ed:ca:38:3e:49: 67:bc:b9:0b:4d:36:c4:b0:45:50:89:11:43:8e:37: 6b:7c:3d:bb:95:9c:55:c1:b1:55:2a:eb:58:3e:f8: 2b:66:80:ef:6d:fa:74:f1:f7:2f:0c:82:7d:00:33: d3:49:d2:82:c8:ca:4d:27:76:c3:dc:24:9c:7d:5e: 51:85:b3:95:46:2e:82:80:7a:ba:9d:aa:12:ef:02: 3b:63:db:1e:60:0d:e0:e1:6d:04:0e:2f:01:4f:cf: 98:8f:9d:c3:d1:c2:77:ff:29:5c:20:1f:2a:df:cb: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:31:14:E1:77:B6:B5:95:18:73:B6:F5:5F:AA:83:27:9D:3D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:38:75:fa:6f:6f:c5:ce:02:0e:6e:aa:6f:9a:49:ad:86:f1: 2a:52:45:d8:b7:ef:dd:64:27:44:60:2c:5d:31:c7:55:69:b9: d3:03:e6:c4:2b:6b:20:ec:a3:73:b2:fb:cc:d1:5d:36:9d:2e: 94:24:a0:9e:4e:6b:bc:0a:25:96:4d:d1:09:af:40:20:8e:d0: c3:3e:6e:1e:bc:85:18:2c:54:57:28:1e:01:df:54:08:7d:ea: 23:07:29:29:d9:41:76:dc:c3:5b:db:b9:05:7f:9b:ad:ed:6a: f3:75:28:b9:4b:5a:23:05:fe:b8:97:75:9b:a2:39:ac:20:89: af:43:18:3c:a6:61:26:b3:65:5c:b0:7e:ee:0d:f7:2e:7e:6f: cc:cf:51:7a:21:23:6b:2f:ea:99:54:a0:20:ce:c3:20:08:2f: 1d:fb:38:1c:dd:dd:20:a7:10:2d:ea:b9:c6:f7:a3:e6:7f:fd: d0:cc:0c:a4:82:3f:42:53:2b:8f:61:a4:2b:35:59:17:4e:ff: cb:15:51:04:62:fc:13:c2:03:ba:17:af:f0:01:2a:75:29:47: 42:2d:74:22:69:e9:1f:72:41:65:6f:2c:e2:bc:37:a2:61:2d: 9c:c0:45:56:ab:91:30:2e:7d:e0:27:b3:14:14:39:03:b2:93: 64:40:c0:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEplWzlJWo8AO/vTncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk OWVlZmY3MzctZTEzZC00YjBkLWJhZTMtOTczMjliZDkwZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKnyCF4knrR/xO3nTjomcuSFnn2edRWYfL6Z hEfZYRtIeqZZlw8c27eUeQtHOGDE3s0c2JaBAh0A77GHzpxngg1WuujcB6pXMU7s /+gWg7EIEiS5hBzQYB9OCamY1apJ15NrpXox0tCdw5MVkeNOuWXgZ85WZ0pZXfoI ooo3CuIk904Ntu7t/IYZba8riw887co4PklnvLkLTTbEsEVQiRFDjjdrfD27lZxV wbFVKutYPvgrZoDvbfp08fcvDIJ9ADPTSdKCyMpNJ3bD3CScfV5RhbOVRi6CgHq6 naoS7wI7Y9seYA3g4W0EDi8BT8+Yj53D0cJ3/ylcIB8q38uxmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHpMRThd7a1lRhztvVfqoMnnT2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE5NGQ3YzMtYTViNi0z ZTFmLTg0NWUtYjI0ZDFkMmM0NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAY4dfpvb8XOAg5uqm+aSa2G8SpSRdi3791kJ0RgLF0xx1VpudMD 5sQrayDso3Oy+8zRXTadLpQkoJ5Oa7wKJZZN0QmvQCCO0MM+bh68hRgsVFcoHgHf VAh96iMHKSnZQXbcw1vbuQV/m63tavN1KLlLWiMF/riXdZuiOawgia9DGDymYSaz ZVywfu4N9y5+b8zPUXohI2sv6plUoCDOwyAILx37OBzd3SCnEC3qucb3o+Z//dDM DKSCP0JTK49hpCs1WRdO/8sVUQRi/BPCA7oXr/ABKnUpR0ItdCJp6R9yQWVvLOK8 N6JhLZzARVarkTAufeAnsxQUOQOyk2RAwNE= -----END CERTIFICATE-----Generated at Thu Jul 31 05:16:27 2025 by rpki-client