$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c79f36-3f22-36ee-b236-32c776ca5102.roa File: 70c79f36-3f22-36ee-b236-32c776ca5102.roa (raw, json) Hash identifier: ZI4qmGi4NRA5cdDyn40kISMvCEUXYKQm9Sx9g5rQRDE= Subject key identifier: 57:6A:BA:39:1D:CE:E8:5A:74:FB:22:4E:1A:DE:6B:C2:55:0B:66:CB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AFC1C21250F9C68E525204C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c79f36-3f22-36ee-b236-32c776ca5102.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 47898 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:21:25:0f:9c:68:e5:25:20:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=063f7a0c-d570-49ef-8d7c-6aa4485b0748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:5e:b3:4e:c9:66:20:71:d0:f2:40:ff:27: 79:9d:49:8a:74:29:87:df:6a:c4:b1:67:36:d9:d6: b9:48:42:18:82:04:b6:dd:db:d4:66:23:b4:d8:82: ff:db:38:af:0c:8c:4c:5f:60:4c:5d:30:53:db:98: d9:e3:db:46:b4:72:27:f3:63:86:10:5c:92:54:92: b4:a4:6e:5d:51:67:14:c9:7e:90:e6:b3:ce:22:e4: ac:33:23:77:d3:3d:51:75:50:d2:26:71:89:73:aa: a7:e0:92:5e:dd:9d:dc:92:50:c5:a1:f7:8b:2f:4d: 65:7a:5c:69:e0:35:20:df:fc:4d:1d:db:a9:c7:87: a1:89:fd:ce:4e:70:3d:21:18:16:92:c0:e8:49:ca: 49:e3:e9:a7:e5:aa:f6:2b:27:0a:cd:71:81:d0:79: dc:d8:2b:1b:fc:b9:84:d1:e1:f5:f8:55:7a:7b:ea: b4:da:a1:f2:28:80:46:b4:04:eb:a4:5f:68:3b:1a: 2d:af:6f:cc:1b:16:da:85:e2:cd:bd:f7:dc:2e:fa: 99:10:67:79:c3:d9:3a:f5:44:c4:bd:16:51:a1:b3: 24:27:8a:19:1b:7c:00:c6:34:55:90:81:0c:2c:65: 86:f7:e5:31:d6:7c:0d:8c:38:f0:2f:25:12:66:ac: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:BA:39:1D:CE:E8:5A:74:FB:22:4E:1A:DE:6B:C2:55:0B:66:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c79f36-3f22-36ee-b236-32c776ca5102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:57:6c:cb:c2:84:7a:1d:0b:4f:73:12:2c:0c:7d:88:e3:89: fc:6b:12:92:33:49:e4:c8:70:d2:01:18:b4:d6:11:1d:b9:3e: a9:76:6c:10:96:75:19:5e:fa:06:17:80:7a:14:e3:35:53:02: d3:1f:c1:9d:5b:33:45:1b:26:96:b1:33:00:86:bf:06:5e:2e: c4:e1:35:88:2f:be:e1:65:25:19:7c:fc:3a:eb:a8:1c:e1:b0: 19:3d:5c:48:06:55:d9:2c:93:76:f3:cc:cd:26:e1:f6:3b:7d: ec:70:97:11:76:a8:7c:81:3f:88:92:36:5a:70:5c:29:ef:fe: 1e:25:29:cd:bb:6a:99:d2:c5:d6:d0:56:90:43:b8:f0:3a:7d: 67:48:41:e2:19:66:bf:39:3e:cb:59:81:91:09:93:db:d4:a2: 9d:03:6e:75:69:56:65:9b:0a:03:4d:65:bf:9d:65:a9:8f:24: 71:02:8f:3d:de:0b:58:7e:4f:32:e9:d9:f8:cc:45:23:cb:71: f8:6b:12:2a:d1:45:5e:a8:ec:c9:43:fa:49:88:13:d5:c5:05: 58:90:b6:33:25:30:74:b2:08:95:ea:46:f8:f2:16:6d:92:7e: 1d:22:0b:fc:70:1c:f5:cf:08:80:af:32:7c:c5:e7:f2:45:c5: 5b:91:f8:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HCElD5xo5SUgTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MDYzZjdhMGMtZDU3MC00OWVmLThkN2MtNmFhNDQ4NWIwNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ9es07JZiBx0PJA/yd5nUmKdCmH32rEsWc2 2da5SEIYggS23dvUZiO02IL/2zivDIxMX2BMXTBT25jZ49tGtHIn82OGEFySVJK0 pG5dUWcUyX6Q5rPOIuSsMyN30z1RdVDSJnGJc6qn4JJe3Z3cklDFofeLL01lelxp 4DUg3/xNHdupx4ehif3OTnA9IRgWksDoScpJ4+mn5ar2KycKzXGB0Hnc2Csb/LmE 0eH1+FV6e+q02qHyKIBGtATrpF9oOxotr2/MGxbaheLNvffcLvqZEGd5w9k69UTE vRZRobMkJ4oZG3wAxjRVkIEMLGWG9+Ux1nwNjDjwLyUSZqwOSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdqujkdzuhadPsiThrea8JVC2bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzBjNzlmMzYtM2YyMi0z NmVlLWIyMzYtMzJjNzc2Y2E1MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9XbMvChHodC09zEiwMfYjjifxrEpIzSeTIcNIBGLTWER25Pql2 bBCWdRle+gYXgHoU4zVTAtMfwZ1bM0UbJpaxMwCGvwZeLsThNYgvvuFlJRl8/Drr qBzhsBk9XEgGVdksk3bzzM0m4fY7fexwlxF2qHyBP4iSNlpwXCnv/h4lKc27apnS xdbQVpBDuPA6fWdIQeIZZr85PstZgZEJk9vUop0DbnVpVmWbCgNNZb+dZamPJHEC jz3eC1h+TzLp2fjMRSPLcfhrEirRRV6o7MlD+kmIE9XFBViQtjMlMHSyCJXqRvjy Fm2Sfh0iC/xwHPXPCICvMnzF5/JFxVuR+LU= -----END CERTIFICATE-----Generated at Fri Sep 19 06:08:01 2025 by rpki-client