$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa File: d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa (raw, json) Hash identifier: D5juvcnMONEuRw3LV4CS2lYVJvTbYacQV8yHgANmC/w= Subject key identifier: 5C:D0:42:EB:BF:19:66:20:31:76:EF:57:68:E2:2A:BF:4D:58:91:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC0164C6045409E50B1C7E840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 399788 IP address blocks: 2001:470:37a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4c:60:45:40:9e:50:b1:c7:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=dd629f63-4256-4145-934a-15d3fb65c153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:18:cf:db:82:93:11:09:4d:dd:af:08:9a:c5: a9:b0:45:6d:3e:13:53:88:2c:37:f9:76:c6:06:21: 86:dc:fa:67:5e:fb:13:28:c9:89:67:ad:73:22:17: 8c:42:ad:fb:47:e6:c8:c4:51:3c:3c:17:d9:0a:48: 15:3e:a4:0a:fb:e6:ac:ca:ae:26:f6:10:3d:aa:d5: 74:40:03:d4:e8:30:14:d8:25:8d:75:fc:af:d7:4a: 81:e6:1d:97:ff:fd:6c:85:ff:53:d0:24:24:c2:5c: f1:bd:95:ea:c4:fb:ac:f2:7d:8b:b4:f3:1d:85:cf: 18:65:3c:1c:98:c2:7b:c5:28:57:e5:7d:ae:25:94: 3f:25:f4:5c:9a:3d:b6:d8:33:68:67:c7:43:87:fd: 5f:5d:47:a2:18:3f:be:a3:c3:a1:74:24:40:70:b6: 13:dd:30:68:4a:af:7b:6a:03:b9:e9:58:4e:82:0b: 21:e4:28:98:11:ac:3d:ac:be:09:8a:04:5d:03:ba: 18:a7:8a:13:73:88:7c:8c:7f:55:20:f3:73:d7:25: 01:74:97:eb:d9:4c:c0:6d:9d:38:99:0b:4a:91:c0: 3f:3b:95:3a:8d:26:81:e3:1c:2c:25:f7:3d:e2:54: 0e:e9:b9:0c:5c:07:4f:f5:5d:bb:a8:22:10:0b:ec: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:42:EB:BF:19:66:20:31:76:EF:57:68:E2:2A:BF:4D:58:91:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:37a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:61:54:24:26:e4:f8:d2:6d:a1:dd:06:fb:09:43:b5:af:3c: 6d:2e:94:b1:cf:fc:dd:de:bb:8f:8f:78:8f:c5:1e:69:73:f7: ea:d3:f2:66:e3:61:d5:2a:86:e9:f7:a7:37:35:4e:db:ab:16: 43:8b:4b:67:ed:70:14:db:d8:82:a6:13:32:8c:64:1d:78:8f: 53:0c:ce:46:14:f0:8e:84:00:6c:db:e1:ee:38:7c:74:97:20: 83:34:c3:13:2e:fa:81:8a:54:91:cb:90:3f:53:19:b0:09:18: ea:07:90:98:3e:cf:58:6d:82:95:6e:e2:26:66:c7:fb:20:d3: e2:c2:10:c4:0f:b0:bf:17:a4:20:b2:69:67:48:95:ce:c3:97: 1d:01:55:ce:fe:0e:0e:ef:b9:dc:1e:6d:40:cd:54:d2:f3:21: 69:0e:05:3f:6c:16:d0:6c:35:54:f7:0a:7a:4f:c6:6b:38:65: ed:cf:24:61:b4:fe:c3:44:75:a3:ad:3f:6d:5e:eb:a2:07:22: 7b:9b:16:b4:b5:02:bf:bc:ab:ba:5e:19:c2:01:ef:88:79:b7: df:31:12:dd:90:1d:ec:85:10:71:fc:2f:d8:ec:b1:73:75:c2: 07:a2:c1:80:44:ec:77:ab:af:00:e2:d1:86:49:7c:31:68:a3: cf:2c:7b:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFkxgRUCeULHH6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZGQ2MjlmNjMtNDI1Ni00MTQ1LTkzNGEtMTVkM2ZiNjVjMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xjP24KTEQlN3a8ImsWpsEVtPhNTiCw3+XbG BiGG3PpnXvsTKMmJZ61zIheMQq37R+bIxFE8PBfZCkgVPqQK++asyq4m9hA9qtV0 QAPU6DAU2CWNdfyv10qB5h2X//1shf9T0CQkwlzxvZXqxPus8n2LtPMdhc8YZTwc mMJ7xShX5X2uJZQ/JfRcmj222DNoZ8dDh/1fXUeiGD++o8OhdCRAcLYT3TBoSq97 agO56VhOggsh5CiYEaw9rL4JigRdA7oYp4oTc4h8jH9VIPNz1yUBdJfr2UzAbZ04 mQtKkcA/O5U6jSaB4xwsJfc94lQO6bkMXAdP9V27qCIQC+zAKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFzQQuu/GWYgMXbvV2jiKr9NWJGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDVjZTJiY2QtNTI0OS0z YzEyLWEzMDItYzgxY2NlOTUyYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJhVCQm5PjSbaHdBvsJQ7WvPG0ulLHP/N3eu4+PeI/FHmlz9+rT 8mbjYdUqhun3pzc1TturFkOLS2ftcBTb2IKmEzKMZB14j1MMzkYU8I6EAGzb4e44 fHSXIIM0wxMu+oGKVJHLkD9TGbAJGOoHkJg+z1htgpVu4iZmx/sg0+LCEMQPsL8X pCCyaWdIlc7Dlx0BVc7+Dg7vudwebUDNVNLzIWkOBT9sFtBsNVT3CnpPxms4Ze3P JGG0/sNEdaOtP21e66IHInubFrS1Ar+8q7peGcIB74h5t98xEt2QHeyFEHH8L9js sXN1wgeiwYBE7HerrwDi0YZJfDFoo88se3Q= -----END CERTIFICATE-----Generated at Thu Aug 21 06:08:36 2025 by rpki-client