$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03ce4487-6c01-3be5-b894-732fdd5f2735.roa File: 03ce4487-6c01-3be5-b894-732fdd5f2735.roa (raw, json) Hash identifier: fah/dE6zYVEnNyNI42sCZK5INtGrMe1W+yDYwCShfjY= Subject key identifier: 50:5B:E1:30:B6:C6:C9:B5:0C:9E:07:18:D1:41:14:12:B1:57:6F:A7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD50672BF896E32599D7F3480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03ce4487-6c01-3be5-b894-732fdd5f2735.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 398491 IP address blocks: 2001:470:46b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:72:bf:89:6e:32:59:9d:7f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=4f32c4cf-23d3-4927-8640-529648f7eccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:c2:40:82:2e:03:32:36:6c:8a:2f:39:8b: 62:cd:f5:32:55:3f:ac:bc:93:3b:26:45:10:07:03: 3c:41:2a:fc:2f:bb:57:68:02:0c:62:73:e1:36:4f: e7:67:45:aa:f8:ae:8d:5e:62:d2:1b:29:e7:15:20: 35:2e:0f:0b:f3:a1:ad:42:79:e2:0a:e8:03:9c:de: 70:eb:ef:30:ec:ca:56:32:91:f3:74:15:fc:e2:cc: c0:60:79:0b:6d:03:31:7f:4e:7c:7a:ad:95:3a:f4: 02:06:b9:0f:40:77:b3:b5:22:a5:3b:77:23:c3:96: 52:e9:d5:34:8c:37:73:a5:b7:86:a2:62:13:04:98: df:09:cb:ab:97:b6:62:40:b0:c8:94:7f:5f:b8:94: 92:6a:f2:ad:c6:42:f8:fd:1d:3f:67:33:eb:fe:d8: 8a:0d:80:41:4d:c1:a8:c3:e2:ef:6f:16:c1:bc:b7: 8e:c4:74:88:3d:e9:7d:ae:a4:f0:26:c5:99:8a:54: a4:c8:fe:ff:f4:56:a0:5b:13:4c:88:61:03:19:49: 59:f8:6e:db:61:b3:26:de:bc:99:b9:05:9d:38:6e: c9:f9:c6:15:07:be:66:32:c8:94:e2:ba:9f:6f:89: cb:25:63:1d:90:20:78:6d:5b:89:16:6a:3f:7e:c9: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:E1:30:B6:C6:C9:B5:0C:9E:07:18:D1:41:14:12:B1:57:6F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03ce4487-6c01-3be5-b894-732fdd5f2735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:46b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6d:8e:d5:b9:10:19:48:df:cb:f2:75:9a:26:d8:04:0a:4a: 6e:ed:6c:ae:ee:6f:43:0e:92:bb:d0:15:72:e9:c0:39:e4:bb: a9:88:b7:00:d1:28:e6:ce:f0:eb:c8:ef:55:d3:1b:81:ab:a9: a1:9e:8c:8f:eb:f1:fd:e2:2a:a2:8f:18:a1:83:27:04:a5:68: 82:d5:c8:9d:69:a9:7f:4e:65:f3:8f:73:06:6d:02:fc:e2:e7: 34:83:b1:fa:1f:3e:0f:75:7b:30:b4:f8:89:c2:75:2c:7c:78: 80:f6:ab:25:39:45:fe:fa:e9:07:7c:19:01:2c:7d:27:38:4b: 99:c6:31:76:ee:c9:c7:58:b5:e6:bb:09:26:65:17:57:37:4c: bc:55:78:c3:9b:2a:7d:26:5c:ec:1f:98:97:58:4f:67:0c:f6: 60:cf:0d:d8:67:f0:0e:b0:5c:ad:96:16:93:15:db:2c:d0:4c: 61:73:2a:02:77:d9:87:25:25:49:03:bb:16:25:d0:fc:9a:3c: a9:8a:09:91:cf:37:10:1f:57:cb:cf:cc:bc:14:ec:4e:12:d1: 2b:48:fa:b2:37:0a:c4:a9:01:3c:1a:08:51:f4:2f:d9:4d:27: f1:1b:8e:66:1e:cd:ba:34:2c:e2:30:27:c9:8c:8e:9a:2a:50: 48:b4:fb:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErVBnK/iW4yWZ1/NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk NGYzMmM0Y2YtMjNkMy00OTI3LTg2NDAtNTI5NjQ4ZjdlY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs87CQIIuAzI2bIovOYtizfUyVT+svJM7JkUQ BwM8QSr8L7tXaAIMYnPhNk/nZ0Wq+K6NXmLSGynnFSA1Lg8L86GtQnniCugDnN5w 6+8w7MpWMpHzdBX84szAYHkLbQMxf058eq2VOvQCBrkPQHeztSKlO3cjw5ZS6dU0 jDdzpbeGomITBJjfCcurl7ZiQLDIlH9fuJSSavKtxkL4/R0/ZzPr/tiKDYBBTcGo w+LvbxbBvLeOxHSIPel9rqTwJsWZilSkyP7/9FagWxNMiGEDGUlZ+G7bYbMm3ryZ uQWdOG7J+cYVB75mMsiU4rqfb4nLJWMdkCB4bVuJFmo/fslsLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFBb4TC2xsm1DJ4HGNFBFBKxV2+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDNjZTQ0ODctNmMwMS0z YmU1LWI4OTQtNzMyZmRkNWYyNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhtjtW5EBlI38vydZom2AQKSm7tbK7ub0MOkrvQFXLpwDnku6mI twDRKObO8OvI71XTG4GrqaGejI/r8f3iKqKPGKGDJwSlaILVyJ1pqX9OZfOPcwZt Avzi5zSDsfofPg91ezC0+InCdSx8eID2qyU5Rf766Qd8GQEsfSc4S5nGMXbuycdY tea7CSZlF1c3TLxVeMObKn0mXOwfmJdYT2cM9mDPDdhn8A6wXK2WFpMV2yzQTGFz KgJ32YclJUkDuxYl0PyaPKmKCZHPNxAfV8vPzLwU7E4S0StI+rI3CsSpATwaCFH0 L9lNJ/EbjmYezbo0LOIwJ8mMjpoqUEi0+xE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:04 2025 by rpki-client