$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa File: 0820080f-d08d-3506-90a6-37dd73f83ddb.roa (raw, json) Hash identifier: jBqElbQsa7FY0EiRpxe25ioNAKygY4RHJFJ8l7+KyBU= Subject key identifier: 7A:64:D3:B6:97:BC:84:5E:D6:C0:AA:7C:70:9C:4C:35:CD:65:CC:EE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC2E114B82A25E85031D9E1C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 55201 IP address blocks: 2001:470:38a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:14:b8:2a:25:e8:50:31:d9:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=41a74698-e6a0-4c8b-ab9e-ca02802569a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:e2:b9:de:62:e9:fa:39:b8:1d:b7:0a:a2: c6:3c:73:f8:de:dc:92:23:42:55:33:a8:32:4b:dc: 3d:79:75:d2:c0:04:b3:68:1a:f8:22:8f:c8:78:fc: 27:d4:76:8a:9f:f8:65:d5:04:40:d2:f2:fc:e7:96: 6e:fd:6c:eb:2f:df:0f:72:3d:f8:a9:cf:24:d0:50: 31:47:4d:ce:97:c1:33:3f:13:84:4d:b6:ae:ba:8b: c0:18:b7:50:2f:2a:b0:69:b4:81:f8:31:d2:3e:11: e7:79:4d:5e:7c:bc:6f:b0:5d:3a:4e:99:d9:96:5c: c5:2e:af:37:d4:87:52:c1:6c:6d:ef:bb:3c:8d:56: b0:74:ae:7d:47:d1:0f:cb:b6:64:27:81:06:02:c4: d1:8a:64:16:2c:7c:21:5a:4f:8d:f4:a4:9c:96:3a: 59:8f:0c:d4:82:98:91:40:53:fd:d3:87:76:98:59: fb:b0:23:62:46:74:8e:4a:5e:30:c9:c3:00:33:90: 99:1e:23:51:68:89:1c:6b:b5:64:5f:79:cb:d4:be: 6a:8e:3f:fe:ed:dd:6a:70:bb:dc:99:7f:50:02:c5: dd:cf:04:e3:98:fb:d8:f3:e7:2d:b9:5b:12:1c:11: 5d:8c:80:cf:21:07:ba:e1:ca:22:c8:ae:63:1f:6b: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:64:D3:B6:97:BC:84:5E:D6:C0:AA:7C:70:9C:4C:35:CD:65:CC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:56:39:41:6d:86:d2:36:f4:32:98:71:16:35:bf:c4:27:b6: 27:33:91:19:2c:c0:18:cf:e3:3c:5e:c5:97:36:2e:3f:f1:44: 03:fe:fe:8c:96:0c:96:32:8f:11:34:28:98:e2:23:ba:54:71: 8b:7c:58:e2:55:03:56:ea:35:e9:58:9e:d5:c7:fb:7e:45:49: fd:32:6e:38:62:11:5d:c6:65:5b:13:bc:be:88:22:43:f6:46: e3:ba:d0:53:34:7f:c7:c6:19:21:02:eb:cb:d9:c9:bd:ea:7b: fd:a3:c1:a8:7d:cc:4a:3d:07:cd:5d:38:19:02:42:a0:12:2e: 12:64:a8:58:63:db:b2:8f:0f:9c:ef:59:da:a1:7f:14:df:5e: 80:80:e2:69:ed:de:63:ba:02:d3:90:12:00:35:e1:81:b5:f1: d9:00:c7:9f:60:3d:f9:62:b4:58:c3:d2:17:bd:9e:9c:67:f1: 86:4f:56:81:1e:c3:87:d2:82:26:22:fa:04:fc:e0:44:45:13: 7f:80:24:10:f4:70:36:04:d8:e4:59:4f:dc:57:35:79:da:53: 67:9f:bc:88:a7:5d:db:1d:1b:2f:0c:79:d9:cf:76:b9:ce:ec: 8b:b7:5e:9e:19:0f:d7:ea:d4:69:1e:b3:31:77:9b:29:15:16: a7:67:3d:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4RS4KiXoUDHZ4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDFhNzQ2OTgtZTZhMC00YzhiLWFiOWUtY2EwMjgwMjU2OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDfiud5i6fo5uB23CqLGPHP43tySI0JVM6gy S9w9eXXSwASzaBr4Io/IePwn1HaKn/hl1QRA0vL855Zu/WzrL98Pcj34qc8k0FAx R03Ol8EzPxOETbauuovAGLdQLyqwabSB+DHSPhHneU1efLxvsF06TpnZllzFLq83 1IdSwWxt77s8jVawdK59R9EPy7ZkJ4EGAsTRimQWLHwhWk+N9KScljpZjwzUgpiR QFP904d2mFn7sCNiRnSOSl4wycMAM5CZHiNRaIkca7VkX3nL1L5qjj/+7d1qcLvc mX9QAsXdzwTjmPvY8+ctuVsSHBFdjIDPIQe64coiyK5jH2vkpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpk07aXvIRe1sCqfHCcTDXNZczuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDgyMDA4MGYtZDA4ZC0z NTA2LTkwYTYtMzdkZDczZjgzZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxWOUFthtI29DKYcRY1v8QnticzkRkswBjP4zxexZc2Lj/xRAP+ /oyWDJYyjxE0KJjiI7pUcYt8WOJVA1bqNelYntXH+35FSf0ybjhiEV3GZVsTvL6I IkP2RuO60FM0f8fGGSEC68vZyb3qe/2jwah9zEo9B81dOBkCQqASLhJkqFhj27KP D5zvWdqhfxTfXoCA4mnt3mO6AtOQEgA14YG18dkAx59gPflitFjD0he9npxn8YZP VoEew4fSgiYi+gT84ERFE3+AJBD0cDYE2ORZT9xXNXnaU2efvIinXdsdGy8MednP drnO7Iu3Xp4ZD9fq1GkeszF3mykVFqdnPXI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:09:34 2025 by rpki-client