$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa File: 1cc65f5b-a492-3ed0-b146-e29593a49d69.roa (raw, json) Hash identifier: 3LmYcdCeoteg+Lep1cqmk/oJU+8YUVaKUu0BVU0LI4M= Subject key identifier: 17:9D:03:00:2A:6E:9F:87:C9:74:EE:71:FF:96:1A:3E:1D:34:32:BF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD3A11DEFB8BBFF05B87B4600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 46491 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1d:ef:b8:bb:ff:05:b8:7b:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=61a42609-4acd-49a7-b464-3c97c28baefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:80:da:c7:63:b4:73:6e:96:4c:56:c2:5e: 65:fd:ea:e4:94:3c:5c:84:2e:e1:d8:2c:25:30:87: 07:93:8a:5a:d7:1b:a8:27:88:3a:63:22:66:32:3e: 28:bc:2f:14:0a:e2:e4:55:39:b6:52:59:b8:7a:2c: 7d:f5:3c:53:80:62:17:95:44:57:a5:0f:3a:20:23: 20:05:08:02:96:be:1f:43:f0:03:14:39:5b:7f:86: be:5f:05:46:d1:97:d9:9c:50:a7:50:67:f5:78:72: 9b:c1:c6:38:3c:4b:c5:7c:b5:44:e0:43:60:98:2d: 07:ad:2f:77:44:82:a5:e0:b8:3a:ea:6b:f4:e1:83: f9:f4:b2:0d:4a:73:a3:67:24:ed:16:d0:b2:16:01: e6:14:54:7b:bc:68:16:b2:73:2c:2a:20:92:47:71: a7:da:a9:f6:fd:50:af:f9:d6:89:11:8b:25:3e:64: ef:9f:8d:87:c2:04:93:6f:85:e1:ef:11:0c:83:b1: d9:0f:24:7a:77:37:34:b1:1d:ae:88:b7:33:29:b1: 6b:c2:45:19:67:bb:90:45:96:38:16:c5:d0:e2:50: 33:b6:da:88:ac:c9:db:6d:30:18:ba:1b:3d:d6:87: 95:4c:1a:da:f9:29:2b:6d:b4:86:fb:10:c6:bd:27: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:03:00:2A:6E:9F:87:C9:74:EE:71:FF:96:1A:3E:1D:34:32:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:31:c8:d0:ba:a7:5b:31:78:eb:0d:d5:b3:e9:72:fb:38:f9: 79:e7:15:e5:be:0a:40:06:44:23:ab:e9:84:6d:e4:44:76:c7: c8:c5:fc:f8:f9:50:5a:b6:59:69:5f:0f:9f:a3:24:33:d0:40: 23:fc:db:20:b8:d8:5e:59:7c:d4:ff:16:6b:4b:d9:75:f9:2f: 62:e7:35:91:3e:e6:56:96:0a:de:de:90:9f:53:c3:c5:fa:f3: b5:f6:4e:c2:ba:37:bd:bb:0e:3e:4c:52:b8:fa:a6:f0:3a:33: f2:8f:c4:cc:9c:6d:40:8d:6b:d0:be:0e:02:0c:d4:f0:f8:48: 45:02:2f:e9:f3:cd:a9:36:8e:64:10:05:45:df:26:c7:ee:5a: df:ae:34:1b:98:6f:5d:14:bb:78:09:5e:01:25:05:fd:05:cb: 80:1b:0b:ad:23:22:2e:3c:55:c2:cc:cb:f2:ba:ee:fc:97:1b: 22:de:f2:b6:8e:41:5e:a0:8a:1e:a7:47:1c:b6:72:73:75:5f: 84:3d:08:83:cf:81:8f:0b:b5:6f:7f:77:65:d1:d3:6d:94:ca: 64:d9:6d:b4:2a:b7:cb:9d:1b:d9:a1:31:2d:df:f6:8b:ac:91: 0e:31:c4:f2:2d:cf:01:36:5b:59:b8:e1:69:4d:05:ea:68:34: 2e:9b:a2:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToR3vuLv/Bbh7RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NjFhNDI2MDktNGFjZC00OWE3LWI0NjQtM2M5N2MyOGJhZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyymA2sdjtHNulkxWwl5l/erklDxchC7h2Cwl MIcHk4pa1xuoJ4g6YyJmMj4ovC8UCuLkVTm2Ulm4eix99TxTgGIXlURXpQ86ICMg BQgClr4fQ/ADFDlbf4a+XwVG0ZfZnFCnUGf1eHKbwcY4PEvFfLVE4ENgmC0HrS93 RIKl4Lg66mv04YP59LINSnOjZyTtFtCyFgHmFFR7vGgWsnMsKiCSR3Gn2qn2/VCv +daJEYslPmTvn42HwgSTb4Xh7xEMg7HZDyR6dzc0sR2uiLczKbFrwkUZZ7uQRZY4 FsXQ4lAzttqIrMnbbTAYuhs91oeVTBra+SkrbbSG+xDGvSd2IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBedAwAqbp+HyXTucf+WGj4dNDK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWNjNjVmNWItYTQ5Mi0z ZWQwLWIxNDYtZTI5NTkzYTQ5ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsxyNC6p1sxeOsN1bPpcvs4+XnnFeW+CkAGRCOr6YRt5ER2x8jF /Pj5UFq2WWlfD5+jJDPQQCP82yC42F5ZfNT/FmtL2XX5L2LnNZE+5laWCt7ekJ9T w8X687X2TsK6N727Dj5MUrj6pvA6M/KPxMycbUCNa9C+DgIM1PD4SEUCL+nzzak2 jmQQBUXfJsfuWt+uNBuYb10Uu3gJXgElBf0Fy4AbC60jIi48VcLMy/K67vyXGyLe 8raOQV6gih6nRxy2cnN1X4Q9CIPPgY8LtW9/d2XR022UymTZbbQqt8udG9mhMS3f 9ouskQ4xxPItzwE2W1m44WlNBepoNC6boiE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:57:10 2025 by rpki-client