$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dc53eb8-4c92-3239-b87b-7f00240f1a1a.roa File: 1dc53eb8-4c92-3239-b87b-7f00240f1a1a.roa (raw, json) Hash identifier: 47KVPZrIPHUx+E/F7ajubbwe+8j/BQRyAbYZusYyomk= Subject key identifier: E7:C0:D8:2B:0F:0C:CE:CF:D3:3A:F2:1E:59:AF:C3:91:A8:43:FF:F2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F1522B1EBCC27AEFADF390 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dc53eb8-4c92-3239-b87b-7f00240f1a1a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 24893 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:52:2b:1e:bc:c2:7a:ef:ad:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=31a7c946-aefd-4c3c-9d6b-3c2b60168549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:96:08:4f:ef:92:9f:5a:63:f5:f9:ff:27: 09:22:d9:aa:1a:97:39:ec:61:f7:fb:29:5a:22:69: c4:53:f1:c7:71:f5:96:21:96:71:e5:a8:f9:a9:10: bd:20:74:8d:b8:de:28:17:c6:57:bf:2d:09:58:fb: d2:5b:77:28:30:87:c9:03:ef:ca:e1:00:ad:cb:38: e1:66:58:e0:48:77:de:be:0c:16:67:a3:4a:39:1b: 03:7a:f4:4e:ff:03:b5:d9:fb:97:c4:52:d7:d1:03: 86:b6:de:42:fd:3b:95:1f:da:f5:6a:7e:fc:f5:b0: 7a:f1:ff:80:fa:80:92:0e:30:c2:e2:65:28:ed:00: 02:91:f1:0d:5f:15:ad:fb:78:dc:6f:96:01:9a:f4: da:cf:1e:17:62:cb:56:01:55:51:27:cf:e4:09:81: b4:0f:7b:65:e6:03:4f:cb:a2:f3:27:8e:df:58:f5: 9f:cd:46:be:8b:ae:4b:70:b9:9c:4b:b8:86:f8:04: 82:37:71:f6:df:18:02:14:49:28:4d:fc:25:54:96: b7:3a:d9:23:27:d6:db:00:57:fc:dd:09:35:68:b7: 46:9a:da:54:1c:17:09:6f:3e:a6:3f:78:bd:86:88: 0c:af:d3:49:c1:b6:de:9e:37:03:b9:b6:40:01:7d: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C0:D8:2B:0F:0C:CE:CF:D3:3A:F2:1E:59:AF:C3:91:A8:43:FF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1dc53eb8-4c92-3239-b87b-7f00240f1a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e0:70:74:02:d7:c0:32:4f:51:55:b9:bd:54:bc:fe:06:d1: 40:40:b3:23:62:87:80:25:12:8e:30:cb:0f:99:2f:c4:a1:cb: e0:bc:4f:42:7d:f8:80:0b:4c:8a:5f:4a:08:60:ff:b7:8a:e4: ef:3b:00:b8:87:ba:0d:b5:0f:02:dc:cc:47:34:75:18:e5:33: b8:7c:ad:f8:4b:ac:39:6d:cf:46:c3:77:e7:73:1a:a4:ce:b6: bb:6b:51:07:14:f1:78:a1:23:11:98:56:88:f0:d1:42:55:47: 12:7f:21:cc:9b:27:63:df:18:d7:21:cf:89:aa:9d:07:06:f6: e2:7b:e3:ab:29:13:85:06:13:03:6b:97:ad:a3:00:19:ae:16: 12:6b:7c:aa:7b:82:2a:34:61:88:c5:8b:37:fd:52:29:c2:04: 36:1b:da:36:93:da:bf:36:c5:47:c2:09:38:db:80:8c:ce:fb: 3b:07:6d:43:7e:c2:3c:9e:30:c7:c0:66:22:2e:79:76:c1:ca: c3:3d:0e:8e:19:80:9e:55:d3:40:8a:a0:a0:b9:05:d6:18:6b: 26:74:ea:81:c6:14:ea:57:f2:42:98:2a:be:31:72:eb:ae:d5: 9c:34:bc:8d:5f:04:74:51:97:08:29:d0:60:0a:87:2c:32:48: c9:28:81:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VIrHrzCeu+t85AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzFhN2M5NDYtYWVmZC00YzNjLTlkNmItM2MyYjYwMTY4NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eeWCE/vkp9aY/X5/ycJItmqGpc57GH3+yla ImnEU/HHcfWWIZZx5aj5qRC9IHSNuN4oF8ZXvy0JWPvSW3coMIfJA+/K4QCtyzjh ZljgSHfevgwWZ6NKORsDevRO/wO12fuXxFLX0QOGtt5C/TuVH9r1an789bB68f+A +oCSDjDC4mUo7QACkfENXxWt+3jcb5YBmvTazx4XYstWAVVRJ8/kCYG0D3tl5gNP y6LzJ47fWPWfzUa+i65LcLmcS7iG+ASCN3H23xgCFEkoTfwlVJa3OtkjJ9bbAFf8 3Qk1aLdGmtpUHBcJbz6mP3i9hogMr9NJwbbenjcDubZAAX06BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfA2CsPDM7P0zryHlmvw5GoQ//yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWRjNTNlYjgtNGM5Mi0z MjM5LWI4N2ItN2YwMDI0MGYxYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbgcHQC18AyT1FVub1UvP4G0UBAsyNih4AlEo4wyw+ZL8Shy+C8 T0J9+IALTIpfSghg/7eK5O87ALiHug21DwLczEc0dRjlM7h8rfhLrDltz0bDd+dz GqTOtrtrUQcU8XihIxGYVojw0UJVRxJ/IcybJ2PfGNchz4mqnQcG9uJ746spE4UG EwNrl62jABmuFhJrfKp7gio0YYjFizf9UinCBDYb2jaT2r82xUfCCTjbgIzO+zsH bUN+wjyeMMfAZiIueXbBysM9Do4ZgJ5V00CKoKC5BdYYayZ06oHGFOpX8kKYKr4x cuuu1Zw0vI1fBHRRlwgp0GAKhywySMkogZY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:42 2025 by rpki-client