$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa File: 3ad850bf-846e-34c7-9e00-d96da62c376f.roa (raw, json) Hash identifier: jDelIcQsoQycVTRvi/PHcxUlm8wiYAiV6vYDWIK2hUs= Subject key identifier: 18:96:13:97:2D:0A:08:22:39:D9:22:20:F4:C0:3B:F1:40:05:75:01 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F13DFCECBC6899C0DA4700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 198408 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3d:fc:ec:bc:68:99:c0:da:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=f1bd7315-4cfe-4354-85b0-f8c089d7467e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b0:7c:1a:f2:61:9c:5c:16:c0:e2:0c:c9:fd: 50:6b:25:3c:3d:0b:14:94:4c:f4:e1:32:ec:b6:7a: 10:a8:52:1e:88:63:ad:fa:42:e8:e8:e0:c6:1f:30: 93:a6:d2:59:b8:9a:90:c0:18:8f:6f:29:0f:c8:66: 1d:48:01:82:60:bd:d6:e8:02:b3:81:db:28:86:35: 12:a5:9a:de:00:6b:88:96:2f:67:e3:75:64:1a:53: 01:50:ad:fb:92:37:98:51:63:09:54:f8:a1:b6:ae: 53:14:20:46:4d:eb:8b:be:cb:ee:9d:91:3e:c6:36: b7:51:bf:cf:76:c6:44:39:85:22:65:0a:b8:eb:ee: 87:d0:d2:a5:e8:fb:d3:70:ee:40:1c:a6:dd:de:92: 86:e5:ae:b8:7b:2a:6f:9e:6b:82:55:86:8f:82:50: 25:c1:7a:d8:b6:48:18:5f:ca:e6:fb:36:6a:13:04: f8:ff:a4:0b:ff:80:c7:93:9b:ed:64:bd:95:d2:ba: 10:92:7a:aa:49:b8:5f:79:8a:85:54:88:78:ad:06: d7:c3:20:8f:da:a6:b6:46:72:0e:75:f8:ab:72:54: 50:1f:06:9b:5c:33:03:6a:bb:be:b9:93:1e:16:ea: cf:9b:73:d7:0c:ed:91:20:87:d2:b3:78:12:7c:48: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:13:97:2D:0A:08:22:39:D9:22:20:F4:C0:3B:F1:40:05:75:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ad850bf-846e-34c7-9e00-d96da62c376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:95:bb:2b:33:c7:3a:fa:b4:20:9d:55:13:39:2d:c0:b6:a2: 65:d8:4f:ab:c9:ae:43:cf:9d:3f:42:7d:8c:cf:a7:71:7c:29: 59:4d:03:f4:cd:6a:03:f9:30:e2:cf:ab:d9:ec:ec:bd:3c:41: 98:c8:45:1e:49:9d:bc:ae:a8:9d:42:c4:99:ec:f1:83:07:53: 8f:93:fb:36:5d:0c:5d:3c:39:c9:b1:b9:41:79:a0:58:7a:f0: bf:ec:2c:fe:cf:43:2e:d7:0b:97:e9:64:22:fc:e7:48:ae:84: 65:bc:4b:90:71:f1:12:ad:5a:5c:55:2c:c3:6e:3e:ba:f1:6e: e6:d6:df:62:9d:bc:3e:18:3a:81:9d:b9:29:52:a3:e8:e5:18: 19:0a:e9:38:b7:e7:fe:2f:b4:b1:58:97:20:b3:2b:f3:55:26: 3d:fb:d0:16:ec:09:6f:1b:a6:a1:6b:e2:d1:a4:e8:dc:25:aa: 61:94:7e:ba:fd:c6:f7:54:01:ef:76:54:82:ef:22:19:16:2b: cd:80:f8:d7:75:19:81:30:ce:54:79:17:82:dc:8f:b7:e7:0c: ab:64:e2:cd:3b:46:67:87:21:7c:b8:f9:30:8f:82:52:88:4c: ad:fc:4e:2b:8c:ac:f9:d0:ba:32:1a:fc:86:63:df:7f:ec:1a: ab:6c:c9:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8T387LxomcDaRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjFiZDczMTUtNGNmZS00MzU0LTg1YjAtZjhjMDg5ZDc0NjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibB8GvJhnFwWwOIMyf1QayU8PQsUlEz04TLs tnoQqFIeiGOt+kLo6ODGHzCTptJZuJqQwBiPbykPyGYdSAGCYL3W6AKzgdsohjUS pZreAGuIli9n43VkGlMBUK37kjeYUWMJVPihtq5TFCBGTeuLvsvunZE+xja3Ub/P dsZEOYUiZQq46+6H0NKl6PvTcO5AHKbd3pKG5a64eypvnmuCVYaPglAlwXrYtkgY X8rm+zZqEwT4/6QL/4DHk5vtZL2V0roQknqqSbhfeYqFVIh4rQbXwyCP2qa2RnIO dfirclRQHwabXDMDaru+uZMeFurPm3PXDO2RIIfSs3gSfEieowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBiWE5ctCggiOdkiIPTAO/FABXUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FkODUwYmYtODQ2ZS0z NGM3LTllMDAtZDk2ZGE2MmMzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK6Vuyszxzr6tCCdVRM5LcC2omXYT6vJrkPPnT9CfYzPp3F8KVlN A/TNagP5MOLPq9ns7L08QZjIRR5JnbyuqJ1CxJns8YMHU4+T+zZdDF08OcmxuUF5 oFh68L/sLP7PQy7XC5fpZCL850iuhGW8S5Bx8RKtWlxVLMNuPrrxbubW32KdvD4Y OoGduSlSo+jlGBkK6Ti35/4vtLFYlyCzK/NVJj370BbsCW8bpqFr4tGk6NwlqmGU frr9xvdUAe92VILvIhkWK82A+Nd1GYEwzlR5F4Lcj7fnDKtk4s07RmeHIXy4+TCP glKITK38TiuMrPnQujIa/IZj33/sGqtsyZM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:47 2025 by rpki-client