$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa File: 3aefd595-846f-396c-b594-07c14e248ae5.roa (raw, json) Hash identifier: n5YJuZ72NZPFcAXpB7AuuFwlt9hq7RkK1M/GfPFXCq8= Subject key identifier: 25:9B:51:89:1E:41:D8:E0:52:CA:8C:B9:13:A2:2E:42:B8:24:B8:66 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AE72BB5C93BCFCEF2E4BFDE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 30150 IP address blocks: 2001:470:423::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b5:c9:3b:cf:ce:f2:e4:bf:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=18564ba6-39cc-4aab-b9b0-248a6a6b1284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:b5:bf:95:fe:83:aa:0a:c0:60:d5:0e:07: 07:1b:bf:e1:f0:aa:f1:d7:33:53:e6:d4:57:af:74: f1:45:a9:01:1d:d5:04:26:fe:8f:a4:07:03:f3:20: ed:00:82:9a:45:52:44:3f:7c:05:c6:6a:63:50:97: 0b:40:9f:b6:85:43:e6:5c:f0:ed:33:1e:a1:86:ec: ee:af:06:9d:f0:ad:91:55:17:d5:55:63:00:03:b6: 10:c3:68:f2:b5:a7:c7:ab:e6:52:d9:28:1a:80:47: 0a:f0:31:0a:9f:9d:ad:89:f4:f8:61:ca:c6:95:67: 94:57:36:7c:e1:8c:b1:46:10:73:f7:30:19:f3:56: ce:57:93:5b:07:ff:03:bf:b8:ce:39:49:e1:02:a7: 53:b1:2d:05:50:52:79:55:be:a7:a9:c7:49:70:90: 0c:86:df:0b:73:64:c3:af:b6:5a:d6:59:09:e3:b4: a7:c7:9c:53:6f:12:47:18:7b:cb:68:58:66:8f:02: 7c:f5:a9:d4:17:f3:32:40:16:52:4c:ee:4d:14:aa: ef:22:d3:b8:0a:f9:60:63:f9:16:94:53:be:57:b2: 19:96:21:85:7d:92:4d:95:39:97:59:5a:9d:d2:54: 33:9b:8d:e0:23:86:73:da:89:4e:8e:5d:55:5e:af: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9B:51:89:1E:41:D8:E0:52:CA:8C:B9:13:A2:2E:42:B8:24:B8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:423::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9d:77:a2:cf:50:a3:69:e8:1f:a7:78:89:2c:86:ad:0c:43: cf:8c:4e:6a:05:ed:c6:bc:7d:04:58:1e:46:ec:f8:1f:a0:7d: 6a:4a:92:53:53:70:1f:0f:0d:b3:01:4a:e4:52:a1:76:21:2a: 52:1e:69:ed:1a:f1:13:bc:c0:e8:49:1b:4a:7c:a3:ff:3e:f0: 1b:19:7b:ed:2c:fd:c2:81:fc:c8:82:9a:e8:d0:0f:94:c8:24: 47:67:b2:a2:15:06:54:0f:58:77:d1:a9:42:42:c3:0c:bb:d6: 0f:c5:28:aa:5e:b1:cd:87:07:f8:29:a9:de:99:32:53:f4:f9: b9:ca:9c:38:2b:6e:6a:5e:48:41:07:c5:49:39:1b:7b:40:3c: 48:20:92:f9:f7:fc:02:ff:61:27:14:98:ba:aa:6e:25:4c:e6: f4:9d:06:0e:2e:0b:ba:20:a4:b6:ce:77:ac:2e:a7:6b:b7:be: 1d:fc:8f:13:d4:40:98:fa:96:1d:2b:bb:dc:03:8f:10:bf:a1: a4:75:51:b7:75:dc:77:a5:ff:71:39:5e:11:c9:c1:23:ff:5d: fd:c3:18:d0:53:29:81:f1:d4:36:dc:fa:5a:26:9b:ce:65:f3: 67:49:8a:66:88:a0:a9:6f:2d:de:a1:2c:83:80:f3:11:3e:4f: c6:60:e3:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErnK7XJO8/O8uS/3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk MTg1NjRiYTYtMzljYy00YWFiLWI5YjAtMjQ4YTZhNmIxMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbq1v5X+g6oKwGDVDgcHG7/h8Krx1zNT5tRX r3TxRakBHdUEJv6PpAcD8yDtAIKaRVJEP3wFxmpjUJcLQJ+2hUPmXPDtMx6hhuzu rwad8K2RVRfVVWMAA7YQw2jytafHq+ZS2SgagEcK8DEKn52tifT4YcrGlWeUVzZ8 4YyxRhBz9zAZ81bOV5NbB/8Dv7jOOUnhAqdTsS0FUFJ5Vb6nqcdJcJAMht8Lc2TD r7Za1lkJ47Snx5xTbxJHGHvLaFhmjwJ89anUF/MyQBZSTO5NFKrvItO4CvlgY/kW lFO+V7IZliGFfZJNlTmXWVqd0lQzm43gI4Zz2olOjl1VXq9tkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWbUYkeQdjgUsqMuROiLkK4JLhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FlZmQ1OTUtODQ2Zi0z OTZjLWI1OTQtMDdjMTRlMjQ4YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIydd6LPUKNp6B+neIkshq0MQ8+MTmoF7ca8fQRYHkbs+B+gfWpK klNTcB8PDbMBSuRSoXYhKlIeae0a8RO8wOhJG0p8o/8+8BsZe+0s/cKB/MiCmujQ D5TIJEdnsqIVBlQPWHfRqUJCwwy71g/FKKpesc2HB/gpqd6ZMlP0+bnKnDgrbmpe SEEHxUk5G3tAPEggkvn3/AL/YScUmLqqbiVM5vSdBg4uC7ogpLbOd6wup2u3vh38 jxPUQJj6lh0ru9wDjxC/oaR1Ubd13Hel/3E5XhHJwSP/Xf3DGNBTKYHx1Dbc+lom m85l82dJimaIoKlvLd6hLIOA8xE+T8Zg48M= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:23 2025 by rpki-client