$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa File: 3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa (raw, json) Hash identifier: yUndnUAEJt28bknoXQ5qHRqVVQNY+T9lk2Zr9AkLwlw= Subject key identifier: 34:CA:68:D2:E7:4E:FE:3B:50:7E:A5:2B:A3:DB:7F:C8:78:AA:BF:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AECC586B2C4C5406D948EE4D8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 23948 IP address blocks: 2001:470:337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:86:b2:c4:c5:40:6d:94:8e:e4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a2c6ebd9-bd55-415e-99a7-689a1d5b5c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:98:8f:8c:2b:7e:66:83:4b:2c:ba:74:92: 08:79:2e:fa:66:79:53:fb:a2:d0:26:73:50:e8:ca: 49:8a:2d:4b:14:f3:bd:1a:60:eb:04:cc:62:22:40: e0:fe:63:4e:ad:b4:41:54:ab:69:4f:38:c9:76:bf: 38:d0:2a:3d:5c:c0:61:58:22:4e:80:bd:96:4d:3e: 8e:e2:e2:bd:44:c3:ae:ad:c4:a0:4d:3a:4b:0c:fe: f3:1a:60:a0:7c:2d:d3:5d:19:81:64:c5:61:c8:c6: 61:94:73:54:3e:b4:f0:b8:1d:5c:a1:db:8d:43:b9: e5:8d:17:5c:0e:21:bb:d1:70:5d:26:16:cc:b3:0e: 3d:74:bb:25:9e:2a:81:ce:54:59:dc:5f:a6:89:6a: 47:eb:b3:e6:fa:93:ba:a1:7a:5e:e7:1c:44:6c:7c: 1c:3f:8d:2a:d3:c8:c0:d1:13:72:d2:51:9b:12:81: 61:82:29:43:a4:af:ab:da:4d:ee:94:f9:54:f3:65: 2f:2d:cc:08:35:74:6d:ed:b0:6c:0b:93:d6:c9:0f: de:88:b3:90:a2:61:ea:80:47:62:81:fb:7e:1d:88: 56:c9:a7:01:fc:72:e4:35:6a:32:04:f4:e1:62:23: c4:69:54:17:4a:ab:79:44:42:22:50:17:01:a7:01: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:68:D2:E7:4E:FE:3B:50:7E:A5:2B:A3:DB:7F:C8:78:AA:BF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:337::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:31:6e:5b:f7:e8:87:31:db:2c:8a:83:9c:36:7d:98:cb:89: 92:82:b1:a1:95:52:13:aa:48:27:11:38:c9:39:36:8c:46:41: 88:f2:d1:b5:ae:ed:21:68:4d:ea:ef:92:32:f9:ab:6a:32:bb: fe:2c:74:a3:49:dd:e4:23:09:b9:27:50:a0:95:77:b3:13:ff: be:b6:44:9c:27:bc:0b:e7:2a:9c:73:9a:ad:b5:fa:74:ab:03: 8e:b0:f9:a7:7f:49:39:57:a7:43:83:e0:7d:c0:40:40:7b:ad: ee:5c:95:cf:ce:23:6c:16:d4:91:29:45:ac:ed:35:ad:62:28: bf:79:8d:1c:93:be:ba:fb:1c:df:4a:c3:49:6e:dc:85:c1:b4: ab:52:98:b1:66:21:d1:e8:46:d3:b6:5c:f8:a9:ac:8a:43:2f: 12:50:f5:6f:f7:78:44:2b:33:43:af:75:3c:2d:ce:f5:f3:a6: b2:d6:db:60:a1:fe:a9:6a:d7:00:57:d8:87:7c:88:0b:29:f1: 04:19:00:3c:d1:3c:f9:71:61:f9:16:ed:14:3b:b0:ea:6a:10: 8d:4e:6b:86:54:bd:49:2e:05:24:74:ee:98:75:9c:72:bb:53: c4:66:82:c3:4d:79:b2:68:a4:03:9d:fd:0a:e1:a2:d9:c9:9a: b2:98:38:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErsxYayxMVAbZSO5NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTJjNmViZDktYmQ1NS00MTVlLTk5YTctNjg5YTFkNWI1YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOiYj4wrfmaDSyy6dJIIeS76ZnlT+6LQJnNQ 6MpJii1LFPO9GmDrBMxiIkDg/mNOrbRBVKtpTzjJdr840Co9XMBhWCJOgL2WTT6O 4uK9RMOurcSgTTpLDP7zGmCgfC3TXRmBZMVhyMZhlHNUPrTwuB1coduNQ7nljRdc DiG70XBdJhbMsw49dLslniqBzlRZ3F+miWpH67Pm+pO6oXpe5xxEbHwcP40q08jA 0RNy0lGbEoFhgilDpK+r2k3ulPlU82UvLcwINXRt7bBsC5PWyQ/eiLOQomHqgEdi gft+HYhWyacB/HLkNWoyBPThYiPEaVQXSqt5REIiUBcBpwEZowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTKaNLnTv47UH6lK6Pbf8h4qr96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2IwMjBmNWYtOTNlYS0z ZDNiLTljYzktMzY5Nzk2NWUzMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKkxblv36Icx2yyKg5w2fZjLiZKCsaGVUhOqSCcROMk5NoxGQYjy 0bWu7SFoTervkjL5q2oyu/4sdKNJ3eQjCbknUKCVd7MT/762RJwnvAvnKpxzmq21 +nSrA46w+ad/STlXp0OD4H3AQEB7re5clc/OI2wW1JEpRaztNa1iKL95jRyTvrr7 HN9Kw0lu3IXBtKtSmLFmIdHoRtO2XPiprIpDLxJQ9W/3eEQrM0OvdTwtzvXzprLW 22Ch/qlq1wBX2Id8iAsp8QQZADzRPPlxYfkW7RQ7sOpqEI1Oa4ZUvUkuBSR07ph1 nHK7U8RmgsNNebJopAOd/QrhotnJmrKYOEw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:24 2025 by rpki-client