$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa File: 41d62e53-5fe6-3cb2-a70a-a192906bd694.roa (raw, json) Hash identifier: oRAEk1JNz/TE4becf4TinlomXeLfhU/NCSJqFPM2FSo= Subject key identifier: C3:B8:FF:AA:6B:10:DF:68:3C:6E:78:B9:77:8D:2C:D9:AE:3F:98:E1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD93673868B569EFEC9BA7C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 32397 IP address blocks: 2001:470:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:73:86:8b:56:9e:fe:c9:ba:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=ca2ac54f-c6af-4633-81a3-99a004c965b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:40:a4:6f:9c:c4:b3:90:ec:eb:95:34:46:12: 53:21:42:35:29:dd:d7:5a:fe:ae:a0:d4:2d:16:16: dd:c8:f0:d1:ad:38:0d:ba:af:11:75:bd:dc:96:5a: 53:6a:b2:8c:87:f1:c0:82:7e:72:2f:97:eb:7a:ef: e5:bf:7c:70:07:11:98:af:1e:64:b4:33:53:0c:1d: ef:d1:d8:00:03:c5:f7:1a:4b:8b:00:55:af:11:e6: 88:2d:7b:34:4d:a3:2e:7d:80:ed:4e:04:15:40:4a: 49:25:fa:5f:6d:20:ea:10:34:28:f7:16:12:5a:0d: d2:ee:1f:6e:b7:f7:28:ac:ea:29:3c:fa:a7:dc:27: 3a:39:14:73:42:62:a6:2c:2f:17:0e:d1:e4:b8:8e: b3:ff:7b:6f:a0:a5:73:27:1b:d3:44:cc:c8:d1:fa: 38:71:a3:a5:16:44:35:6e:ff:ee:94:d7:0a:3d:04: db:8a:7f:e9:3d:41:94:29:29:28:d7:a2:48:42:43: 3b:1f:14:d4:27:76:bb:8a:6a:3b:83:af:72:f5:0b: 19:68:94:20:8a:1b:b4:95:cd:d0:bc:df:a4:f7:df: 3a:9e:5c:b0:89:66:b2:e8:be:2f:d1:56:c9:47:6a: cf:e9:e7:87:07:b8:ee:90:3b:29:81:b4:39:03:13: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:FF:AA:6B:10:DF:68:3C:6E:78:B9:77:8D:2C:D9:AE:3F:98:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41d62e53-5fe6-3cb2-a70a-a192906bd694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:397::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:84:d3:d4:c0:3d:b9:7b:52:01:2d:7b:4c:06:5a:d0:60:58: 80:8f:2c:b0:65:8a:fa:01:55:30:8c:c0:89:00:09:b1:2b:9f: 78:2f:5c:14:cb:e8:c8:16:b6:5d:fb:00:71:fe:36:5b:68:d8: 8f:25:78:b4:a1:d3:9f:72:e8:2c:59:be:b1:47:22:6a:83:fd: 89:c9:6f:a3:e7:d2:ba:03:41:95:4e:79:ab:a9:e5:a1:a5:77: f4:17:90:0c:89:02:d4:31:36:4e:40:a9:72:6c:ca:a2:0e:52: 74:f7:d8:71:04:5a:18:05:0a:88:5b:5b:99:bf:66:3a:d6:05: 41:5c:34:9b:9c:d0:5d:2b:64:a6:8f:02:4c:b3:3b:ff:4e:81: ed:dd:96:c7:85:9a:18:37:de:a0:c8:e9:d8:02:ff:43:f9:68: 19:ca:89:96:9f:ae:39:d8:dd:81:22:a0:18:3a:1d:3a:52:49: d0:f7:5c:59:d0:b7:27:a4:fd:dc:af:64:87:63:63:6a:9d:8d: cd:cf:b1:e7:91:49:07:53:3f:86:5d:9a:ea:a1:13:3b:d4:64: a6:18:fd:68:8c:17:94:e0:88:34:9b:5e:5a:3e:13:6d:75:39: 8c:3d:44:cd:9d:4b:b9:4b:85:da:2d:8c:61:c0:75:4c:f8:44: 26:eb:f4:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNnOGi1ae/sm6fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2EyYWM1NGYtYzZhZi00NjMzLTgxYTMtOTlhMDA0Yzk2NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkCkb5zEs5Ds65U0RhJTIUI1Kd3XWv6uoNQt FhbdyPDRrTgNuq8Rdb3cllpTarKMh/HAgn5yL5freu/lv3xwBxGYrx5ktDNTDB3v 0dgAA8X3GkuLAFWvEeaILXs0TaMufYDtTgQVQEpJJfpfbSDqEDQo9xYSWg3S7h9u t/corOopPPqn3Cc6ORRzQmKmLC8XDtHkuI6z/3tvoKVzJxvTRMzI0fo4caOlFkQ1 bv/ulNcKPQTbin/pPUGUKSko16JIQkM7HxTUJ3a7imo7g69y9QsZaJQgihu0lc3Q vN+k9986nlywiWay6L4v0VbJR2rP6eeHB7jukDspgbQ5AxOGbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMO4/6prEN9oPG54uXeNLNmuP5jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDFkNjJlNTMtNWZlNi0z Y2IyLWE3MGEtYTE5MjkwNmJkNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2E09TAPbl7UgEte0wGWtBgWICPLLBlivoBVTCMwIkACbErn3gv XBTL6MgWtl37AHH+Nlto2I8leLSh059y6CxZvrFHImqD/YnJb6Pn0roDQZVOeaup 5aGld/QXkAyJAtQxNk5AqXJsyqIOUnT32HEEWhgFCohbW5m/ZjrWBUFcNJuc0F0r ZKaPAkyzO/9Oge3dlseFmhg33qDI6dgC/0P5aBnKiZafrjnY3YEioBg6HTpSSdD3 XFnQtyek/dyvZIdjY2qdjc3PseeRSQdTP4ZdmuqhEzvUZKYY/WiMF5TgiDSbXlo+ E211OYw9RM2dS7lLhdotjGHAdUz4RCbr9CM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:11 2025 by rpki-client