$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa File: 556b8f33-4bbe-3abd-8898-2311a1125dee.roa (raw, json) Hash identifier: Yjzw4x2L88sFSIJ+54OHLDFUmo42bG0N+FM29EkBanQ= Subject key identifier: FA:7B:24:12:D0:44:1D:E1:90:D0:09:B2:FB:71:82:93:20:72:22:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ACB411D39F8B7C792557C8D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 38077 IP address blocks: 2001:470:1f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1d:39:f8:b7:c7:92:55:7c:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=e9f5412c-c44e-4d16-a8c3-e7eea6052932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:c0:ab:ee:ac:e8:62:45:f8:c6:6a:0c:c0: d0:35:c9:63:38:fd:ca:03:db:ad:60:98:ff:b0:3d: f7:ec:96:3a:b9:ba:7c:31:e0:ea:ec:ae:a5:9e:49: 33:58:50:25:52:40:88:ad:e6:4d:a3:71:bb:72:85: 42:f8:7f:99:44:5e:33:eb:83:9b:68:59:02:c1:39: 9a:cd:79:05:ad:4f:61:3d:cf:69:3f:88:ef:c7:25: 6b:e2:9b:51:d0:bf:22:96:16:95:2c:ac:31:87:d7: 09:35:92:00:06:2d:2e:82:52:3a:55:82:24:a4:05: c8:b9:0b:91:1f:61:30:9e:7d:11:4c:d6:9a:93:87: 40:05:8e:97:ea:01:66:e5:40:da:08:5d:60:a0:16: f6:60:66:13:d9:48:0e:5e:78:6c:6d:03:d1:e2:85: 81:ac:dd:ce:3d:51:01:c4:11:88:48:89:d8:97:55: 37:cf:ff:eb:ee:d5:77:49:fd:b1:78:c3:c2:09:7b: ef:a7:17:9b:1d:e3:7e:12:77:40:17:56:75:7a:01: 24:7a:24:1a:4b:2b:04:9b:09:c0:e8:67:72:65:90: f3:3b:83:0b:7b:2b:97:e7:49:f8:8f:c3:12:c7:4b: 7c:3a:24:99:a3:9f:20:1e:49:53:4d:fe:b8:b4:a3: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7B:24:12:D0:44:1D:E1:90:D0:09:B2:FB:71:82:93:20:72:22:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:a2:f3:0d:65:43:7c:14:17:9b:b2:49:5e:61:c9:6d:78:65: a1:59:c6:fe:27:00:28:3d:f8:22:b9:67:24:b5:a2:86:50:4b: 10:cb:7b:33:18:a9:73:4b:f1:61:58:34:f7:e6:28:0d:0e:db: 7c:35:61:d5:9f:9b:88:ad:fd:a8:5b:4c:07:fc:53:bc:ba:c6: dd:cd:57:89:4c:6b:7c:ca:be:51:74:7f:a9:d3:d8:42:d9:d8: 5e:74:00:81:a8:2e:10:57:2b:de:94:43:18:23:b8:5c:10:56: 67:d1:a8:35:cd:9e:73:d9:08:2d:fe:f2:85:1d:c8:85:be:9f: 73:a5:a6:17:27:2a:35:18:9c:4c:63:86:f9:67:63:d7:b9:98: 71:7f:ad:59:0b:eb:74:02:61:9d:8f:47:5e:82:0a:19:b1:19: 25:e2:f2:22:e9:2d:79:a9:11:07:1c:0e:6f:77:8e:96:64:23: 23:d7:2d:dd:3a:c5:4a:ac:8f:ee:a9:f8:63:76:14:8b:89:33: 86:63:f3:77:21:09:33:2f:3a:1d:54:9c:d7:e0:92:c8:0b:eb: 5d:82:f7:89:f2:ef:0b:e6:81:4f:dd:11:d3:dc:05:a4:ce:b5: 92:28:b6:22:88:7f:c4:12:de:38:cf:35:31:8b:a4:51:a2:36: 56:3f:ed:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQR05+LfHklV8jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTlmNTQxMmMtYzQ0ZS00ZDE2LWE4YzMtZTdlZWE2MDUyOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RPAq+6s6GJF+MZqDMDQNcljOP3KA9utYJj/ sD337JY6ubp8MeDq7K6lnkkzWFAlUkCIreZNo3G7coVC+H+ZRF4z64ObaFkCwTma zXkFrU9hPc9pP4jvxyVr4ptR0L8ilhaVLKwxh9cJNZIABi0uglI6VYIkpAXIuQuR H2Ewnn0RTNaak4dABY6X6gFm5UDaCF1goBb2YGYT2UgOXnhsbQPR4oWBrN3OPVEB xBGISInYl1U3z//r7tV3Sf2xeMPCCXvvpxebHeN+EndAF1Z1egEkeiQaSysEmwnA 6GdyZZDzO4MLeyuX50n4j8MSx0t8OiSZo58gHklTTf64tKPRswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPp7JBLQRB3hkNAJsvtxgpMgciIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTU2YjhmMzMtNGJiZS0z YWJkLTg4OTgtMjMxMWExMTI1ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+i8w1lQ3wUF5uySV5hyW14ZaFZxv4nACg9+CK5ZyS1ooZQSxDL ezMYqXNL8WFYNPfmKA0O23w1YdWfm4it/ahbTAf8U7y6xt3NV4lMa3zKvlF0f6nT 2ELZ2F50AIGoLhBXK96UQxgjuFwQVmfRqDXNnnPZCC3+8oUdyIW+n3OlphcnKjUY nExjhvlnY9e5mHF/rVkL63QCYZ2PR16CChmxGSXi8iLpLXmpEQccDm93jpZkIyPX Ld06xUqsj+6p+GN2FIuJM4Zj83chCTMvOh1UnNfgksgL612C94ny7wvmgU/dEdPc BaTOtZIotiKIf8QS3jjPNTGLpFGiNlY/7dc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:25 2025 by rpki-client