$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa File: 642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa (raw, json) Hash identifier: oNtpK8RaTFm+EPduMvwZQ5wkAQD80KaRz4mJpELeexc= Subject key identifier: BF:B4:E8:F2:2B:F1:2B:80:AE:9E:D4:97:94:25:DB:6A:AE:43:21:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AEF8BC66378F3461EE5C8A200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 201714 IP address blocks: 2001:470:425::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c6:63:78:f3:46:1e:e5:c8:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=40df87c2-fda9-40b9-ad0d-f6c3f758fd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:40:2c:18:fd:2c:0f:bc:ae:2b:77:4a:33:2c: 00:fc:10:38:cc:66:e9:f3:ec:95:a1:43:ae:df:66: 80:9a:4e:d6:33:3e:11:2d:e8:f3:ba:a8:79:45:59: a9:64:a4:0b:93:39:b3:52:e9:96:e8:05:bf:fc:31: 2b:1f:94:58:31:c6:c3:0a:65:49:72:19:77:3d:02: 6a:83:ee:0f:18:65:69:2f:d0:8e:90:8a:cb:54:0a: 9b:f4:e1:72:67:9e:71:2c:d7:7d:a4:d2:34:fa:14: 57:47:d3:de:0b:6a:39:36:4b:d1:5c:8e:fc:e3:f1: eb:dd:43:52:f2:12:a8:1f:63:91:8d:79:d0:98:76: f2:65:85:78:02:d4:df:5b:78:e7:72:2a:2b:a9:b3: 6e:da:66:c3:ef:8c:73:f4:b6:ff:cf:5c:2e:1f:86: ee:67:73:59:a8:87:74:c8:f6:0b:6b:c6:5e:27:92: 89:9f:e7:c9:c9:af:57:83:ea:21:58:fa:ff:93:65: c5:df:54:6a:36:1f:d2:b2:b7:21:d3:f5:49:90:06: 88:6e:ae:70:ae:a7:a0:59:31:73:1b:de:8d:42:56: 89:96:f1:e1:34:99:7c:3e:7a:bc:4d:56:8c:57:18: 87:6a:f3:75:37:24:4c:8f:da:35:0b:ef:b0:91:3e: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:E8:F2:2B:F1:2B:80:AE:9E:D4:97:94:25:DB:6A:AE:43:21:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:425::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:30:0a:dc:2b:08:a8:c4:29:03:8a:a9:c6:c7:df:a3:57:2b: dd:34:d1:98:b7:e1:5c:0f:e3:aa:80:f6:f2:97:fd:cf:9f:1d: 12:1c:5c:7d:14:82:16:3f:16:fc:04:48:4e:32:c3:9e:9c:4a: eb:3b:40:b5:30:4c:a6:9d:ce:49:45:05:0f:26:fc:fb:31:38: e1:b5:ae:d0:1b:ae:38:07:ca:8e:52:16:04:19:bc:99:3a:90: 89:e3:60:94:56:6c:e7:03:be:2e:96:81:ca:3b:9c:92:15:f9: 34:24:f3:ea:bf:30:71:0e:7a:c2:56:a4:69:4a:89:94:d4:5e: 15:51:4d:1d:0e:49:76:b7:5b:6f:8d:64:2d:8a:cc:db:ec:92: 85:e4:ed:1b:13:60:1a:5f:31:26:a6:c3:e8:5a:60:11:78:fa: 5d:82:55:9c:81:5d:5a:a4:30:13:3e:cd:91:f4:ff:66:55:61: 02:04:ef:2d:98:56:cd:ca:fa:b1:26:66:a4:5f:b6:dd:b6:0a: fb:c0:57:19:f5:08:90:fa:b1:e8:45:fb:0f:49:f9:09:72:60: 68:69:c1:d8:e2:0f:88:fc:01:b9:43:96:c2:d6:7c:86:80:80: ba:d9:f6:9d:c4:09:a0:bc:5b:fa:09:67:16:ee:7c:8a:98:79: 8c:7f:90:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvi8ZjePNGHuXIogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NDBkZjg3YzItZmRhOS00MGI5LWFkMGQtZjZjM2Y3NThmZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUAsGP0sD7yuK3dKMywA/BA4zGbp8+yVoUOu 32aAmk7WMz4RLejzuqh5RVmpZKQLkzmzUumW6AW//DErH5RYMcbDCmVJchl3PQJq g+4PGGVpL9COkIrLVAqb9OFyZ55xLNd9pNI0+hRXR9PeC2o5NkvRXI784/Hr3UNS 8hKoH2ORjXnQmHbyZYV4AtTfW3jnciorqbNu2mbD74xz9Lb/z1wuH4buZ3NZqId0 yPYLa8ZeJ5KJn+fJya9Xg+ohWPr/k2XF31RqNh/Ssrch0/VJkAaIbq5wrqegWTFz G96NQlaJlvHhNJl8Pnq8TVaMVxiHavN1NyRMj9o1C++wkT4YiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+06PIr8SuArp7Ul5Ql22quQyF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQyYjM0ZjktYTY5Yy0z MmJmLTllNDgtYjZjZDYzNWUyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAwCtwrCKjEKQOKqcbH36NXK9000Zi34VwP46qA9vKX/c+fHRIc XH0UghY/FvwESE4yw56cSus7QLUwTKadzklFBQ8m/PsxOOG1rtAbrjgHyo5SFgQZ vJk6kInjYJRWbOcDvi6Wgco7nJIV+TQk8+q/MHEOesJWpGlKiZTUXhVRTR0OSXa3 W2+NZC2KzNvskoXk7RsTYBpfMSamw+haYBF4+l2CVZyBXVqkMBM+zZH0/2ZVYQIE 7y2YVs3K+rEmZqRftt22CvvAVxn1CJD6sehF+w9J+QlyYGhpwdjiD4j8AblDlsLW fIaAgLrZ9p3ECaC8W/oJZxbufIqYeYx/kII= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:27 2025 by rpki-client