$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa File: 88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa (raw, json) Hash identifier: vi8/M5Fxdda7BFZaeiXHsDRps7/jg3aLA8lCOPfM6po= Subject key identifier: 30:CA:68:D6:7C:BC:28:5B:0E:85:19:49:87:FC:E3:01:61:9D:96:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC876300B19BB015865027CC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 214504 IP address blocks: 2001:470:40c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:30:0b:19:bb:01:58:65:02:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=e4ec3c15-68b3-4de3-ad1d-e87827b111a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fc:98:a7:41:21:66:a6:5e:64:84:de:c3:8b: 2f:5e:16:c3:b5:a5:50:46:d6:af:8a:cf:77:d0:b6: d3:99:3f:ba:7d:51:f1:7a:7f:83:d2:df:f9:17:2b: f5:1f:52:e8:44:12:b1:7f:e6:10:e9:55:59:17:c6: bc:d8:38:f6:19:26:ed:68:5b:1a:88:de:a4:94:a0: 62:56:79:60:9e:26:de:75:8e:b0:33:13:f5:c9:c1: 3c:b4:1b:4b:14:1e:60:88:4d:5d:c5:83:95:b5:c4: 01:48:6c:4d:3f:02:c9:a3:c4:18:80:30:aa:c5:33: db:81:40:0c:2c:d8:96:15:11:f0:02:a7:d0:b7:fc: d1:74:8f:67:b2:c0:68:f5:59:d4:c2:51:2a:79:8f: fe:83:65:00:81:34:a2:38:39:e1:87:7f:15:29:29: 5e:27:20:11:c5:4e:94:37:99:46:15:0e:c5:4d:c2: 6e:7b:c3:e5:21:6e:96:17:11:fe:0b:55:99:5e:42: 91:66:ea:61:0e:ab:73:6b:d8:35:0b:b9:bb:55:ec: 71:d3:db:2d:16:4b:7b:70:7c:15:28:aa:61:9b:e7: b9:ba:bc:57:97:ed:c8:0b:b3:3c:a5:ab:4f:98:48: 6d:cc:25:d7:68:85:8d:20:b5:d6:6b:35:37:bf:e8: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CA:68:D6:7C:BC:28:5B:0E:85:19:49:87:FC:E3:01:61:9D:96:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88dfdb14-96c6-3226-b1e9-aac59b9fa64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:40c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:09:77:23:ed:0a:89:10:61:e9:24:2e:97:43:b6:86:33:bc: 1d:2b:f4:b8:9b:dc:02:e6:61:24:ab:b9:5e:7c:ea:7d:df:f4: 5b:d7:fc:db:23:5b:8d:81:4c:e3:18:a0:ab:59:8a:c2:ae:04: db:24:e6:69:83:63:9c:4f:57:bc:ca:9a:87:b2:66:68:84:57: 2d:d6:86:69:e9:b3:bc:75:65:d7:f5:52:a0:ec:9a:d7:39:20: 71:ac:7f:07:d9:5a:77:1c:e8:54:50:30:c4:a3:9f:d2:b1:bf: 88:7b:e1:d4:e3:19:69:56:65:03:76:c0:7a:5c:10:48:c6:5b: 73:7c:b7:d1:78:2f:12:7b:8a:5c:25:96:96:8b:66:73:6a:69: 85:a2:70:45:e0:58:8b:34:55:a2:15:31:f6:49:8c:84:57:b0: 41:66:09:e5:46:a6:d1:8c:c1:fe:e8:1d:f6:ca:11:42:85:0b: c7:48:ab:95:62:1b:77:e2:74:9c:1e:e6:ff:a0:64:eb:9c:4b: 04:29:d0:e9:80:b2:bc:ac:40:bf:6b:73:8c:aa:16:5e:7f:07: 45:01:7a:26:89:5e:09:d1:2d:06:d9:1d:d7:07:e4:39:09:00: db:14:68:94:a4:67:6c:e2:a9:57:59:a8:aa:32:ca:49:c0:6b: 46:c7:7f:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdjALGbsBWGUCfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTRlYzNjMTUtNjhiMy00ZGUzLWFkMWQtZTg3ODI3YjExMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/yYp0EhZqZeZITew4svXhbDtaVQRtavis93 0LbTmT+6fVHxen+D0t/5Fyv1H1LoRBKxf+YQ6VVZF8a82Dj2GSbtaFsaiN6klKBi VnlgnibedY6wMxP1ycE8tBtLFB5giE1dxYOVtcQBSGxNPwLJo8QYgDCqxTPbgUAM LNiWFRHwAqfQt/zRdI9nssBo9VnUwlEqeY/+g2UAgTSiODnhh38VKSleJyARxU6U N5lGFQ7FTcJue8PlIW6WFxH+C1WZXkKRZuphDqtza9g1C7m7Vexx09stFkt7cHwV KKphm+e5urxXl+3IC7M8patPmEhtzCXXaIWNILXWazU3v+iInQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDKaNZ8vChbDoUZSYf84wFhnZYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODhkZmRiMTQtOTZjNi0z MjI2LWIxZTktYWFjNTliOWZhNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJgJdyPtCokQYekkLpdDtoYzvB0r9Lib3ALmYSSruV586n3f9FvX /NsjW42BTOMYoKtZisKuBNsk5mmDY5xPV7zKmoeyZmiEVy3Whmnps7x1Zdf1UqDs mtc5IHGsfwfZWncc6FRQMMSjn9Kxv4h74dTjGWlWZQN2wHpcEEjGW3N8t9F4LxJ7 ilwllpaLZnNqaYWicEXgWIs0VaIVMfZJjIRXsEFmCeVGptGMwf7oHfbKEUKFC8dI q5ViG3fidJwe5v+gZOucSwQp0OmAsrysQL9rc4yqFl5/B0UBeiaJXgnRLQbZHdcH 5DkJANsUaJSkZ2ziqVdZqKoyyknAa0bHf98= -----END CERTIFICATE-----Generated at Sat Aug 23 13:57:44 2025 by rpki-client