$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa File: a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa (raw, json) Hash identifier: DAUmTY2vyRRGlAFzStPQM/IejdBSGeF+9ahbsiOf1b4= Subject key identifier: 72:AF:C8:D8:BD:8D:0B:0F:3A:02:CF:6F:3B:9D:56:77:02:ED:38:60 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F151054EC055B10A6C6220 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 48006 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:51:05:4e:c0:55:b1:0a:6c:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=3a10219f-549c-4ddd-8f28-7064e75d833c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:b8:79:e3:32:83:a5:6c:8e:fd:99:38:cf: b3:28:92:45:3f:1c:a6:5a:1b:97:9e:0c:97:d9:32: 10:57:a5:bf:00:b8:a5:d9:40:3a:6a:08:05:18:d2: f6:fc:cb:62:fd:ae:73:10:26:da:e2:a7:b8:91:89: 28:2e:25:ff:24:72:8a:4c:4d:07:5b:63:a4:25:a8: bb:8b:63:6f:b7:1d:26:a4:3a:c0:26:a5:0f:87:5d: df:08:0a:0f:5e:37:13:7a:23:5d:13:a3:ad:1d:5c: ca:3f:12:cf:7a:78:e2:7d:c0:12:9e:2f:6f:bf:09: 3e:45:18:a1:c7:d3:17:12:7a:1f:00:35:09:cb:7e: b0:46:ca:36:3a:06:d9:f4:66:74:d8:fc:38:6f:3a: 82:27:cc:bd:cf:75:2f:97:b6:01:3a:b6:de:59:37: 19:0c:48:80:56:77:75:d8:b8:7c:c0:78:5d:b1:98: a5:b7:3b:94:76:5e:6c:4d:26:8d:43:2d:f9:bc:d4: 5e:6e:66:c9:68:a4:54:cc:24:f9:32:ae:0d:e9:88: cf:0f:26:b9:25:84:7a:7c:3e:a2:93:e1:c6:20:6d: 42:d1:da:55:e6:ff:47:e0:85:92:74:ff:21:6a:fb: ed:35:e4:13:9f:b1:e0:1f:6d:84:8c:de:16:02:7a: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AF:C8:D8:BD:8D:0B:0F:3A:02:CF:6F:3B:9D:56:77:02:ED:38:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1f36030-fa3a-3ad9-9f60-d3d099b05931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b3:e6:2c:e9:04:d4:a3:41:74:1e:f4:f8:e5:a2:fe:d0:47: aa:a6:40:ce:26:b4:21:7c:4a:06:1a:88:b1:3c:24:c1:10:91: de:12:83:4e:d1:2b:50:a5:85:0f:cd:a1:6b:a6:38:a5:2b:71: 9f:5b:ab:cd:06:36:a5:07:7e:a7:ba:9c:55:97:f6:ad:63:19: 82:03:6b:9f:b8:06:0e:4d:07:22:11:51:db:b0:c5:2f:16:b4: cc:a4:97:13:b3:ba:4e:c1:90:d9:c4:30:8b:4b:1d:f4:67:c0: f7:09:f6:17:69:88:01:fe:d2:f2:82:95:b3:84:fb:8f:ac:71: f0:6d:65:1b:49:06:e6:c4:cd:f8:9a:fc:ef:63:a1:7d:c0:90: 3d:69:9e:8a:78:be:14:af:95:03:66:cd:fb:52:8c:c7:6d:53: f7:bc:c2:dd:59:40:75:b2:f0:4d:2a:e5:00:9e:81:32:33:32: 2b:cc:a7:29:6c:8d:3e:30:1a:67:3b:3d:3b:70:7f:04:42:aa: 78:4e:60:8b:f6:f7:96:b4:f3:20:be:28:dc:9c:fc:6d:47:a0: b1:be:0a:4e:66:62:11:b9:5f:90:9c:65:51:d8:1e:3b:7b:f4: 42:ff:ab:d4:8a:f6:2c:08:79:fd:75:72:8c:4e:02:d7:b2:fe: f0:2f:bf:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VEFTsBVsQpsYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk M2ExMDIxOWYtNTQ5Yy00ZGRkLThmMjgtNzA2NGU3NWQ4MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyO4eeMyg6Vsjv2ZOM+zKJJFPxymWhuXngyX 2TIQV6W/ALil2UA6aggFGNL2/Mti/a5zECba4qe4kYkoLiX/JHKKTE0HW2OkJai7 i2Nvtx0mpDrAJqUPh13fCAoPXjcTeiNdE6OtHVzKPxLPenjifcASni9vvwk+RRih x9MXEnofADUJy36wRso2OgbZ9GZ02Pw4bzqCJ8y9z3Uvl7YBOrbeWTcZDEiAVnd1 2Lh8wHhdsZiltzuUdl5sTSaNQy35vNRebmbJaKRUzCT5Mq4N6YjPDya5JYR6fD6i k+HGIG1C0dpV5v9H4IWSdP8havvtNeQTn7HgH22EjN4WAno+4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKvyNi9jQsPOgLPbzudVncC7ThgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTFmMzYwMzAtZmEzYS0z YWQ5LTlmNjAtZDNkMDk5YjA1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCz5izpBNSjQXQe9Pjlov7QR6qmQM4mtCF8SgYaiLE8JMEQkd4S g07RK1ClhQ/NoWumOKUrcZ9bq80GNqUHfqe6nFWX9q1jGYIDa5+4Bg5NByIRUduw xS8WtMyklxOzuk7BkNnEMItLHfRnwPcJ9hdpiAH+0vKClbOE+4+scfBtZRtJBubE zfia/O9joX3AkD1pnop4vhSvlQNmzftSjMdtU/e8wt1ZQHWy8E0q5QCegTIzMivM pylsjT4wGmc7PTtwfwRCqnhOYIv295a08yC+KNyc/G1HoLG+Ck5mYhG5X5CcZVHY Hjt79EL/q9SK9iwIef11coxOAtey/vAvvyE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:54 2025 by rpki-client