$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa File: a21bd716-bd35-3e68-a169-5c3f107b52e9.roa (raw, json) Hash identifier: YmVDv8WKW7FqKsh12xVmzi1FeIo4XMA55Z3IUcz1QzY= Subject key identifier: 4C:53:9B:96:48:AD:52:40:8D:EA:E9:E8:D1:61:89:B0:0E:2F:78:6A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AEF9A86D69B1DBF1338550200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa Signing time: Fri 22 Aug 2025 01:30:19 +0000 ROA not before: Fri 22 Aug 2025 01:30:19 +0000 ROA not after: Thu 20 Nov 2025 02:30:19 +0000 asID: 49984 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:9a:86:d6:9b:1d:bf:13:38:55:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 01:30:19 2025 GMT Not After : Nov 20 02:30:19 2025 GMT Subject: CN=42c566b5-3f65-4ff1-809a-45913332a42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:e1:68:2b:5e:e9:c2:ca:fb:1a:4d:ff:25: ea:72:a3:74:04:c5:0d:a4:b7:21:68:3f:3b:00:8d: 18:a2:d0:4b:26:68:1f:42:24:f3:58:49:e0:c2:16: 86:4e:45:40:e4:a1:6f:7b:b2:f3:9d:fb:0c:8a:73: ce:51:38:59:b1:60:68:b5:2a:67:07:a1:d5:97:9f: 07:88:14:43:d2:7c:d4:3e:94:79:87:dc:1a:26:e3: 32:9c:5f:ab:2a:5b:7a:06:af:4a:e3:c3:0b:b2:ff: 24:26:97:b4:2c:59:09:50:4f:d0:75:75:a9:25:51: 2f:25:8c:1b:a8:ee:70:2a:59:3c:d2:39:e0:0f:9a: dd:22:14:50:9a:66:44:22:9d:d6:5e:95:99:18:ec: aa:98:fd:2c:52:b1:e2:60:3b:e7:55:8e:11:85:15: f0:0b:19:84:cc:25:43:b1:33:b3:20:fb:e4:06:bf: b8:8a:92:05:08:fd:62:29:cc:77:54:a4:ec:e4:2a: 14:51:e1:9c:bf:1a:b8:5e:97:3e:35:3f:8a:79:c2: b2:f5:42:09:2b:87:80:e0:ce:1f:3d:4d:d3:53:2f: 42:15:92:ae:dc:e1:55:48:8f:f4:37:de:f6:a6:50: 1c:91:c6:87:a0:a6:69:15:34:0b:10:1f:b6:8f:4d: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:9B:96:48:AD:52:40:8D:EA:E9:E8:D1:61:89:B0:0E:2F:78:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21bd716-bd35-3e68-a169-5c3f107b52e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fd:eb:63:eb:7e:b6:6d:2c:47:b7:08:aa:1e:18:8d:0e:bf: 32:84:80:6c:26:d9:8d:a2:58:d7:ce:49:bf:c7:0d:7b:9e:b2: 84:87:76:0f:21:65:3a:8e:c5:5f:d9:e9:0f:45:71:4a:c3:f0: 00:85:0b:5b:3f:88:66:d0:b6:5f:71:bd:55:af:e1:bc:43:99: 97:f7:3e:a4:24:8c:9b:c9:5d:21:fa:6b:5a:07:fa:6a:b6:64: e5:9d:1b:0f:2c:8e:9a:a2:c8:6c:3e:f0:fa:6a:38:1a:fb:2c: 88:7a:67:95:5d:70:7b:39:06:a4:50:76:eb:6c:11:cd:8c:c8: e7:e1:71:3d:5d:35:da:53:5a:e1:82:31:30:3b:10:7c:21:c7: 93:5e:96:47:5a:e5:6c:a2:f9:b9:69:22:2f:0f:de:c2:4e:c3: 76:30:89:9c:30:6a:e5:04:1b:08:ab:79:92:9d:d4:56:56:94: f6:e3:d1:12:d3:15:41:3e:17:94:4e:a2:b3:b6:08:ed:ff:15: 85:fc:72:75:1c:ea:66:5d:ea:e5:3e:b5:55:b7:ff:68:cb:9e: 83:04:b8:b9:e4:ed:21:77:84:c7:51:30:6a:35:ea:70:6e:02: 53:94:4f:56:58:0c:e1:85:f9:02:d1:45:da:bc:c7:28:4c:52: 4e:8f:7a:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvmobWmx2/EzhVAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjAxMzAxOVoXDTI1MTEyMDAyMzAxOVowLzEtMCsGA1UEAxMk NDJjNTY2YjUtM2Y2NS00ZmYxLTgwOWEtNDU5MTMzMzJhNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLXhaCte6cLK+xpN/yXqcqN0BMUNpLchaD87 AI0YotBLJmgfQiTzWEngwhaGTkVA5KFve7LznfsMinPOUThZsWBotSpnB6HVl58H iBRD0nzUPpR5h9waJuMynF+rKlt6Bq9K48MLsv8kJpe0LFkJUE/QdXWpJVEvJYwb qO5wKlk80jngD5rdIhRQmmZEIp3WXpWZGOyqmP0sUrHiYDvnVY4RhRXwCxmEzCVD sTOzIPvkBr+4ipIFCP1iKcx3VKTs5CoUUeGcvxq4Xpc+NT+KecKy9UIJK4eA4M4f PU3TUy9CFZKu3OFVSI/0N972plAckcaHoKZpFTQLEB+2j01zlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExTm5ZIrVJAjerp6NFhibAOL3hqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTIxYmQ3MTYtYmQzNS0z ZTY4LWExNjktNWMzZjEwN2I1MmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIz962PrfrZtLEe3CKoeGI0OvzKEgGwm2Y2iWNfOSb/HDXuesoSH dg8hZTqOxV/Z6Q9FcUrD8ACFC1s/iGbQtl9xvVWv4bxDmZf3PqQkjJvJXSH6a1oH +mq2ZOWdGw8sjpqiyGw+8PpqOBr7LIh6Z5VdcHs5BqRQdutsEc2MyOfhcT1dNdpT WuGCMTA7EHwhx5Nelkda5Wyi+blpIi8P3sJOw3YwiZwwauUEGwireZKd1FZWlPbj 0RLTFUE+F5ROorO2CO3/FYX8cnUc6mZd6uU+tVW3/2jLnoMEuLnk7SF3hMdRMGo1 6nBuAlOUT1ZYDOGF+QLRRdq8xyhMUk6Petk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:49 2025 by rpki-client