$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa File: a4625a79-a318-3fe2-8612-a6f7b327d51c.roa (raw, json) Hash identifier: sDHqK+66xMOCcPY5hR/HR42W9c/bkZtS+LCgIKWHzhg= Subject key identifier: 97:6C:9E:16:59:61:46:7B:22:D8:72:69:55:41:42:8A:89:A6:B9:F7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A5765D95AC152248F2E7B2880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 51259 IP address blocks: 2001:470:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d9:5a:c1:52:24:8f:2e:7b:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=47f2fbc7-9d16-480e-9149-4ac04672a0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:0d:16:6c:c3:7e:23:f4:0d:6b:68:51:1a: fe:c6:5c:9b:43:77:a4:60:42:5f:e2:7b:70:17:de: eb:57:f9:4b:68:1c:41:62:2f:25:f0:8e:e2:23:94: 65:d9:f0:32:62:b0:7d:78:2c:0b:01:c3:e7:ab:db: 4c:e0:53:57:bb:ca:eb:50:b6:db:e1:b9:48:36:5b: 64:86:1c:8b:a2:9b:cd:b1:56:b3:df:4d:6d:e0:39: d3:4b:b1:07:43:cd:e0:f6:3b:3a:c9:ed:35:fc:d4: 61:8b:dd:d8:f5:49:84:96:45:fc:8c:a2:5a:47:83: 50:25:49:cc:7c:2a:14:f7:6f:e9:eb:1f:87:2c:f7: 66:41:15:7b:07:4b:fb:db:49:50:88:23:b0:ed:02: 10:2f:da:fc:e2:bf:9a:9d:43:33:fa:c4:db:9b:8c: d2:d6:a6:13:89:8e:11:17:e9:fd:43:3a:9e:84:58: 3b:1f:44:18:dc:be:78:df:a0:a9:3f:81:15:55:45: da:44:37:37:6f:70:85:2e:4b:dc:b9:b6:ad:51:b5: 6f:23:dc:99:62:00:90:ea:29:36:4c:1f:9a:bc:63: 80:de:9c:a2:8b:3b:2a:e3:cc:74:03:d0:a1:cd:50: 51:6b:17:be:9e:77:c4:1d:ff:13:3d:c2:94:66:9a: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:9E:16:59:61:46:7B:22:D8:72:69:55:41:42:8A:89:A6:B9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:398::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bb:18:9d:0f:ea:f1:fa:97:88:0e:7c:23:6d:87:92:d6:21: 94:6a:e1:27:e1:43:65:e0:9d:34:83:3c:2d:08:1f:5a:7c:c9: c5:de:56:1e:c9:42:e3:5e:75:e4:a9:35:65:d5:a0:83:ce:d2: 11:09:ca:6f:a4:29:59:89:f9:9b:f3:87:39:f1:8a:72:b1:e1: df:0d:bb:58:b9:da:3d:59:90:0b:17:5e:d9:7e:45:81:86:2e: 38:c2:18:c6:fb:eb:fc:52:e1:f5:c7:01:46:f0:42:cc:a4:4c: 10:23:e2:99:d9:8d:0c:e0:a7:08:f4:4e:eb:ad:d7:c6:9d:72: 2b:3d:05:10:9a:01:e3:45:11:cc:dd:08:fa:0d:9a:46:e5:9a: bd:c6:c0:b3:cb:00:f7:28:17:cf:cc:63:3a:81:40:ba:f3:cd: bd:61:c4:6f:0e:66:f7:de:a8:16:92:9e:f7:ea:1b:d7:2d:73: 9e:66:5c:b9:41:39:fe:59:66:50:bc:6c:5f:2b:5a:71:c4:7b: 0b:13:3f:a2:40:dd:93:27:ab:e8:9c:11:e9:ed:73:a2:f7:ba: bc:d4:53:7e:9e:b0:bd:d7:bb:68:24:32:a9:47:21:24:01:be: d8:e8:3d:2a:d0:bb:fb:c5:40:30:85:b4:ce:04:cd:3c:83:22: 62:41:7b:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZdlawVIkjy57KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NDdmMmZiYzctOWQxNi00ODBlLTkxNDktNGFjMDQ2NzJhMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNINFmzDfiP0DWtoURr+xlybQ3ekYEJf4ntw F97rV/lLaBxBYi8l8I7iI5Rl2fAyYrB9eCwLAcPnq9tM4FNXu8rrULbb4blINltk hhyLopvNsVaz301t4DnTS7EHQ83g9js6ye01/NRhi93Y9UmElkX8jKJaR4NQJUnM fCoU92/p6x+HLPdmQRV7B0v720lQiCOw7QIQL9r84r+anUMz+sTbm4zS1qYTiY4R F+n9QzqehFg7H0QY3L5436CpP4EVVUXaRDc3b3CFLkvcubatUbVvI9yZYgCQ6ik2 TB+avGOA3pyiizsq48x0A9ChzVBRaxe+nnfEHf8TPcKUZppVrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdsnhZZYUZ7IthyaVVBQoqJprn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQ2MjVhNzktYTMxOC0z ZmUyLTg2MTItYTZmN2IzMjdkNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAS7GJ0P6vH6l4gOfCNth5LWIZRq4SfhQ2XgnTSDPC0IH1p8ycXe Vh7JQuNedeSpNWXVoIPO0hEJym+kKVmJ+ZvzhznxinKx4d8Nu1i52j1ZkAsXXtl+ RYGGLjjCGMb76/xS4fXHAUbwQsykTBAj4pnZjQzgpwj0Tuut18adcis9BRCaAeNF EczdCPoNmkblmr3GwLPLAPcoF8/MYzqBQLrzzb1hxG8OZvfeqBaSnvfqG9ctc55m XLlBOf5ZZlC8bF8rWnHEewsTP6JA3ZMnq+icEentc6L3urzUU36esL3Xu2gkMqlH ISQBvtjoPSrQu/vFQDCFtM4EzTyDImJBe6Y= -----END CERTIFICATE-----Generated at Sun Jun 29 12:43:33 2025 by rpki-client