$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa File: ba9546b1-c4f9-3846-be26-ef951eb2490b.roa (raw, json) Hash identifier: 8JgJF0BbmKLA5PEvyDKESCwvRFD1oQ4053xXinEtsmQ= Subject key identifier: FF:7F:89:AB:57:EE:34:75:5B:D9:FF:7C:6C:4C:6F:AE:AC:89:8F:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD66B992B839C923323263CA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 26097 IP address blocks: 2001:470:2b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:99:2b:83:9c:92:33:23:26:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=38b26ea0-fa71-4342-9dd9-0ed0a220b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:54:60:b5:82:e8:35:e1:07:20:6e:b7:04:ed: 36:ab:91:af:aa:e1:43:5e:e8:ad:0e:79:03:62:a1: 25:19:ff:7f:ad:49:e7:d9:0a:1d:ef:48:9f:23:9d: 00:b7:b7:e2:4c:38:76:16:ab:69:dd:e3:b7:93:05: 47:da:3d:c3:90:50:8a:13:6d:8c:6a:07:e9:6e:e3: a5:83:52:e8:68:73:13:f6:72:4a:e5:70:ab:29:04: 3c:dc:57:ae:81:5d:62:d7:fa:cc:e0:83:e6:08:6a: df:47:37:34:c9:e0:d1:a2:50:f2:71:32:92:5d:d2: 03:2b:1c:cd:ad:03:ce:e7:f8:d1:3f:d5:e6:09:e0: 32:9b:02:db:3d:4f:fa:c0:ca:b2:e2:63:0d:10:c7: a7:a2:d8:15:c1:08:d6:60:93:a6:02:de:3f:5f:d0: c4:20:3e:c6:db:4e:68:7e:2a:a3:25:0d:a7:73:58: b5:cd:23:88:e5:c1:f3:aa:c3:d2:38:dc:81:dc:d1: 2d:70:f5:6e:43:0d:5d:7e:c1:c1:11:72:c5:68:1d: b3:55:84:b5:a1:99:3b:cd:ab:d1:6e:58:55:f5:07: 47:d7:37:f5:eb:e2:58:39:cf:e7:db:2b:58:55:5a: 76:8f:f5:b1:09:5c:6b:b2:e1:d8:8f:34:b4:13:c9: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:89:AB:57:EE:34:75:5B:D9:FF:7C:6C:4C:6F:AE:AC:89:8F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d2:5f:d3:8f:2a:d0:1c:6b:3d:c1:88:ca:6b:59:42:08:04: f8:b6:6b:bc:e4:5b:74:8d:eb:7d:92:58:62:ad:4b:29:9f:13: cc:85:54:6b:ec:fb:e3:2e:e8:d4:48:c7:a4:51:00:cc:69:17: 1c:33:f1:a2:83:ea:6e:cf:48:cc:cd:98:9a:9e:d4:83:58:39: f4:88:27:e1:6e:09:04:5c:43:3d:c3:4e:43:c6:ea:4b:1d:01: 89:ba:47:42:51:f5:d2:be:b6:a0:89:c9:4a:18:d0:70:10:84: ad:d2:47:c4:8c:65:95:26:e6:fb:cb:73:3b:a7:b7:85:3c:69: 33:bc:cb:b4:e3:de:b5:a1:f2:c1:22:01:c1:69:01:d3:38:7e: 0e:a7:29:c7:e9:11:f8:3e:df:32:02:f3:8b:b2:9d:88:1f:6b: cb:c0:c3:27:94:01:e5:77:8e:af:02:f7:1c:5c:73:ee:37:26: 0a:d7:33:75:af:dd:2a:3e:22:6d:ad:19:2c:cd:b8:f8:35:09: dc:34:d8:34:27:f3:d0:f6:79:fb:9c:54:f3:e7:e8:5d:e4:18: 67:d8:ff:b3:6e:44:08:a4:70:16:ad:d6:ed:07:da:c1:22:b0: d2:77:11:84:32:a4:88:90:33:96:ab:f5:dc:c2:cf:7f:77:6a: 43:51:0c:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErWa5krg5ySMyMmPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk MzhiMjZlYTAtZmE3MS00MzQyLTlkZDktMGVkMGEyMjBiOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFRgtYLoNeEHIG63BO02q5GvquFDXuitDnkD YqElGf9/rUnn2Qod70ifI50At7fiTDh2Fqtp3eO3kwVH2j3DkFCKE22MagfpbuOl g1LoaHMT9nJK5XCrKQQ83FeugV1i1/rM4IPmCGrfRzc0yeDRolDycTKSXdIDKxzN rQPO5/jRP9XmCeAymwLbPU/6wMqy4mMNEMenotgVwQjWYJOmAt4/X9DEID7G205o fiqjJQ2nc1i1zSOI5cHzqsPSONyB3NEtcPVuQw1dfsHBEXLFaB2zVYS1oZk7zavR blhV9QdH1zf16+JYOc/n2ytYVVp2j/WxCVxrsuHYjzS0E8lfEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9/iatX7jR1W9n/fGxMb66siY+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmE5NTQ2YjEtYzRmOS0z ODQ2LWJlMjYtZWY5NTFlYjI0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK3SX9OPKtAcaz3BiMprWUIIBPi2a7zkW3SN632SWGKtSymfE8yF VGvs++Mu6NRIx6RRAMxpFxwz8aKD6m7PSMzNmJqe1INYOfSIJ+FuCQRcQz3DTkPG 6ksdAYm6R0JR9dK+tqCJyUoY0HAQhK3SR8SMZZUm5vvLczunt4U8aTO8y7Tj3rWh 8sEiAcFpAdM4fg6nKcfpEfg+3zIC84uynYgfa8vAwyeUAeV3jq8C9xxcc+43JgrX M3Wv3So+Im2tGSzNuPg1Cdw02DQn89D2efucVPPn6F3kGGfY/7NuRAikcBat1u0H 2sEisNJ3EYQypIiQM5ar9dzCz393akNRDFg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:04 2025 by rpki-client