$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa File: c2350e38-16a2-3e40-a213-1d8f24f3661c.roa (raw, json) Hash identifier: YfqRAVRM86tCdUoqY9MGYib6+PNWphoYFl3bj968eWo= Subject key identifier: D5:13:5E:06:8E:88:CA:3D:E2:63:38:4B:A1:74:F2:7A:70:56:CC:3A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD0D6599E535007023B4601C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 6698 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:59:9e:53:50:07:02:3b:46:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=51cbd356-7d33-45ed-a76d-36f7ec23a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:9c:70:2e:53:89:61:9e:7f:1a:e1:e9:89: 24:9a:49:33:e5:46:02:db:53:5e:f0:0d:a4:73:11: 40:18:99:d6:04:9d:e8:f9:63:8c:8c:ca:17:e9:af: ce:5e:53:3b:2b:63:67:e7:34:9e:df:eb:9b:1f:fb: 2b:cd:c3:60:32:cb:c1:f2:98:41:8e:34:7e:04:8c: 76:e3:b8:9c:92:87:e4:05:4a:79:be:d8:d2:5d:c5: aa:b5:ad:a7:65:c0:fa:08:b5:7b:50:2d:bd:a4:1b: 21:52:09:d1:8f:81:14:71:e0:d9:2c:2f:68:53:be: 2f:65:ba:c8:44:c1:8a:66:35:26:6d:e6:d8:8e:74: ce:99:77:63:cb:04:88:fe:fc:ab:6f:bf:2f:8b:e9: 02:63:60:e6:73:08:8d:1b:c9:c1:9e:c2:a4:23:55: 62:78:a4:5a:b4:76:db:d3:f5:29:82:63:9b:0c:70: 85:67:0a:3e:26:e9:12:b1:d9:41:c3:7b:e9:03:83: 5c:4a:6c:53:3c:24:3b:53:8f:40:9f:b3:84:b0:0c: bf:a5:4d:4a:a9:51:f4:1f:af:7e:31:74:b6:b3:86: bb:48:38:d8:d8:1b:17:f4:7e:d9:72:f5:21:81:2f: d1:f5:ff:5f:dc:08:d1:24:b6:ef:cc:a9:c3:20:41: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:5E:06:8E:88:CA:3D:E2:63:38:4B:A1:74:F2:7A:70:56:CC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:68:98:7c:25:fc:3b:4b:79:d5:18:20:0f:b8:ea:a3:15:8a: 43:e8:62:01:3a:3c:26:a9:1b:67:de:86:10:42:30:62:e3:37: 82:54:76:1e:a8:06:2b:9c:2c:b6:52:8b:a7:6b:a8:4a:1a:cc: 8b:06:8a:44:d6:9c:ef:ff:42:2f:26:9c:1f:ca:ee:0d:5b:73: 9d:03:06:82:dc:50:05:71:f9:d4:a9:37:16:dd:aa:38:98:93: 11:b0:60:19:06:9e:29:7a:6c:52:7b:01:c5:1f:7d:a1:5f:fd: 1a:a5:8a:d6:de:76:85:e6:de:ff:b1:f7:f3:6f:e4:c7:73:01: 33:72:52:20:91:c7:23:9e:77:bb:3a:5b:79:30:41:5b:d1:7c: 03:6f:ba:5b:ce:71:05:cd:74:54:83:2a:bc:17:79:c5:e7:91: 89:58:4f:0b:0b:ef:41:5b:6b:ab:08:5e:2f:92:9b:0b:b3:3c: 3f:d0:12:c6:90:06:18:6f:0b:bf:2f:7c:43:9c:7f:c8:cd:3d: 43:64:42:fb:b0:db:3a:42:69:8d:8c:6d:a1:7e:25:f8:1a:e6: 72:5f:a9:ac:bf:db:b3:db:5d:60:55:d0:61:4a:f0:25:20:ff: 12:bf:d0:3e:5c:4c:97:e6:c6:40:6a:a6:46:34:80:24:f9:b3: 2f:46:6c:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1lmeU1AHAjtGAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTFjYmQzNTYtN2QzMy00NWVkLWE3NmQtMzZmN2VjMjNhOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieSccC5TiWGefxrh6Ykkmkkz5UYC21Ne8A2k cxFAGJnWBJ3o+WOMjMoX6a/OXlM7K2Nn5zSe3+ubH/srzcNgMsvB8phBjjR+BIx2 47ickofkBUp5vtjSXcWqta2nZcD6CLV7UC29pBshUgnRj4EUceDZLC9oU74vZbrI RMGKZjUmbebYjnTOmXdjywSI/vyrb78vi+kCY2DmcwiNG8nBnsKkI1VieKRatHbb 0/UpgmObDHCFZwo+JukSsdlBw3vpA4NcSmxTPCQ7U49An7OEsAy/pU1KqVH0H69+ MXS2s4a7SDjY2BsX9H7ZcvUhgS/R9f9f3AjRJLbvzKnDIEE66wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUTXgaOiMo94mM4S6F08npwVsw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzIzNTBlMzgtMTZhMi0z ZTQwLWEyMTMtMWQ4ZjI0ZjM2NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVomHwl/DtLedUYIA+46qMVikPoYgE6PCapG2fehhBCMGLjN4JU dh6oBiucLLZSi6drqEoazIsGikTWnO//Qi8mnB/K7g1bc50DBoLcUAVx+dSpNxbd qjiYkxGwYBkGnil6bFJ7AcUffaFf/RqlitbedoXm3v+x9/Nv5MdzATNyUiCRxyOe d7s6W3kwQVvRfANvulvOcQXNdFSDKrwXecXnkYlYTwsL70Fba6sIXi+SmwuzPD/Q EsaQBhhvC78vfEOcf8jNPUNkQvuw2zpCaY2MbaF+Jfga5nJfqay/27PbXWBV0GFK 8CUg/xK/0D5cTJfmxkBqpkY0gCT5sy9GbGs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:55 2025 by rpki-client