$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa File: cddff9b6-4295-3ac0-a198-c12221481fbc.roa (raw, json) Hash identifier: /7NN3kmxRH9+bOPjNNEmmScJRc60xV/jWlgwqaoi4YM= Subject key identifier: 16:3D:EE:1D:AF:51:DE:AA:DA:E1:95:7B:2A:03:C6:A9:EE:99:76:9B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AE5C689850A3931FCA112E500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 32278 IP address blocks: 2001:470:470::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:89:85:0a:39:31:fc:a1:12:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=0f94a7c5-0709-4bac-8836-12fb69b060bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:b4:f0:00:1a:0f:54:8c:35:52:ab:b3:1f: c7:2d:16:94:a7:2e:3e:1d:60:d3:e8:68:7d:6d:ab: 2b:37:85:58:fb:87:6e:e1:49:c7:7e:ab:d7:dd:66: 5b:83:b0:d9:18:6e:d6:85:16:b4:8b:45:bc:74:9b: be:ec:ba:8d:33:a0:cf:63:2a:a2:66:5f:f3:0c:b5: 56:6e:72:aa:68:95:8c:69:fd:f9:95:20:43:72:8c: 44:48:b5:9f:3d:fd:6a:b4:1d:2b:be:4e:ef:0e:ea: e1:6d:c2:07:21:d0:9d:0b:75:66:f4:b0:6a:29:d5: 1e:11:9c:18:a9:29:82:03:8c:6d:07:7c:1e:87:d2: c5:bf:26:0c:20:26:6b:53:92:77:ce:e3:f1:5b:26: ff:ea:69:55:92:9f:a6:9c:2d:e7:b4:a8:d2:44:01: d9:51:35:0f:b2:4b:1e:ee:01:0e:45:88:d0:d1:cb: 97:03:df:99:28:02:5f:da:c4:1e:f1:6d:15:f9:1c: 4e:16:57:72:ce:3e:fe:55:c4:c5:10:82:88:5b:f5: d8:97:c5:ec:47:93:33:8d:42:7f:18:18:45:2a:1c: aa:3c:5e:03:81:35:04:28:38:84:db:b8:97:d4:4a: 69:8d:13:6c:fb:37:14:b7:d9:e5:53:cf:77:a4:30: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:EE:1D:AF:51:DE:AA:DA:E1:95:7B:2A:03:C6:A9:EE:99:76:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:470::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:35:d1:41:eb:a0:7d:57:ea:a0:51:70:b4:4b:c3:ba:4c:9b: 18:10:e3:30:78:58:61:03:ce:28:58:01:b3:10:af:35:0d:be: 5c:ba:af:4f:10:a6:a0:13:5e:79:04:42:b5:2b:91:58:01:80: 10:41:2c:0d:97:64:fa:ca:77:45:5d:e3:de:78:d6:22:80:2e: 42:40:ad:31:fa:50:d3:32:9f:ef:2f:25:f4:87:0c:17:5d:b4: e9:17:e3:57:c4:96:af:fd:1a:a8:fa:3f:c7:9a:59:86:59:e4: ea:34:17:fb:b3:b6:fe:86:45:e8:77:bd:c7:a8:b4:44:e7:73: 31:c0:4a:44:41:91:2e:bc:a7:56:e2:63:1a:13:a7:61:c3:be: d3:af:4d:70:f4:03:44:90:39:e1:5d:6a:87:63:a3:72:71:4a: cb:24:e2:3c:1e:38:09:7e:8f:42:75:27:c2:69:c1:7b:e3:d8: 82:7e:ac:cb:67:eb:95:bd:9c:c3:d8:dd:2d:f5:19:3a:ca:24: ba:d3:38:88:b5:c0:e6:41:ec:2e:af:16:a8:95:ce:03:b4:df: 84:cf:76:f8:f1:4d:0d:65:c4:a8:46:0a:23:97:eb:ea:77:b9: f3:11:f4:6e:30:65:0d:6f:b6:b9:5c:06:8c:46:56:ca:3f:fc: fa:81:cb:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErlxomFCjkx/KES5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MGY5NGE3YzUtMDcwOS00YmFjLTg4MzYtMTJmYjY5YjA2MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGO08AAaD1SMNVKrsx/HLRaUpy4+HWDT6Gh9 basrN4VY+4du4UnHfqvX3WZbg7DZGG7WhRa0i0W8dJu+7LqNM6DPYyqiZl/zDLVW bnKqaJWMaf35lSBDcoxESLWfPf1qtB0rvk7vDurhbcIHIdCdC3Vm9LBqKdUeEZwY qSmCA4xtB3weh9LFvyYMICZrU5J3zuPxWyb/6mlVkp+mnC3ntKjSRAHZUTUPskse 7gEORYjQ0cuXA9+ZKAJf2sQe8W0V+RxOFldyzj7+VcTFEIKIW/XYl8XsR5MzjUJ/ GBhFKhyqPF4DgTUEKDiE27iX1EppjRNs+zcUt9nlU893pDDUbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBY97h2vUd6q2uGVeyoDxqnumXabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RkZmY5YjYtNDI5NS0z YWMwLWExOTgtYzEyMjIxNDgxZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAU10UHroH1X6qBRcLRLw7pMmxgQ4zB4WGEDzihYAbMQrzUNvly6 r08QpqATXnkEQrUrkVgBgBBBLA2XZPrKd0Vd49541iKALkJArTH6UNMyn+8vJfSH DBddtOkX41fElq/9Gqj6P8eaWYZZ5Oo0F/uztv6GReh3vceotETnczHASkRBkS68 p1biYxoTp2HDvtOvTXD0A0SQOeFdaodjo3JxSssk4jweOAl+j0J1J8JpwXvj2IJ+ rMtn65W9nMPY3S31GTrKJLrTOIi1wOZB7C6vFqiVzgO034TPdvjxTQ1lxKhGCiOX 6+p3ufMR9G4wZQ1vtrlcBoxGVso//PqByyk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:47 2025 by rpki-client