$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa File: d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa (raw, json) Hash identifier: gwagrYLDBayzxaAfxdCcMx0k8k2MXz3Pex1TypFnfFo= Subject key identifier: F0:C6:30:44:6B:5B:82:A3:5A:22:53:38:3D:50:62:D5:02:4F:9F:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC2E114A6494F556FA59B1F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 215546 IP address blocks: 2001:470:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:14:a6:49:4f:55:6f:a5:9b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=9931f1cf-4449-4d44-977e-652de640e35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:d2:1a:a0:03:e1:87:9f:32:3c:95:d9:9e: 8d:94:77:3f:8c:a6:f3:50:85:b1:ba:56:b0:c7:e3: b6:3c:cb:b1:64:8f:07:e1:49:63:c9:f6:f0:ba:f9: a6:f6:e4:cf:51:e7:8e:72:27:5d:4a:25:d4:ed:18: 84:d7:8a:19:6a:fe:51:92:5d:17:41:33:ae:44:a3: 34:fd:09:39:40:79:f1:cb:ca:e3:1a:37:4d:6f:fd: c9:be:aa:19:fc:d1:82:5d:af:47:b7:2d:6f:80:db: 2e:29:27:a5:24:a8:53:ff:de:83:28:31:9d:da:65: c0:9b:7b:53:49:fa:5d:cd:e7:87:5c:4b:2d:01:d0: 8b:08:aa:35:0c:1f:ee:c6:c8:34:f8:e8:3c:26:0e: 90:5b:ce:81:51:e2:48:86:f2:a4:c6:63:d6:3f:7e: 92:94:6c:2c:58:ae:8b:1f:8e:1e:40:49:45:d7:27: 43:d8:f9:47:5a:6a:d9:71:75:3b:f0:6c:a7:77:56: ed:61:c4:19:d7:65:85:91:a4:00:2e:55:51:b6:bc: e0:e2:31:ed:33:c3:a3:5e:58:c8:8b:15:24:b1:a4: e9:2d:23:d7:44:7d:6a:a8:4b:d2:fb:0f:a4:64:c5: bb:2e:17:11:22:ee:94:95:a6:b4:c1:de:ca:72:3f: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:30:44:6B:5B:82:A3:5A:22:53:38:3D:50:62:D5:02:4F:9F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0bc17c5-ba50-3779-a0dd-1b8f6daa4022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:387::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7e:d3:95:51:fc:f9:26:2f:ed:5b:3b:4e:0a:39:87:0c:80: 62:ee:09:29:4f:6f:80:c3:70:77:9f:77:27:fe:37:74:85:27: 24:73:93:48:e0:93:53:e7:df:a1:de:67:87:f5:ac:75:24:f6: a9:6b:db:36:55:66:af:13:b3:d4:a4:48:fe:23:d7:6e:51:8b: c3:e1:4f:2f:2b:ad:05:39:fa:6e:69:37:24:a4:86:4c:fc:b2: 83:93:e7:ea:76:0f:cd:8f:8a:6d:e2:98:ef:eb:3d:4b:00:12: 7c:6b:62:7e:b4:52:5b:9e:8c:6f:6e:51:32:42:dc:cd:8d:0a: f9:41:fe:49:7b:02:50:35:ae:97:d2:4c:fa:1f:cc:46:5e:d4: ab:1b:fa:c0:fb:bb:9a:b3:49:b8:60:f5:bf:0a:98:dd:c6:81: e6:d6:d1:69:a8:26:5c:14:f0:aa:45:79:91:76:4d:e9:a5:d9: da:c1:51:95:26:cb:03:9e:f6:6d:4a:32:60:3f:fd:1b:04:c6: 52:fb:e0:c9:a4:ff:1f:4c:59:8c:ac:aa:1b:a2:10:49:bb:0b: 81:9c:93:29:2b:ac:ae:f2:d7:8a:75:64:83:f4:8b:8c:b7:bd: 1d:b4:3d:fd:d7:13:31:15:3f:26:33:9f:0e:8d:36:97:4e:fe: 95:eb:9d:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4RSmSU9Vb6WbHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTkzMWYxY2YtNDQ0OS00ZDQ0LTk3N2UtNjUyZGU2NDBlMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3rSGqAD4YefMjyV2Z6NlHc/jKbzUIWxulaw x+O2PMuxZI8H4Uljyfbwuvmm9uTPUeeOciddSiXU7RiE14oZav5Rkl0XQTOuRKM0 /Qk5QHnxy8rjGjdNb/3JvqoZ/NGCXa9Hty1vgNsuKSelJKhT/96DKDGd2mXAm3tT SfpdzeeHXEstAdCLCKo1DB/uxsg0+Og8Jg6QW86BUeJIhvKkxmPWP36SlGwsWK6L H44eQElF1ydD2PlHWmrZcXU78Gynd1btYcQZ12WFkaQALlVRtrzg4jHtM8OjXljI ixUksaTpLSPXRH1qqEvS+w+kZMW7LhcRIu6Ulaa0wd7Kcj+07wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDGMERrW4KjWiJTOD1QYtUCT59LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDBiYzE3YzUtYmE1MC0z Nzc5LWEwZGQtMWI4ZjZkYWE0MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACl+05VR/PkmL+1bO04KOYcMgGLuCSlPb4DDcHefdyf+N3SFJyRz k0jgk1Pn36HeZ4f1rHUk9qlr2zZVZq8Ts9SkSP4j125Ri8PhTy8rrQU5+m5pNySk hkz8soOT5+p2D82Pim3imO/rPUsAEnxrYn60UluejG9uUTJC3M2NCvlB/kl7AlA1 rpfSTPofzEZe1Ksb+sD7u5qzSbhg9b8KmN3GgebW0WmoJlwU8KpFeZF2Teml2drB UZUmywOe9m1KMmA//RsExlL74Mmk/x9MWYysqhuiEEm7C4GckykrrK7y14p1ZIP0 i4y3vR20Pf3XEzEVPyYznw6NNpdO/pXrnSs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:56:09 2025 by rpki-client