$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa File: ddd8a278-bbaa-390a-8b80-774b2374116a.roa (raw, json) Hash identifier: e4CJyq0WuM1Hl0xQG9EgTayLn4Y7tf4v0ce29MQT9vI= Subject key identifier: 94:74:88:C4:7F:AC:DA:39:B8:88:5B:CD:66:E0:EF:D4:D0:8C:A1:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AEF9A8ED8D4660CCB3E1A4A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa Signing time: Fri 22 Aug 2025 01:30:22 +0000 ROA not before: Fri 22 Aug 2025 01:30:22 +0000 ROA not after: Thu 20 Nov 2025 02:30:22 +0000 asID: 41435 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:9a:8e:d8:d4:66:0c:cb:3e:1a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 01:30:22 2025 GMT Not After : Nov 20 02:30:22 2025 GMT Subject: CN=c9a06b7a-ec1e-4311-a5d9-76bf488dba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:80:ae:ac:4d:f4:02:5b:94:56:0c:aa:72: df:3f:6f:ee:af:22:45:0a:90:f7:ab:86:4e:99:a6: 20:32:b3:97:24:fb:a9:bc:92:29:23:df:0d:df:93: 7b:2d:1c:64:76:95:e8:dd:2a:60:e1:dc:61:38:70: d6:ae:53:7d:70:be:a1:c6:fe:b9:97:bd:34:f2:fb: f4:57:1d:f0:eb:d6:d2:7d:8b:a3:80:52:6f:79:97: bd:7f:55:fb:c7:fa:44:d9:10:f9:ff:8b:09:74:e8: e2:a8:d2:1f:45:99:d5:13:e7:62:5f:58:69:9c:09: 5a:6f:8a:10:58:cb:eb:31:34:b1:d9:a8:a4:c5:58: 5e:15:73:96:42:c1:dc:9d:02:4a:fb:ea:f7:05:7e: df:86:d0:04:a8:72:3a:de:fe:78:46:ab:d9:0a:7d: 42:4e:b9:79:16:63:1e:1f:f1:4e:4a:4d:6e:83:2d: 44:34:b3:5a:e1:e5:e0:41:81:3e:29:39:fa:88:ec: e2:8f:4b:82:a9:28:f5:8e:f4:f9:20:4a:80:fa:6f: 1e:a1:e0:2d:03:df:fa:55:8d:3d:ef:f7:f6:11:cf: 22:61:e7:ad:03:d1:e9:8a:f5:d2:42:04:39:6d:9d: e5:34:9a:e8:5a:c9:f7:45:74:e8:20:80:9b:3c:32: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:88:C4:7F:AC:DA:39:B8:88:5B:CD:66:E0:EF:D4:D0:8C:A1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:21:25:f2:f2:07:59:cf:1a:ba:5f:76:3f:b3:5d:5a:44:6b: c0:7a:fc:45:b6:e4:56:2a:33:bc:30:69:6d:2a:f2:3c:1d:c6: c5:16:b4:eb:f3:9c:90:c9:2e:e8:86:d9:bb:a7:a9:d9:a7:cc: de:f2:a5:cf:51:d4:a5:15:8c:33:23:a0:11:4e:15:fc:59:95: 8b:69:37:ee:23:18:a8:ff:1e:93:0b:e6:b8:0b:7c:bc:34:71: fc:65:58:d8:e1:64:4a:97:72:bf:54:fa:19:34:bc:5b:b3:4a: 8e:d8:32:73:11:67:33:09:52:57:11:60:6a:3e:59:b2:be:10: 67:42:aa:13:96:7e:15:11:d8:5b:22:b8:f1:23:6c:83:bb:4d: 5e:8a:0e:01:38:35:73:55:1b:ab:74:91:18:96:ae:a1:4d:93: 92:68:25:e6:ad:67:23:6a:1c:35:c6:f6:08:2f:a6:53:54:bd: e8:98:9d:96:95:ff:cd:cd:45:b0:0a:5a:6b:b2:0b:26:d9:97: e5:cd:7d:ae:0c:4c:62:d4:91:5d:32:5c:c3:08:31:69:82:a2: 13:36:8c:50:d9:36:9a:a8:e1:47:55:92:23:a6:ee:59:d0:fb: 41:48:66:f3:db:3d:fa:1b:9d:6b:1e:cc:a0:98:0a:e6:ea:fd: 9a:0f:44:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvmo7Y1GYMyz4aSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjAxMzAyMloXDTI1MTEyMDAyMzAyMlowLzEtMCsGA1UEAxMk YzlhMDZiN2EtZWMxZS00MzExLWE1ZDktNzZiZjQ4OGRiYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRqArqxN9AJblFYMqnLfP2/uryJFCpD3q4ZO maYgMrOXJPupvJIpI98N35N7LRxkdpXo3Spg4dxhOHDWrlN9cL6hxv65l7008vv0 Vx3w69bSfYujgFJveZe9f1X7x/pE2RD5/4sJdOjiqNIfRZnVE+diX1hpnAlab4oQ WMvrMTSx2aikxVheFXOWQsHcnQJK++r3BX7fhtAEqHI63v54RqvZCn1CTrl5FmMe H/FOSk1ugy1ENLNa4eXgQYE+KTn6iOzij0uCqSj1jvT5IEqA+m8eoeAtA9/6VY09 7/f2Ec8iYeetA9HpivXSQgQ5bZ3lNJroWsn3RXToIICbPDItIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJR0iMR/rNo5uIhbzWbg79TQjKFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGRkOGEyNzgtYmJhYS0z OTBhLThiODAtNzc0YjIzNzQxMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4hJfLyB1nPGrpfdj+zXVpEa8B6/EW25FYqM7wwaW0q8jwdxsUW tOvznJDJLuiG2bunqdmnzN7ypc9R1KUVjDMjoBFOFfxZlYtpN+4jGKj/HpML5rgL fLw0cfxlWNjhZEqXcr9U+hk0vFuzSo7YMnMRZzMJUlcRYGo+WbK+EGdCqhOWfhUR 2FsiuPEjbIO7TV6KDgE4NXNVG6t0kRiWrqFNk5JoJeatZyNqHDXG9ggvplNUveiY nZaV/83NRbAKWmuyCybZl+XNfa4MTGLUkV0yXMMIMWmCohM2jFDZNpqo4UdVkiOm 7lnQ+0FIZvPbPfobnWsezKCYCubq/ZoPROo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:30 2025 by rpki-client