$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa File: de5775c9-699c-34d1-9372-97684d19ea60.roa (raw, json) Hash identifier: XnYogClfbhhlblIhqGrYIFqd1X8xwN0rIAC41sIHgWY= Subject key identifier: DB:5C:A9:58:2C:1E:08:4D:61:76:E2:96:94:FA:4C:02:39:5B:21:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD0D648B4002DF6BB45C3F037 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 43641 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:48:b4:00:2d:f6:bb:45:c3:f0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=cadf2d3e-63f0-4412-aa59-712a264fe991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:f5:40:4e:fe:f3:19:6f:55:a3:58:b7:e1: 4b:cb:e8:61:2e:d6:b5:e1:ca:00:4e:6a:86:58:67: 7a:f4:45:80:62:32:98:5f:3f:85:f9:c4:a5:7e:c4: d2:62:a4:f2:a6:20:b2:e2:39:10:f2:f0:da:5c:54: 90:39:b9:60:de:1b:fa:d7:51:0e:c2:b4:cb:b6:92: 6b:b0:c2:27:46:c5:af:ea:7b:c6:ad:c1:3a:c7:34: 3d:62:da:cb:ba:07:9e:61:bd:ad:ef:1f:31:22:1e: 88:a3:36:66:a9:14:34:8e:8a:7a:f4:d1:5b:e6:ca: 9a:43:69:be:12:c3:77:6f:82:7f:41:69:16:bf:17: 67:76:42:ea:44:87:09:21:56:41:27:ca:fb:e3:b8: 71:f6:20:b9:75:bf:e1:2e:0d:99:53:a7:1f:d1:b2: e3:59:b7:20:ae:69:81:80:72:8f:45:80:a5:18:bd: a3:b0:b1:97:48:d3:d8:f4:c5:f4:f7:c2:91:b6:c2: 09:18:4a:35:89:55:e7:da:df:e9:7e:a3:0f:3e:8e: 68:a8:fd:e6:8c:7d:69:68:a5:92:51:8c:7e:eb:a0: 99:93:18:91:d0:15:b4:ba:24:b4:3c:ed:d7:c9:27: 77:34:25:79:2f:48:e3:e4:ba:ac:5b:17:26:a3:33: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5C:A9:58:2C:1E:08:4D:61:76:E2:96:94:FA:4C:02:39:5B:21:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2d:b7:7f:da:f6:57:72:ac:81:c7:32:44:59:e5:d7:20:2d: 34:49:1d:29:23:e6:ad:8c:e0:dc:c5:a6:d1:76:b8:8c:11:b7: 66:25:34:21:4c:10:97:96:49:2c:86:7b:e2:81:d7:78:03:67: c6:65:b2:b6:33:58:bd:c7:68:0b:97:51:e0:12:01:fe:3c:8e: 3b:01:48:06:58:97:3d:6e:04:f1:b6:54:b9:92:f3:08:b8:48: 44:15:55:b3:cc:be:bb:78:28:3c:62:00:35:e1:fb:61:ca:df: 31:b6:7c:5b:0a:af:fe:80:de:27:3d:3c:48:29:2a:cf:0b:8b: bb:0f:be:a5:f0:3a:44:97:27:1c:13:5a:1d:69:6b:4d:81:01: 6c:0c:35:dd:5c:a9:80:81:91:1f:e3:05:a1:ee:34:11:83:71: 5f:ac:c9:5e:5d:cd:38:06:f9:47:81:39:84:ab:62:2a:21:c1: 26:22:7b:1e:d6:25:2f:98:6f:94:15:18:85:16:c7:11:84:36: df:41:67:5a:ce:56:95:c9:97:c3:96:69:11:1b:26:c0:f6:a5: 88:9d:a5:70:fc:dd:fb:bb:cc:43:da:cb:ed:f2:b9:dc:67:45: 7c:2d:de:a7:37:81:7d:a7:21:b2:5d:28:a8:1e:ae:fd:ba:af: 6f:62:1e:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1ki0AC32u0XD8DcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk Y2FkZjJkM2UtNjNmMC00NDEyLWFhNTktNzEyYTI2NGZlOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIH1QE7+8xlvVaNYt+FLy+hhLta14coATmqG WGd69EWAYjKYXz+F+cSlfsTSYqTypiCy4jkQ8vDaXFSQOblg3hv611EOwrTLtpJr sMInRsWv6nvGrcE6xzQ9YtrLugeeYb2t7x8xIh6IozZmqRQ0jop69NFb5sqaQ2m+ EsN3b4J/QWkWvxdndkLqRIcJIVZBJ8r747hx9iC5db/hLg2ZU6cf0bLjWbcgrmmB gHKPRYClGL2jsLGXSNPY9MX098KRtsIJGEo1iVXn2t/pfqMPPo5oqP3mjH1paKWS UYx+66CZkxiR0BW0uiS0PO3XySd3NCV5L0jj5LqsWxcmozPJ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtcqVgsHghNYXbilpT6TAI5WyFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU1Nzc1YzktNjk5Yy0z NGQxLTkzNzItOTc2ODRkMTllYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYtt3/a9ldyrIHHMkRZ5dcgLTRJHSkj5q2M4NzFptF2uIwRt2Yl NCFMEJeWSSyGe+KB13gDZ8ZlsrYzWL3HaAuXUeASAf48jjsBSAZYlz1uBPG2VLmS 8wi4SEQVVbPMvrt4KDxiADXh+2HK3zG2fFsKr/6A3ic9PEgpKs8Li7sPvqXwOkSX JxwTWh1pa02BAWwMNd1cqYCBkR/jBaHuNBGDcV+syV5dzTgG+UeBOYSrYiohwSYi ex7WJS+Yb5QVGIUWxxGENt9BZ1rOVpXJl8OWaREbJsD2pYidpXD83fu7zEPay+3y udxnRXwt3qc3gX2nIbJdKKgerv26r29iHhM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:19 2025 by rpki-client