$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dea237bc-7dfb-3fb8-a27d-7cfeeeb7aca6.roa File: dea237bc-7dfb-3fb8-a27d-7cfeeeb7aca6.roa (raw, json) Hash identifier: qYjRXHPSNhq2bHAVnvphS7cK+dsG0gfZxurEuLwAjFE= Subject key identifier: DA:02:11:72:9F:CB:81:08:75:2B:5D:0F:97:A6:73:5C:AA:2E:31:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ACB41027CD9DBF8493ADC9480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dea237bc-7dfb-3fb8-a27d-7cfeeeb7aca6.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 23532 IP address blocks: 2001:470:3dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:02:7c:d9:db:f8:49:3a:dc:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=555ac2aa-2bba-4a1f-ac6b-41dd8ce47edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:c6:83:0b:1f:9c:d9:a7:30:38:0f:6a:8c: da:9f:f1:6e:36:93:e1:f4:02:3a:2a:58:3f:e5:f0: 0a:86:3d:48:ae:74:c1:a8:59:0b:25:cc:a5:d0:5a: 17:c2:93:05:0c:19:9a:89:60:80:83:1e:f3:0d:28: 52:da:d7:d2:30:66:0c:23:d0:fe:22:4e:1b:46:0d: 9f:92:ab:b7:85:43:26:e4:69:2d:89:e1:ab:eb:4b: 7b:be:6f:14:07:e9:e9:cc:b3:a0:61:7e:23:12:b5: 26:e2:a5:10:7b:51:09:d6:da:ea:e7:ba:55:98:17: fd:e9:3c:3c:45:37:13:10:24:07:ef:82:45:be:f5: da:04:20:50:cb:91:a0:34:0f:34:c6:99:77:bd:c1: c4:dc:93:02:b2:bf:9b:f9:94:02:67:e3:13:20:92: e1:cd:c8:7c:50:07:f4:16:3a:ad:f4:c5:38:a8:72: 51:ab:9c:16:5d:78:17:08:7d:28:26:c3:c9:1c:2d: 06:18:63:76:d6:c0:80:a5:9f:00:0d:70:0e:67:29: 33:fc:36:96:05:b8:9e:f8:fc:94:12:57:af:e7:ae: 7d:e0:84:d7:e3:61:d6:ca:23:a8:43:77:44:2b:aa: 78:c7:b6:ec:d2:81:0b:9b:e9:9b:ef:12:49:e8:ea: 60:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:11:72:9F:CB:81:08:75:2B:5D:0F:97:A6:73:5C:AA:2E:31:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dea237bc-7dfb-3fb8-a27d-7cfeeeb7aca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3dd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bd:83:26:3c:ae:61:69:4a:25:dc:79:d5:87:be:c7:d3:23: 9c:86:6a:3d:64:ae:5e:90:6a:01:af:19:d9:79:f4:58:b4:59: f6:c2:5a:d3:ec:73:f8:20:a2:d5:a8:ec:a1:21:74:a9:d5:c6: 19:2a:57:28:b1:3a:54:4d:f9:b9:f5:98:b7:59:69:52:b8:60: e1:ef:42:9a:76:16:1c:0a:e2:fb:38:0e:0f:17:da:90:30:b6: 19:f7:f0:fe:1c:02:27:fe:51:ad:53:b2:f7:7a:09:43:78:8e: b9:ae:99:e0:2e:88:43:ec:a5:7f:b1:dd:77:ba:ba:4f:83:a7: 2c:43:60:7a:69:8a:1d:dc:cf:17:56:d6:14:f7:9e:78:fe:f2: eb:3c:a1:5d:60:6a:4d:0e:65:3b:fb:e1:83:a5:e3:bd:c3:02: 28:2f:f8:96:a0:3a:95:ee:85:2b:9a:7b:6e:db:9b:a5:e8:57: 68:64:67:19:79:76:a2:86:c8:ae:86:80:20:51:3a:ef:0a:1f: cb:00:8c:6e:05:eb:af:20:b3:a2:8c:16:63:98:77:76:5f:1d: 2f:fd:cf:8e:94:7c:60:e5:c0:4b:41:a4:9a:7b:c6:bc:65:2c: c4:50:a5:19:8e:cb:8a:a6:2f:2f:fc:8a:d1:03:0d:1f:76:ad: 0a:a5:33:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQQJ82dv4STrclIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NTU1YWMyYWEtMmJiYS00YTFmLWFjNmItNDFkZDhjZTQ3ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7LGgwsfnNmnMDgPaozan/FuNpPh9AI6Klg/ 5fAKhj1IrnTBqFkLJcyl0FoXwpMFDBmaiWCAgx7zDShS2tfSMGYMI9D+Ik4bRg2f kqu3hUMm5GktieGr60t7vm8UB+npzLOgYX4jErUm4qUQe1EJ1trq57pVmBf96Tw8 RTcTECQH74JFvvXaBCBQy5GgNA80xpl3vcHE3JMCsr+b+ZQCZ+MTIJLhzch8UAf0 Fjqt9MU4qHJRq5wWXXgXCH0oJsPJHC0GGGN21sCApZ8ADXAOZykz/DaWBbie+PyU Elev56594ITX42HWyiOoQ3dEK6p4x7bs0oELm+mb7xJJ6OpgwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoCEXKfy4EIdStdD5emc1yqLjFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGVhMjM3YmMtN2RmYi0z ZmI4LWEyN2QtN2NmZWVlYjdhY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGW9gyY8rmFpSiXcedWHvsfTI5yGaj1krl6QagGvGdl59Fi0WfbC WtPsc/ggotWo7KEhdKnVxhkqVyixOlRN+bn1mLdZaVK4YOHvQpp2FhwK4vs4Dg8X 2pAwthn38P4cAif+Ua1Tsvd6CUN4jrmumeAuiEPspX+x3Xe6uk+DpyxDYHppih3c zxdW1hT3nnj+8us8oV1gak0OZTv74YOl473DAigv+JagOpXuhSuae27bm6XoV2hk Zxl5dqKGyK6GgCBROu8KH8sAjG4F668gs6KMFmOYd3ZfHS/9z46UfGDlwEtBpJp7 xrxlLMRQpRmOy4qmLy/8itEDDR92rQqlM4I= -----END CERTIFICATE-----Generated at Sat Aug 23 13:56:08 2025 by rpki-client