$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa File: e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa (raw, json) Hash identifier: G4FAwYtNjsrYNvrv6Q0NSoIyRUNtko0lzWQVh7OCcWY= Subject key identifier: EC:EA:FC:B6:95:F2:DA:90:2D:EF:EC:E6:6E:38:C5:29:DC:1F:B7:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AC7110F4E1DBE9F469A2CED00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 31877 IP address blocks: 2001:470:38b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:0f:4e:1d:be:9f:46:9a:2c:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=f48ff66d-dee2-4132-8cfc-9ca784bd5ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:7e:20:bf:0d:65:3c:3c:b5:55:2b:bd:42: aa:ac:58:e8:d4:bb:9b:8c:e0:0b:a5:6d:4c:ae:66: ee:15:7f:fb:bd:65:76:0e:90:4e:4d:06:5d:a5:a1: 5b:44:12:c6:df:0d:c7:0e:f9:c7:6b:d5:0c:ed:57: 89:bc:80:51:87:49:e7:2a:8e:67:57:f3:4a:ca:fb: b3:19:e7:7c:eb:d4:a4:b8:6e:9a:20:43:a3:c9:28: c4:4e:25:72:44:94:4c:6e:c7:66:65:8d:6f:88:df: dd:29:d7:41:fb:b8:81:39:79:95:8c:cc:8d:36:74: b4:28:56:3a:21:85:b6:b5:dc:7a:f6:1f:7c:cd:1a: 42:de:54:5f:d5:f6:23:0e:31:0c:7d:bb:e3:7f:a8: 6a:6b:69:a3:92:38:5c:b6:df:64:f4:78:3a:09:44: e8:21:86:8a:43:79:ab:9a:30:17:8a:ef:cc:4c:2b: d8:ea:5e:a9:e1:60:36:63:13:72:3a:87:c3:46:59: 64:d4:e1:cc:d6:56:c9:d5:69:d2:58:d9:be:58:c6: 37:60:18:ef:df:1e:81:5c:33:e4:b9:f0:40:e7:40: 9f:d8:9a:5b:02:42:75:4b:d9:c4:97:cc:24:90:87: 68:ac:d4:06:bd:a4:9c:a4:e1:2b:af:2a:96:1d:ce: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:FC:B6:95:F2:DA:90:2D:EF:EC:E6:6E:38:C5:29:DC:1F:B7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:96:77:fe:75:e6:d1:0e:89:f1:d8:03:85:11:1d:65:6e:03: 14:e4:1f:c2:37:eb:75:76:05:4e:1c:4f:57:d9:a4:e6:a3:56: 86:cc:cf:ed:09:20:8b:75:39:2e:2d:3e:1e:83:da:49:a4:dc: f8:b9:10:dc:55:d5:18:7f:09:44:06:f1:0e:bf:b6:a8:a0:0c: 5d:2a:fe:bd:e9:25:9f:a4:4d:5f:ea:fd:08:53:d0:e8:52:a7: 58:c5:bf:cc:91:ef:35:d0:4e:d6:c3:6b:1d:5b:b6:2d:20:6f: 39:2f:5e:af:c4:0f:c9:76:cb:93:2d:3d:67:df:be:0f:c8:5d: b5:73:5b:24:24:59:b2:3f:80:8a:b6:20:3f:d5:d3:f9:9e:4c: 63:85:b8:bc:cd:8a:fb:e1:23:c9:c1:93:e6:56:79:a6:06:a7: fc:c9:f5:0d:ba:d6:7f:9f:c5:5c:56:90:d9:0f:06:b3:ea:d3: f8:81:ca:9e:17:3a:a7:5e:b8:c3:ed:e4:f2:2f:c8:0e:73:7e: 7a:94:5f:71:71:09:4f:de:88:bf:62:9b:3e:f3:6e:0e:9f:0f: a5:77:0c:70:2a:d5:d4:3e:99:ea:9c:16:df:fb:ee:64:31:9d: 5c:5f:38:09:a0:69:66:f9:aa:a9:33:20:3a:57:b5:78:53:7d: 51:4c:d8:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErHEQ9OHb6fRpos7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZjQ4ZmY2NmQtZGVlMi00MTMyLThjZmMtOWNhNzg0YmQ1Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZ+IL8NZTw8tVUrvUKqrFjo1LubjOALpW1M rmbuFX/7vWV2DpBOTQZdpaFbRBLG3w3HDvnHa9UM7VeJvIBRh0nnKo5nV/NKyvuz Ged869SkuG6aIEOjySjETiVyRJRMbsdmZY1viN/dKddB+7iBOXmVjMyNNnS0KFY6 IYW2tdx69h98zRpC3lRf1fYjDjEMfbvjf6hqa2mjkjhctt9k9Hg6CUToIYaKQ3mr mjAXiu/MTCvY6l6p4WA2YxNyOofDRllk1OHM1lbJ1WnSWNm+WMY3YBjv3x6BXDPk ufBA50Cf2JpbAkJ1S9nEl8wkkIdorNQGvaScpOErryqWHc6AmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzq/LaV8tqQLe/s5m44xSncH7fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI5ODBiNTQtODdmNi0z MWY1LTlhZTktZmFjNzM5ODZkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOWd/515tEOifHYA4URHWVuAxTkH8I363V2BU4cT1fZpOajVobM z+0JIIt1OS4tPh6D2kmk3Pi5ENxV1Rh/CUQG8Q6/tqigDF0q/r3pJZ+kTV/q/QhT 0OhSp1jFv8yR7zXQTtbDax1bti0gbzkvXq/ED8l2y5MtPWffvg/IXbVzWyQkWbI/ gIq2ID/V0/meTGOFuLzNivvhI8nBk+ZWeaYGp/zJ9Q261n+fxVxWkNkPBrPq0/iB yp4XOqdeuMPt5PIvyA5zfnqUX3FxCU/eiL9imz7zbg6fD6V3DHAq1dQ+meqcFt/7 7mQxnVxfOAmgaWb5qqkzIDpXtXhTfVFM2Cg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:43 2025 by rpki-client