$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa File: e414815d-fe75-3425-ad59-194ad9e2d24c.roa (raw, json) Hash identifier: ONxJKzLi8DhvOIvlSLOXCe221nt5TDm7HIPM/dBSt3E= Subject key identifier: 39:C8:8B:E1:12:58:83:FC:1F:72:D5:95:7A:3D:8F:91:D0:7A:6D:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F14FDC3F446DE5C8453FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 151872 IP address blocks: 2001:470:338::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4f:dc:3f:44:6d:e5:c8:45:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=15f59f4e-17a5-49a4-9b3e-430c06e8e7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:66:34:13:e7:91:19:2a:69:98:3e:8f:ab:47: c3:d5:21:e5:2d:a1:b7:6f:dd:8b:31:2c:ac:98:13: 21:c4:9a:58:65:ad:8e:e0:bd:f8:c2:6a:d0:28:22: 54:7b:2f:6f:48:25:34:0d:77:1d:25:a1:3e:17:87: 15:7c:2e:89:3c:03:10:62:57:dd:88:b4:f7:f0:3e: 42:6e:37:89:06:83:6d:04:03:fa:6d:97:e1:c0:bb: d4:4b:7a:55:69:73:a3:0c:d7:91:f2:de:9e:dc:19: 86:17:5f:5b:14:27:72:3b:32:12:df:40:ca:b1:a6: ef:73:7b:21:ba:81:dc:cc:19:c1:30:75:c8:3c:a8: b6:d6:91:8d:94:0e:f0:a5:cc:77:7f:e4:26:44:da: 8a:41:fd:39:00:f7:bc:c9:6e:85:e2:7c:47:32:e8: 0d:95:12:dd:0a:4d:5a:02:23:a9:2e:96:3f:9e:50: bd:6d:43:79:99:61:c0:79:a4:49:dd:17:9b:84:c8: 9a:e5:66:d5:43:75:a7:14:88:c4:b0:41:43:70:93: 7f:6a:af:45:65:11:20:7d:40:25:a9:7b:9d:c6:15: 4d:9d:08:5c:ba:f5:53:79:c8:4a:fc:6e:46:95:36: e4:b6:60:57:14:fc:81:e5:a8:fe:52:dd:d5:a3:41: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C8:8B:E1:12:58:83:FC:1F:72:D5:95:7A:3D:8F:91:D0:7A:6D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:338::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f6:b3:b4:33:d1:b8:f6:76:9e:2b:44:b1:18:39:a2:35:9e: f4:94:fa:6f:2d:59:88:48:ca:2b:76:ac:ba:d3:4b:d7:1c:bc: 57:4e:af:2b:1f:9b:4c:d2:87:c3:0a:74:ed:f3:41:fd:d8:d4: ee:19:e7:7f:1b:71:df:2f:cf:d3:e1:be:a0:97:ee:16:9a:43: 02:bb:40:51:7e:3b:37:b7:1f:56:46:b2:66:f3:c9:c3:68:2d: b7:bf:ce:a7:37:a5:81:92:a6:7d:df:5b:72:4d:0e:ca:d8:a6: c6:4a:1f:24:82:a9:38:84:c7:e6:db:e4:da:2d:aa:1d:ad:f9: 72:81:ac:71:64:18:0b:04:b8:a4:31:32:5b:1c:0f:ec:bb:6e: 47:16:50:45:c9:35:62:db:85:a4:87:12:1e:1c:21:aa:06:27: f6:d4:e7:75:5b:9a:17:ac:5b:fd:6a:2c:a3:8b:45:9f:6b:38: 63:38:96:64:44:2b:d3:db:4f:f9:00:bf:73:d6:40:8e:78:e1: e6:51:46:06:c5:e9:c5:68:41:55:09:22:2d:17:53:97:94:8f: 98:ca:14:ed:ca:99:03:5d:c4:23:94:37:41:f7:67:f9:2d:12: f7:5a:79:8d:4f:dc:2b:1b:d7:50:5b:50:e0:78:37:3b:f5:d8: 55:cc:54:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8U/cP0Rt5chFP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MTVmNTlmNGUtMTdhNS00OWE0LTliM2UtNDMwYzA2ZThlN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWY0E+eRGSppmD6Pq0fD1SHlLaG3b92LMSys mBMhxJpYZa2O4L34wmrQKCJUey9vSCU0DXcdJaE+F4cVfC6JPAMQYlfdiLT38D5C bjeJBoNtBAP6bZfhwLvUS3pVaXOjDNeR8t6e3BmGF19bFCdyOzIS30DKsabvc3sh uoHczBnBMHXIPKi21pGNlA7wpcx3f+QmRNqKQf05APe8yW6F4nxHMugNlRLdCk1a AiOpLpY/nlC9bUN5mWHAeaRJ3RebhMia5WbVQ3WnFIjEsEFDcJN/aq9FZREgfUAl qXudxhVNnQhcuvVTechK/G5GlTbktmBXFPyB5aj+Ut3Vo0FwHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnIi+ESWIP8H3LVlXo9j5HQem2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTQxNDgxNWQtZmU3NS0z NDI1LWFkNTktMTk0YWQ5ZTJkMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAT2s7Qz0bj2dp4rRLEYOaI1nvSU+m8tWYhIyit2rLrTS9ccvFdO rysfm0zSh8MKdO3zQf3Y1O4Z538bcd8vz9PhvqCX7haaQwK7QFF+Oze3H1ZGsmbz ycNoLbe/zqc3pYGSpn3fW3JNDsrYpsZKHySCqTiEx+bb5Notqh2t+XKBrHFkGAsE uKQxMlscD+y7bkcWUEXJNWLbhaSHEh4cIaoGJ/bU53VbmhesW/1qLKOLRZ9rOGM4 lmREK9PbT/kAv3PWQI544eZRRgbF6cVoQVUJIi0XU5eUj5jKFO3KmQNdxCOUN0H3 Z/ktEvdaeY1P3Csb11BbUOB4Nzv12FXMVCA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:35 2025 by rpki-client