$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0a43ec-4dfa-3da5-8a32-8cd8b00e3197.roa File: ee0a43ec-4dfa-3da5-8a32-8cd8b00e3197.roa (raw, json) Hash identifier: An8HDGfy1Bv9UUSRuvjwqf1fNzLWS0ENqfJJrV3zesQ= Subject key identifier: 6B:87:2A:B6:B5:AA:89:58:62:B9:1C:C5:80:10:96:97:71:01:B2:FB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F12EE441640302D1924838 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0a43ec-4dfa-3da5-8a32-8cd8b00e3197.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 211156 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2e:e4:41:64:03:02:d1:92:48:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ed4fb989-e561-4e07-bf5b-992ec5c4ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:6d:da:ca:8d:bb:1a:48:f6:02:47:7d:de: ed:a0:8d:b3:8e:9a:e2:62:fd:1a:e1:aa:1d:d4:d8: 8e:49:80:59:d2:b2:e6:93:08:ff:8e:52:bb:34:6b: 20:6a:05:9f:1e:01:11:54:40:b4:fd:43:f0:19:8b: 7d:75:fb:4e:e7:3b:ab:a3:2c:89:b3:14:08:d9:9e: 06:58:74:82:fe:da:00:5c:72:fd:a0:8b:98:36:48: b6:ff:53:b3:d3:aa:88:82:08:4f:ca:33:9f:5d:03: 60:3c:5b:c6:b4:83:2d:51:d1:50:62:5f:2c:b2:0f: 3c:83:cb:70:48:a6:70:5a:bb:65:8f:05:88:86:03: f0:64:21:c1:4c:ca:fc:da:be:c0:c4:b1:7e:93:ae: 9b:bd:66:fa:4d:ce:9e:a1:a6:29:c7:de:59:fa:52: 41:8e:15:48:4f:52:d9:b4:e7:57:14:d6:cd:b0:9a: 47:30:11:fb:8b:c5:8f:50:93:9b:c9:20:80:f1:ca: c3:4d:37:32:db:45:b4:a8:d1:ee:6d:9b:d3:9b:fa: f9:25:02:42:ea:47:aa:0d:b4:94:b9:86:ef:40:d3: f2:ca:e0:43:6b:e0:42:89:a1:af:f6:e2:46:c5:ad: b6:39:dd:5e:e8:72:40:96:10:52:b4:95:e9:47:11: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:87:2A:B6:B5:AA:89:58:62:B9:1C:C5:80:10:96:97:71:01:B2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee0a43ec-4dfa-3da5-8a32-8cd8b00e3197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:31:d7:4d:d5:e7:81:7f:f1:b4:d9:e3:40:83:04:69:73:63: cc:e1:6d:59:98:d2:12:7a:3c:28:da:92:5e:4a:55:33:3e:40: 74:f6:c6:98:77:3e:61:a9:98:79:0e:3d:9a:78:8e:0c:6f:84: f3:4c:73:49:eb:52:05:d9:43:fc:99:a6:a6:cd:ff:97:53:fa: e9:b9:0b:2a:97:4d:ac:7b:b8:04:ec:6b:80:41:f7:fe:13:8f: 09:ae:4c:d1:09:46:0c:41:a3:6a:1e:48:b1:3e:5d:48:6c:0a: cd:51:5e:87:f8:2f:96:dd:2a:03:70:6f:d2:7a:4b:6c:2b:6d: 1f:4a:84:e6:21:8e:23:e9:57:f5:dc:06:07:f8:0c:4a:5b:34: 57:a0:91:b1:1d:f5:ea:cb:b2:6f:dd:7d:62:46:8f:9b:86:dc: 9c:3b:49:10:ca:f4:9e:5a:68:6b:3f:d7:c3:2d:b7:a8:fe:78: 30:c5:c1:3a:8a:ba:c1:f5:1e:b2:5e:1c:20:1e:fc:ea:e9:77: c8:61:d7:50:04:1b:e7:55:c1:65:cc:91:48:cf:75:74:f1:0d: 06:7e:ab:e9:39:8a:0b:75:43:4c:06:be:4a:ee:53:07:82:03: 70:fd:62:e4:f4:2f:e2:86:81:14:8a:bb:a2:06:78:ea:d2:70: 2c:64:16:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8S7kQWQDAtGSSDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ0ZmI5ODktZTU2MS00ZTA3LWJmNWItOTkyZWM1YzRiYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvxt2sqNuxpI9gJHfd7toI2zjpriYv0a4aod 1NiOSYBZ0rLmkwj/jlK7NGsgagWfHgERVEC0/UPwGYt9dftO5zuroyyJsxQI2Z4G WHSC/toAXHL9oIuYNki2/1Oz06qIgghPyjOfXQNgPFvGtIMtUdFQYl8ssg88g8tw SKZwWrtljwWIhgPwZCHBTMr82r7AxLF+k66bvWb6Tc6eoaYpx95Z+lJBjhVIT1LZ tOdXFNbNsJpHMBH7i8WPUJObySCA8crDTTcy20W0qNHubZvTm/r5JQJC6keqDbSU uYbvQNPyyuBDa+BCiaGv9uJGxa22Od1e6HJAlhBStJXpRxHpPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGuHKra1qolYYrkcxYAQlpdxAbL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWUwYTQzZWMtNGRmYS0z ZGE1LThhMzItOGNkOGIwMGUzMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYx103V54F/8bTZ40CDBGlzY8zhbVmY0hJ6PCjakl5KVTM+QHT2 xph3PmGpmHkOPZp4jgxvhPNMc0nrUgXZQ/yZpqbN/5dT+um5CyqXTax7uATsa4BB 9/4TjwmuTNEJRgxBo2oeSLE+XUhsCs1RXof4L5bdKgNwb9J6S2wrbR9KhOYhjiPp V/XcBgf4DEpbNFegkbEd9erLsm/dfWJGj5uG3Jw7SRDK9J5aaGs/18Mtt6j+eDDF wTqKusH1HrJeHCAe/Orpd8hh11AEG+dVwWXMkUjPdXTxDQZ+q+k5igt1Q0wGvkru UweCA3D9YuT0L+KGgRSKu6IGeOrScCxkFtE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:28 2025 by rpki-client