$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa File: f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa (raw, json) Hash identifier: DkJFre4q/47F+x+HM/tIKIeB6/6NPqFTsfXbsIutxh4= Subject key identifier: 26:2D:0E:6A:D1:CD:4D:E9:B2:A2:F3:1D:A9:94:3F:28:CD:9D:3D:33 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F13D8261607FEF3B27BC90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 201754 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3d:82:61:60:7f:ef:3b:27:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=61d2b7f7-92d8-450f-b357-6623aa9836c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:8c:a1:4d:98:63:a6:bb:d5:a8:08:45:39: 9d:d0:df:83:77:57:73:8a:f0:0e:50:32:88:5c:f0: ee:05:85:87:7b:54:b7:cf:19:2a:51:fe:b9:87:c8: ea:04:c8:4a:25:2f:26:3c:b3:0a:8e:bc:14:a7:b1: 7f:e5:01:44:ff:a8:37:f0:1b:39:a8:d1:3c:63:d9: 78:93:76:f3:e4:96:58:aa:3e:76:86:f3:70:ab:eb: b4:10:95:17:78:d4:60:37:38:b5:de:8b:87:0a:03: 9c:77:48:81:60:06:69:76:96:61:21:b6:ea:e8:f7: a5:14:0b:b5:aa:1a:85:cb:9d:7c:49:24:ac:63:45: fd:fe:a2:03:5d:d0:7c:6b:00:c8:54:4e:ec:ac:17: 26:ad:74:bc:a2:c0:ae:46:3e:5b:90:8e:2f:b5:c6: 33:88:30:e5:f8:4d:ad:9b:62:62:c9:d6:47:2a:94: c4:5d:db:ab:36:dd:cc:8f:e4:a8:c3:01:3f:7c:79: b3:3f:d2:14:06:22:e4:14:52:db:b2:2d:ec:a0:d8: 88:df:92:6c:40:22:3c:c9:8d:0b:21:92:96:ae:eb: e2:56:1d:d1:e4:7c:b7:9a:e1:8c:1f:8d:8d:0c:cf: 7b:69:27:b9:de:7d:aa:fd:bf:39:72:39:5d:1d:c2: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2D:0E:6A:D1:CD:4D:E9:B2:A2:F3:1D:A9:94:3F:28:CD:9D:3D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e78ee1-a8e3-32ee-8d2d-0e2effd3325b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e0:58:19:ba:df:df:7f:81:0e:f8:4d:d1:8c:df:61:8a:2b: 7a:6e:ea:99:ca:2a:83:34:04:80:3f:6e:2f:e5:0b:40:5c:c9: d0:d9:6e:7a:e3:e6:0c:a1:6a:a4:0a:d3:27:0c:80:27:68:91: 07:d8:57:42:73:2a:69:de:47:0d:79:84:99:64:bd:e6:77:9a: 34:22:eb:ee:89:ac:0b:d5:bb:9a:04:c8:2c:5f:11:48:12:f9: f8:47:a1:c5:89:fa:ee:e0:05:48:a7:40:1a:46:4f:f7:6d:db: 5d:fd:e9:28:c6:99:b0:23:fd:4e:6f:14:fe:59:6d:a5:08:23: d8:e5:d8:50:c1:78:53:1a:26:da:65:03:e6:8f:91:c6:fb:5b: 2e:ec:f5:34:5c:0d:1a:1d:85:15:58:fa:b6:a7:44:b4:f5:80: c7:0a:25:70:70:b2:0d:0a:ec:7f:12:38:f5:02:4f:60:0d:f9: 2d:3f:6b:3d:61:ab:e1:b7:29:0c:92:c3:16:6c:f5:e2:a0:0e: 00:6d:7a:2a:43:6c:a2:13:63:24:7e:f1:57:8b:e8:79:1e:49: 7e:b3:bc:ff:12:80:ad:b6:d8:d5:65:06:5f:6b:be:03:0e:96: 6a:fb:a2:74:09:2d:25:2e:6b:a0:82:67:4c:02:50:8d:0a:91: 85:dc:38:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8T2CYWB/7zsnvJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NjFkMmI3ZjctOTJkOC00NTBmLWIzNTctNjYyM2FhOTgzNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeeMoU2YY6a71agIRTmd0N+Dd1dzivAOUDKI XPDuBYWHe1S3zxkqUf65h8jqBMhKJS8mPLMKjrwUp7F/5QFE/6g38Bs5qNE8Y9l4 k3bz5JZYqj52hvNwq+u0EJUXeNRgNzi13ouHCgOcd0iBYAZpdpZhIbbq6PelFAu1 qhqFy518SSSsY0X9/qIDXdB8awDIVE7srBcmrXS8osCuRj5bkI4vtcYziDDl+E2t m2JiydZHKpTEXdurNt3Mj+SowwE/fHmzP9IUBiLkFFLbsi3soNiI35JsQCI8yY0L IZKWruviVh3R5Hy3muGMH42NDM97aSe53n2q/b85cjldHcLJ8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCYtDmrRzU3psqLzHamUPyjNnT0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjdlNzhlZTEtYThlMy0z MmVlLThkMmQtMGUyZWZmZDMzMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADngWBm6399/gQ74TdGM32GKK3pu6pnKKoM0BIA/bi/lC0BcydDZ bnrj5gyhaqQK0ycMgCdokQfYV0JzKmneRw15hJlkveZ3mjQi6+6JrAvVu5oEyCxf EUgS+fhHocWJ+u7gBUinQBpGT/dt21396SjGmbAj/U5vFP5ZbaUII9jl2FDBeFMa JtplA+aPkcb7Wy7s9TRcDRodhRVY+ranRLT1gMcKJXBwsg0K7H8SOPUCT2AN+S0/ az1hq+G3KQySwxZs9eKgDgBteipDbKITYyR+8VeL6HkeSX6zvP8SgK222NVlBl9r vgMOlmr7onQJLSUua6CCZ0wCUI0KkYXcOMw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:55:33 2025 by rpki-client