$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa File: b02811c2-ab72-3845-927e-12fb04c97d6f.roa (raw, json) Hash identifier: sOj0bK/fme+TqJ7+GvktnZBjfg4opUcYqsklLascyPU= Subject key identifier: 86:86:8F:55:5E:F0:8E:71:8C:F8:1A:01:D1:D2:35:FB:4A:F6:DA:49 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285849CBCF8F4907CFE195990FC000 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 7782 IP address blocks: 2001:4948::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8f:49:07:cf:e1:95:99:0f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=be0ba7a2-a947-4b1a-a058-bdb2c0f96d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:dc:ad:ca:9c:21:70:79:ac:7a:d8:b2:15: b2:ba:4f:85:33:d1:6c:f1:f9:c6:b3:0c:71:92:40: 73:32:6f:b9:16:1c:01:be:24:c1:d1:57:76:2a:05: 0d:41:a0:f7:f0:86:c9:9b:3b:ec:96:4b:3d:4e:76: 9e:99:d7:98:db:ae:1b:98:2f:92:64:77:74:ad:47: e1:34:f7:da:d7:75:8e:c6:37:22:f3:a6:40:25:49: 07:e8:08:19:1a:57:36:1e:92:48:bd:5d:2f:4a:43: bb:ec:7a:6c:2f:aa:64:a1:7d:f2:37:4a:5d:48:39: 2e:95:ae:97:9b:54:89:25:8b:55:99:14:24:18:ec: f7:9b:b2:82:ac:cb:34:ef:44:3f:1a:fb:11:2d:2a: c5:31:37:88:e6:12:31:a4:ce:8d:0d:92:5c:f4:79: f4:48:05:c6:79:2b:f0:ea:39:63:e4:46:f8:25:15: 47:a0:24:27:c1:d7:ba:32:bd:7a:53:95:50:22:24: ee:fd:73:4f:03:c5:42:e0:9a:3f:76:ad:3c:86:92: e0:df:c2:55:db:76:88:2a:78:0c:b5:ce:3b:76:b6: bc:73:ae:dd:9d:e2:37:cc:63:98:5e:37:47:1a:8e: 24:f1:67:00:12:9e:36:ea:2d:31:01:a6:00:8b:53: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:86:8F:55:5E:F0:8E:71:8C:F8:1A:01:D1:D2:35:FB:4A:F6:DA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2001:4948::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:54:e2:84:94:16:ec:16:fe:ad:e5:40:b3:48:1f:9b:16:83: 08:dd:24:e4:8b:ce:e1:cf:ca:76:0a:46:a5:ec:e1:64:eb:e6: 74:c2:1d:71:d0:03:ff:ba:7d:9b:7e:3e:a5:43:35:f6:87:d1: ea:64:9b:ac:4d:0b:2a:c2:46:f4:08:66:b4:22:36:0f:39:5c: 2e:1f:e0:da:df:7d:5e:f0:d9:47:81:c4:f1:ec:04:dd:4f:40: 50:9d:ec:9c:90:b8:12:d0:99:5b:0d:7d:ba:ce:74:76:15:b0: 7e:be:24:65:ac:c8:9f:54:62:f5:d1:75:c9:0b:d4:b2:cd:37: 5e:25:43:7c:4f:ef:0f:fb:73:54:f2:dc:ec:eb:12:98:55:60: 24:29:5c:7c:37:37:bf:7f:bb:c6:07:3c:ac:79:63:c0:fd:57: 97:ee:ae:e3:35:7b:f2:5b:e7:c9:ec:7b:c0:a7:45:42:b9:3c: 33:67:ee:06:76:ce:34:98:fd:73:41:ee:89:d2:d5:3c:a2:32: e0:c1:64:7e:07:ac:a6:97:08:0f:dd:eb:a6:a8:f4:6d:28:36: 0c:9d:84:0c:6c:98:e8:d8:f3:18:12:17:bc:c0:8f:9e:49:40: 27:73:67:5e:50:3d:11:7d:90:99:4a:c9:0f:44:fc:3f:2b:1b: cc:19:14:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnLz49JB8/hlZkPwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YmUwYmE3YTItYTk0Ny00YjFhLWEwNTgtYmRiMmMwZjk2ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfncrcqcIXB5rHrYshWyuk+FM9Fs8fnGswxx kkBzMm+5FhwBviTB0Vd2KgUNQaD38IbJmzvslks9TnaemdeY264bmC+SZHd0rUfh NPfa13WOxjci86ZAJUkH6AgZGlc2HpJIvV0vSkO77HpsL6pkoX3yN0pdSDkula6X m1SJJYtVmRQkGOz3m7KCrMs070Q/GvsRLSrFMTeI5hIxpM6NDZJc9Hn0SAXGeSvw 6jlj5Eb4JRVHoCQnwde6Mr16U5VQIiTu/XNPA8VC4Jo/dq08hpLg38JV23aIKngM tc47dra8c67dneI3zGOYXjdHGo4k8WcAEp426i0xAaYAi1OWEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaGj1Ve8I5xjPgaAdHSNftK9tpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYjAyODExYzItYWI3Mi0z ODQ1LTkyN2UtMTJmYjA0Yzk3ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJSDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdVOKElBbsFv6t5UCzSB+bFoMI3STki87hz8p2Ckal7OFk6+Z0wh1x 0AP/un2bfj6lQzX2h9HqZJusTQsqwkb0CGa0IjYPOVwuH+Da331e8NlHgcTx7ATd T0BQneyckLgS0JlbDX26znR2FbB+viRlrMifVGL10XXJC9SyzTdeJUN8T+8P+3NU 8tzs6xKYVWAkKVx8Nze/f7vGBzyseWPA/VeX7q7jNXvyW+fJ7HvAp0VCuTwzZ+4G ds40mP1zQe6J0tU8ojLgwWR+B6ymlwgP3eumqPRtKDYMnYQMbJjo2PMYEhe8wI+e SUAnc2deUD0RfZCZSskPRPw/KxvMGRTH -----END CERTIFICATE-----Generated at Sun Jun 15 23:16:10 2025 by rpki-client