$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa File: 09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa (raw, json) Hash identifier: 4FSO09X9XXHSy93muATou60ZKYx9jWsgMyz6rO8lbsY= Subject key identifier: A1:25:C1:C6:25:4F:FB:97:A9:76:1A:52:C2:12:C1:97:B8:A7:99:4E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC8DA917FD058A91CD100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 17117 IP address blocks: 2001:470:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c8:da:91:7f:d0:58:a9:1c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=195036e8-6117-4fa0-80a2-55d30f544b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:06:fc:e1:08:a4:7e:2e:73:e9:ac:47:96: 28:77:39:07:d2:fb:36:88:b4:37:0a:84:1c:d8:12: b3:6d:5e:6e:c4:43:31:f2:89:58:b8:7c:84:85:64: 4d:5d:21:26:c5:8a:cd:dd:25:f5:f0:99:36:ed:d1: 92:d6:89:58:64:de:47:ec:82:f8:0b:7c:63:34:37: 70:65:00:36:ed:0d:c8:57:df:71:09:ff:c8:58:a0: bd:1a:2c:34:60:36:55:55:6b:aa:0a:bb:a4:a4:39: ee:05:74:75:d4:39:31:49:43:f4:15:c3:69:06:9f: 01:43:d5:5b:88:16:22:90:ea:d5:d1:9a:2e:6d:97: 88:1e:37:6b:29:40:e7:b1:2f:e2:97:d0:9e:6b:54: c9:0b:69:a8:3e:88:bb:fb:3d:c2:5c:35:61:6d:11: 3b:92:a2:07:9e:f6:6d:20:a1:f9:1c:f1:3e:3b:28: d7:b6:ea:c6:33:03:01:2e:eb:e1:1a:73:2a:8c:40: 3e:26:89:04:5a:6d:e1:25:bd:49:3c:de:23:c5:5a: 1c:2d:d1:20:f5:eb:cb:8f:76:aa:ef:e2:b6:9c:db: 5f:a2:b6:3c:8e:4e:4a:6e:55:45:4c:1a:5c:bd:be: a3:36:40:c3:d9:a8:7a:bf:a9:c1:35:5c:15:7a:44: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:C1:C6:25:4F:FB:97:A9:76:1A:52:C2:12:C1:97:B8:A7:99:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:152::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:60:d1:03:90:08:66:f2:9b:b9:53:a2:4e:a7:31:d7:73:b6: f2:9d:58:00:ed:3b:f7:a8:eb:88:4b:76:55:b0:46:4d:69:d6: 31:5f:5f:e6:64:30:43:95:e6:a6:32:26:ca:f9:af:6a:3f:3e: 4b:66:aa:13:6d:b2:98:2a:12:75:6a:a6:6b:3b:35:bd:7c:67: 8b:57:a5:64:4d:57:10:0b:23:0e:1b:fd:6a:cf:9c:bb:81:95: ac:ae:7b:13:85:3d:16:7e:e2:be:fb:5b:2d:a6:b4:28:78:e5: 13:f0:ae:6e:d1:8a:bd:5f:9b:d1:a5:65:11:2b:37:7a:75:53: 15:c4:5e:17:26:30:f1:2b:82:de:b0:5f:8a:4a:e3:e0:1e:de: 6d:90:e9:18:cb:69:e8:30:36:cd:57:be:66:5b:84:63:5c:c5: de:35:89:7e:5c:0d:d0:10:9d:bc:c0:6d:76:53:ae:6b:8b:88: da:f2:e3:3d:b3:ab:ff:b3:52:44:43:2c:84:0c:12:43:52:68: b7:04:e6:16:b0:9b:a7:ac:bb:35:3b:b5:f4:db:e7:2c:c7:a0: 98:b7:44:b3:68:da:26:e9:5c:d6:03:4d:2c:49:b9:a4:f2:b3: d8:3b:d3:a5:34:fa:07:4c:ce:fb:29:22:97:7d:62:f2:f3:ae: 40:3d:20:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8jakX/QWKkc0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTk1MDM2ZTgtNjExNy00ZmEwLTgwYTItNTVkMzBmNTQ0YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgoG/OEIpH4uc+msR5YodzkH0vs2iLQ3CoQc 2BKzbV5uxEMx8olYuHyEhWRNXSEmxYrN3SX18Jk27dGS1olYZN5H7IL4C3xjNDdw ZQA27Q3IV99xCf/IWKC9Giw0YDZVVWuqCrukpDnuBXR11DkxSUP0FcNpBp8BQ9Vb iBYikOrV0ZoubZeIHjdrKUDnsS/il9Cea1TJC2moPoi7+z3CXDVhbRE7kqIHnvZt IKH5HPE+OyjXturGMwMBLuvhGnMqjEA+JokEWm3hJb1JPN4jxVocLdEg9evLj3aq 7+K2nNtforY8jk5KblVFTBpcvb6jNkDD2ah6v6nBNVwVekSlIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKElwcYlT/uXqXYaUsISwZe4p5lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlmN2Q2OGMtMWQ0OC0z ZjEwLTkyYjEtYjBhMTdlY2M4OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERg0QOQCGbym7lTok6nMddztvKdWADtO/eo64hLdlWwRk1p1jFf X+ZkMEOV5qYyJsr5r2o/PktmqhNtspgqEnVqpms7Nb18Z4tXpWRNVxALIw4b/WrP nLuBlayuexOFPRZ+4r77Wy2mtCh45RPwrm7Rir1fm9GlZRErN3p1UxXEXhcmMPEr gt6wX4pK4+Ae3m2Q6RjLaegwNs1XvmZbhGNcxd41iX5cDdAQnbzAbXZTrmuLiNry 4z2zq/+zUkRDLIQMEkNSaLcE5hawm6esuzU7tfTb5yzHoJi3RLNo2ibpXNYDTSxJ uaTys9g706U0+gdMzvspIpd9YvLzrkA9INE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:39:38 2025 by rpki-client