$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa File: 9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa (raw, json) Hash identifier: UdeUTdKaYyFGo/Y/CIM9dcKWuICyO0ssi6375KkXf/Y= Subject key identifier: 7B:44:3E:FD:1E:32:E9:AF:45:4C:0A:79:21:2E:24:7D:96:A5:E0:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC965ED349C87079CE580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 17117 IP address blocks: 2001:470:151::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c9:65:ed:34:9c:87:07:9c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1ddc9a7d-86a6-4edf-bf64-6ca408e90dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:40:ce:d1:ce:29:86:e2:78:6e:b3:fd:ea: 79:9f:37:db:1d:f9:9a:3b:da:1e:c2:d1:45:78:a0: 2d:af:40:91:14:1e:5c:30:e7:3a:c2:f5:9c:98:0f: fe:10:09:2c:3c:2b:3c:3c:a4:16:5f:25:f7:6d:cf: ba:ac:9f:bb:9b:39:7d:58:91:ef:ad:b9:9b:34:a2: 37:6f:a4:41:b3:be:25:28:2d:e7:1a:62:65:b7:ed: 5a:85:21:5d:2e:a3:38:f9:6c:1b:4c:a8:04:93:d9: 2b:b9:8e:2a:74:a4:ad:7c:d8:28:3d:99:36:9d:f7: cf:8c:d7:60:b0:71:34:73:06:43:ee:62:44:f0:65: e4:b1:bb:dc:e5:f9:66:84:a5:36:fe:01:87:c5:73: 59:43:1a:90:a8:a6:86:92:5e:ed:d7:ca:53:2b:65: d0:75:7e:0d:00:c5:87:41:e5:fb:85:6f:6d:a5:3d: e7:bf:96:9a:2f:bc:67:c4:f7:a4:3a:9f:bc:53:4f: 7b:b4:d4:20:09:f3:b0:9c:2b:e7:77:d0:68:63:b4: 2d:c3:01:47:67:02:43:64:c4:33:3e:d9:8c:5b:d6: 61:40:a1:8d:f8:75:ba:3c:44:ba:fa:96:4c:9e:5c: 20:3d:7c:22:68:9c:fa:c8:22:e4:15:41:a8:f4:92: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:3E:FD:1E:32:E9:AF:45:4C:0A:79:21:2E:24:7D:96:A5:E0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:151::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:99:56:72:5f:88:89:6f:d9:89:ca:dd:31:ac:59:ce:c6:eb: fa:dd:0c:8d:ae:2c:83:52:c4:35:e2:e5:77:d7:16:c2:07:0a: 06:86:af:8c:3b:f2:c8:27:19:ec:fd:0c:c0:45:a4:cb:0f:aa: 90:36:be:b5:41:16:af:4e:a5:13:df:1d:53:be:23:5f:56:b3: e6:18:2e:6c:27:9f:bd:1e:1b:87:ff:9c:29:5e:15:61:82:47: b1:8e:5c:31:a8:bd:1f:9d:e3:0e:6d:dc:12:f9:46:3c:87:f9: 7a:8b:5b:6f:86:42:45:cc:1c:ae:05:54:1d:16:9a:c6:01:c8: 6b:47:4c:39:3e:12:31:4d:26:74:2e:76:9d:26:79:98:0b:30: ed:e0:56:c6:e8:79:88:c3:2c:15:6a:c1:6a:27:d3:c8:0e:a9: 55:8f:91:83:6d:2e:50:4c:6b:15:24:28:65:9e:21:b2:73:c7: ea:f2:97:63:a3:b0:60:26:90:90:ed:6d:35:17:0c:73:93:a5: 94:12:ee:11:e2:99:16:28:7f:0e:37:0f:0a:15:eb:59:bd:74: 80:c9:b4:d9:87:59:0e:fd:7d:26:d2:57:3e:b6:d7:32:a5:2a: e3:94:7f:24:6d:e0:6f:d7:3c:92:fd:54:ba:84:3c:4e:17:18: 95:7d:27:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8ll7TSchwec5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWRkYzlhN2QtODZhNi00ZWRmLWJmNjQtNmNhNDA4ZTkwZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5tAztHOKYbieG6z/ep5nzfbHfmaO9oewtFF eKAtr0CRFB5cMOc6wvWcmA/+EAksPCs8PKQWXyX3bc+6rJ+7mzl9WJHvrbmbNKI3 b6RBs74lKC3nGmJlt+1ahSFdLqM4+WwbTKgEk9kruY4qdKStfNgoPZk2nffPjNdg sHE0cwZD7mJE8GXksbvc5flmhKU2/gGHxXNZQxqQqKaGkl7t18pTK2XQdX4NAMWH QeX7hW9tpT3nv5aaL7xnxPekOp+8U097tNQgCfOwnCvnd9BoY7QtwwFHZwJDZMQz PtmMW9ZhQKGN+HW6PES6+pZMnlwgPXwiaJz6yCLkFUGo9JIbTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtEPv0eMumvRUwKeSEuJH2WpeBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWNmNGY5YTYtOTMzNC0z OTZiLWIzYzUtMDAyNmI5MDM2MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOZVnJfiIlv2YnK3TGsWc7G6/rdDI2uLINSxDXi5XfXFsIHCgaG r4w78sgnGez9DMBFpMsPqpA2vrVBFq9OpRPfHVO+I19Ws+YYLmwnn70eG4f/nCle FWGCR7GOXDGovR+d4w5t3BL5RjyH+XqLW2+GQkXMHK4FVB0WmsYByGtHTDk+EjFN JnQudp0meZgLMO3gVsboeYjDLBVqwWon08gOqVWPkYNtLlBMaxUkKGWeIbJzx+ry l2OjsGAmkJDtbTUXDHOTpZQS7hHimRYofw43DwoV61m9dIDJtNmHWQ79fSbSVz62 1zKlKuOUfyRt4G/XPJL9VLqEPE4XGJV9J6A= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:10 2025 by rpki-client