$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa File: a9093161-5334-3639-9eb4-28f0fad9fed9.roa (raw, json) Hash identifier: 3j0KOm0TdiNgwMKThC87ulOr/KEAJA5bqGLQkXtAbOg= Subject key identifier: 7F:64:5F:F7:01:74:F9:53:A4:E8:BB:00:A4:E6:DD:21:E8:A1:F6:BD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD271C9547913F0494780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 32681 IP address blocks: 2001:470:253::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d2:71:c9:54:79:13:f0:49:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=8c4479a5-3172-411b-b06e-4907e529731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:fb:a1:e3:5c:f1:c7:49:f7:34:aa:16:25: cd:23:64:3e:01:2b:66:92:1d:37:da:d3:d3:cc:8b: 0b:34:29:92:9d:6c:e6:64:ea:e6:1b:65:a5:84:71: 59:8e:ae:3f:f5:e1:83:b8:39:05:51:5d:1d:c6:00: cc:91:23:db:88:47:5a:da:de:ba:52:b4:ee:d6:b9: af:83:10:68:ab:08:86:38:56:98:e6:98:03:10:c5: 76:78:02:c6:57:19:95:c6:1e:70:79:b3:f6:ad:d6: 98:cd:9e:32:54:09:84:fe:b9:77:aa:63:c3:1c:ad: 36:14:8d:54:95:2e:ba:f5:91:8c:72:04:e5:de:f7: 50:17:57:94:07:b7:d1:e0:27:32:fe:b6:cf:be:ae: 2a:51:aa:dc:3c:35:16:cd:5f:44:78:6a:03:e5:62: a9:71:51:af:37:ca:39:84:04:f9:1b:75:39:5f:47: 60:d2:26:0a:a9:60:3c:75:f0:b2:f8:56:f2:67:2e: 83:26:69:bc:fb:fe:14:02:32:86:ce:70:b9:f3:6b: a1:72:b3:d1:dd:fd:28:f8:cf:44:c4:e8:ec:36:37: 12:55:4f:76:e9:bc:70:f6:71:75:1b:3a:27:31:7b: f9:a0:b5:cb:ff:51:62:f4:5f:58:63:1d:80:98:c9: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:64:5F:F7:01:74:F9:53:A4:E8:BB:00:A4:E6:DD:21:E8:A1:F6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:253::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:38:b9:08:12:fa:1e:e4:3b:8d:10:22:fb:ad:22:34:25:6e: 66:8e:bb:ae:3f:8a:11:c3:71:dd:83:4f:6e:f8:ed:cd:8c:0e: b4:b2:a3:2f:fe:76:fe:4c:d2:da:32:65:0c:20:1c:06:ec:9f: 39:f1:02:c9:b6:90:32:6f:e1:87:f7:ab:af:f8:90:9d:5d:45: 59:88:a3:ad:f1:40:be:a7:11:46:71:db:8a:81:28:1a:bb:ec: 35:38:d0:aa:65:c9:e1:8f:a0:e6:00:3b:f6:c5:4d:b5:af:83: 0d:cf:1d:d3:91:2d:15:7b:d0:bb:39:3d:1f:2e:ab:3f:21:ce: 6a:2e:58:6e:ca:71:c4:e0:e1:ed:d0:57:d6:4d:cf:6c:07:5c: 5b:f4:26:b1:b3:83:a9:cf:6c:b2:5f:6d:04:0b:bc:e4:43:61: 87:43:70:99:96:78:39:d9:8f:21:8a:da:6b:88:a5:41:26:e1: bb:e9:66:ce:8c:bf:a9:f5:72:d7:b3:50:22:31:4a:97:d1:5f: 2e:de:e6:4a:fa:2e:5b:ff:ba:cb:2f:b3:f4:92:d1:72:cb:13: d4:10:bd:78:f9:03:58:e2:79:82:56:e5:97:96:b8:43:70:ab: f5:49:ee:6b:2d:c6:92:8d:89:60:65:d7:1e:5a:b8:af:e8:39: 29:07:d3:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9JxyVR5E/BJR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OGM0NDc5YTUtMzE3Mi00MTFiLWIwNmUtNDkwN2U1Mjk3MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijD7oeNc8cdJ9zSqFiXNI2Q+AStmkh032tPT zIsLNCmSnWzmZOrmG2WlhHFZjq4/9eGDuDkFUV0dxgDMkSPbiEda2t66UrTu1rmv gxBoqwiGOFaY5pgDEMV2eALGVxmVxh5webP2rdaYzZ4yVAmE/rl3qmPDHK02FI1U lS669ZGMcgTl3vdQF1eUB7fR4Ccy/rbPvq4qUarcPDUWzV9EeGoD5WKpcVGvN8o5 hAT5G3U5X0dg0iYKqWA8dfCy+FbyZy6DJmm8+/4UAjKGznC582uhcrPR3f0o+M9E xOjsNjcSVU926bxw9nF1GzonMXv5oLXL/1Fi9F9YYx2AmMlBwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9kX/cBdPlTpOi7AKTm3SHoofa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTkwOTMxNjEtNTMzNC0z NjM5LTllYjQtMjhmMGZhZDlmZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADM4uQgS+h7kO40QIvutIjQlbmaOu64/ihHDcd2DT2747c2MDrSy oy/+dv5M0toyZQwgHAbsnznxAsm2kDJv4Yf3q6/4kJ1dRVmIo63xQL6nEUZx24qB KBq77DU40KplyeGPoOYAO/bFTbWvgw3PHdORLRV70Ls5PR8uqz8hzmouWG7KccTg 4e3QV9ZNz2wHXFv0JrGzg6nPbLJfbQQLvORDYYdDcJmWeDnZjyGK2muIpUEm4bvp Zs6Mv6n1ctezUCIxSpfRXy7e5kr6Llv/ussvs/SS0XLLE9QQvXj5A1jieYJW5ZeW uENwq/VJ7mstxpKNiWBl1x5auK/oOSkH0+g= -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:51 2025 by rpki-client