$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa File: dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa (raw, json) Hash identifier: jV+VYhEPNjQ1xqQYH5nrtjU68luDT/pfgy0yMmCiTTI= Subject key identifier: 9D:10:FE:00:2D:C6:27:50:3B:FC:18:E0:E4:A6:21:B6:4F:4B:58:50 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD85FA37741C1E97E4400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 151358 IP address blocks: 2001:470:2a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d8:5f:a3:77:41:c1:e9:7e:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=cb0546ef-d7bf-4a7a-b680-3ba2e05db621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:7b:dc:c5:bc:42:e0:73:dd:86:d4:be:a5: d6:40:99:e3:1e:0b:b8:ad:31:40:f6:23:27:ef:b3: 9d:0c:c3:1a:36:15:ee:15:2b:95:82:d1:22:d0:6f: 4c:25:fa:fa:9c:8e:3c:18:98:e5:f4:d9:e0:50:35: 52:3f:ab:c7:fb:79:5a:0f:54:58:83:e8:d3:57:f6: 90:f1:6e:06:63:ed:9a:58:4e:01:46:35:7a:c1:2e: 3b:cc:ef:e9:96:f7:3d:b9:ae:50:a1:7d:4d:bd:cc: 24:8e:0d:f2:ce:4d:38:06:f3:9d:19:6e:de:73:fe: ce:ca:70:6a:0e:bb:97:f6:50:24:18:a4:a0:40:31: be:18:a5:c3:68:20:26:65:e4:6b:fa:2f:4d:a0:45: d7:3a:22:af:69:2b:f9:17:e6:a7:e6:35:d1:be:88: 8e:37:bb:89:82:73:7b:e6:49:20:f9:20:99:06:3a: f2:0a:bc:5a:28:a6:c4:0e:22:44:28:20:66:cb:04: e6:17:c1:d4:3c:12:f9:37:8f:7e:36:8b:5f:0e:fc: b6:74:df:b6:1e:9b:52:e9:d5:e8:78:8b:d3:ed:dc: 5e:80:0e:a9:5e:d1:d5:87:26:fb:54:fe:2c:e5:a9: 50:2c:83:a3:e7:ca:78:6e:c4:37:ba:82:3a:03:96: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:FE:00:2D:C6:27:50:3B:FC:18:E0:E4:A6:21:B6:4F:4B:58:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3e:bb:64:2a:c5:12:e9:82:4c:ee:90:82:61:f7:d0:2d:6d: f8:f2:32:80:10:13:d8:73:a0:89:a2:e3:fb:72:7d:46:ea:96: 4d:da:11:46:72:16:c9:a2:2d:cc:eb:a9:92:f1:30:b6:19:2c: 8f:5f:3b:d7:67:b6:63:36:08:e7:3b:c9:65:7d:be:ee:fb:c2: 41:6f:90:41:9c:f7:bd:47:3b:da:4f:0d:20:9b:d7:bb:a1:1a: 95:ea:cd:52:df:69:a1:ff:43:20:22:f9:65:2b:d5:b4:c3:fe: 74:56:45:45:27:ed:5c:a4:2c:66:1e:53:2b:e5:90:37:bd:7d: 76:a9:8e:e0:8e:b2:77:00:94:cd:64:0b:0e:8a:54:68:28:a9: e2:1f:43:dd:80:e6:f9:0c:5d:fc:f2:40:ec:9f:32:18:b1:6e: bb:b4:94:08:fc:7f:b0:19:d7:cf:bb:42:5d:34:3d:be:cf:4e: 47:44:42:7c:dc:76:23:a6:74:b0:54:c2:e2:ad:e8:2c:60:92: 07:5e:3d:2b:ba:27:bb:b0:e2:a3:da:58:e3:00:79:11:15:1b: 75:31:dc:c4:84:82:1c:08:94:15:d8:f3:15:e6:ac:7f:af:5f: 83:88:02:5e:c4:0c:a1:c0:83:93:8d:17:50:0f:25:88:95:14: 9b:83:58:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9hfo3dBwel+RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2IwNTQ2ZWYtZDdiZi00YTdhLWI2ODAtM2JhMmUwNWRiNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBd73MW8QuBz3YbUvqXWQJnjHgu4rTFA9iMn 77OdDMMaNhXuFSuVgtEi0G9MJfr6nI48GJjl9NngUDVSP6vH+3laD1RYg+jTV/aQ 8W4GY+2aWE4BRjV6wS47zO/plvc9ua5QoX1Nvcwkjg3yzk04BvOdGW7ec/7OynBq DruX9lAkGKSgQDG+GKXDaCAmZeRr+i9NoEXXOiKvaSv5F+an5jXRvoiON7uJgnN7 5kkg+SCZBjryCrxaKKbEDiJEKCBmywTmF8HUPBL5N49+NotfDvy2dN+2HptS6dXo eIvT7dxegA6pXtHVhyb7VP4s5alQLIOj58p4bsQ3uoI6A5bVSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0Q/gAtxidQO/wY4OSmIbZPS1hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFiNGM2OGItOTZkOS0z NTFjLWE1YmUtN2VkOGY0YThiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGg+u2QqxRLpgkzukIJh99AtbfjyMoAQE9hzoImi4/tyfUbqlk3a EUZyFsmiLczrqZLxMLYZLI9fO9dntmM2COc7yWV9vu77wkFvkEGc971HO9pPDSCb 17uhGpXqzVLfaaH/QyAi+WUr1bTD/nRWRUUn7VykLGYeUyvlkDe9fXapjuCOsncA lM1kCw6KVGgoqeIfQ92A5vkMXfzyQOyfMhixbru0lAj8f7AZ18+7Ql00Pb7PTkdE QnzcdiOmdLBUwuKt6CxgkgdePSu6J7uw4qPaWOMAeREVG3Ux3MSEghwIlBXY8xXm rH+vX4OIAl7EDKHAg5ONF1APJYiVFJuDWE0= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:09 2025 by rpki-client