$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa File: 08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa (raw, json) Hash identifier: PhJ0rAyXJNMNtKTgtD1oyq+fzP91u8K4Y+UgXeq0EhQ= Subject key identifier: 20:1C:2E:C5:AF:CE:AD:A9:6D:9E:A4:60:F8:43:3F:6A:F9:C2:AE:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF26525A7EF89F80E32966780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa Signing time: Sat 23 Aug 2025 01:30:11 +0000 ROA not before: Sat 23 Aug 2025 01:30:11 +0000 ROA not after: Fri 21 Nov 2025 02:30:11 +0000 asID: 600 IP address blocks: 2001:470:2a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:65:25:a7:ef:89:f8:0e:32:96:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 23 01:30:11 2025 GMT Not After : Nov 21 02:30:11 2025 GMT Subject: CN=04f0cb47-23fd-48e3-ab5f-5392c189af5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:2b:d4:bb:10:9e:92:10:63:b1:bf:97:5f: 1c:60:c9:06:02:04:63:bb:6b:51:13:6c:ff:2a:f8: af:8b:2c:cc:95:19:dd:86:5b:98:ae:ab:96:3f:aa: 31:50:61:dc:0b:7a:87:78:08:42:1f:c4:b9:bc:bd: 02:f8:fb:06:89:15:01:12:04:db:f5:93:2f:2e:9c: 14:18:d4:f4:0a:3f:91:67:98:fc:d4:0e:53:32:ee: bf:44:55:6a:61:e0:5d:24:12:54:f7:cf:6d:52:44: 99:8b:30:80:c8:b6:97:04:df:10:86:e7:24:97:98: 8c:c0:7e:c0:01:9d:b4:a7:a5:9b:1e:ec:a5:b2:af: d8:2d:c7:2a:8f:5e:14:5d:16:38:aa:2d:bb:be:52: 6c:1f:a9:11:e2:67:f3:72:2c:b4:60:d9:aa:d7:0d: bf:27:d8:60:64:4c:f5:2a:75:28:43:52:76:00:e2: 67:5c:28:b2:a8:fe:20:b9:dd:1a:3c:d7:55:cc:ba: 36:b2:7b:08:aa:d4:ba:47:89:27:62:66:c9:ed:04: ec:51:91:46:33:38:97:31:35:0b:89:94:52:be:bc: da:d7:0f:e1:d9:45:f5:45:4b:a3:9d:a0:a0:c7:e1: 64:40:76:59:7e:b9:2f:ff:44:bd:b3:ed:37:b3:00: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:2E:C5:AF:CE:AD:A9:6D:9E:A4:60:F8:43:3F:6A:F9:C2:AE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ae:cd:7a:26:30:ae:38:3c:a9:2f:06:80:2c:81:e2:b0:b8: 13:ba:23:e8:ca:62:53:e0:26:98:96:3f:44:91:38:7d:ff:67: 22:d9:c7:77:0a:26:5f:18:22:ac:56:f4:6b:c0:c5:b1:76:4b: d2:32:5a:01:49:f5:de:c8:f0:d7:d4:5b:ed:93:61:99:fe:4a: 18:b9:8d:82:32:2e:e9:49:7c:9a:7e:21:d0:29:d0:ce:5c:1b: 7d:80:af:99:d4:6f:c0:50:c3:f8:90:21:79:37:be:f6:3f:79: 2e:df:fc:bf:6a:63:52:f2:d3:05:ed:e8:49:7c:a6:9c:65:f5: 66:bd:dc:90:2a:8c:43:b8:e2:91:a1:05:14:37:00:f6:87:65: de:62:27:02:d5:46:11:43:80:9a:90:1a:d3:83:0e:c4:a4:9e: 17:42:98:a5:62:5c:ea:60:0d:8e:db:11:ba:14:56:66:70:53: 9d:ac:d1:d5:11:48:9e:ac:0c:07:7c:4e:d4:f8:36:95:7f:44: 50:a7:1c:14:08:b3:c6:bb:26:2b:ba:4c:89:75:f0:a9:b4:74: c0:18:85:9e:d3:40:ad:07:e8:f7:2f:d8:22:d7:ee:4b:aa:83: 82:d7:a4:7f:82:b3:1c:26:e9:65:3f:69:49:ba:35:f5:49:f9: d1:15:8b:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryZSWn74n4DjKWZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMzAxMzAxMVoXDTI1MTEyMTAyMzAxMVowLzEtMCsGA1UEAxMk MDRmMGNiNDctMjNmZC00OGUzLWFiNWYtNTM5MmMxODlhZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH8r1LsQnpIQY7G/l18cYMkGAgRju2tRE2z/ KviviyzMlRndhluYrquWP6oxUGHcC3qHeAhCH8S5vL0C+PsGiRUBEgTb9ZMvLpwU GNT0Cj+RZ5j81A5TMu6/RFVqYeBdJBJU989tUkSZizCAyLaXBN8Qhuckl5iMwH7A AZ20p6WbHuylsq/YLccqj14UXRY4qi27vlJsH6kR4mfzciy0YNmq1w2/J9hgZEz1 KnUoQ1J2AOJnXCiyqP4gud0aPNdVzLo2snsIqtS6R4knYmbJ7QTsUZFGMziXMTUL iZRSvrza1w/h2UX1RUujnaCgx+FkQHZZfrkv/0S9s+03swAFowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAcLsWvzq2pbZ6kYPhDP2r5wq50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDhlMmM5N2UtMWM3YS0z Yjg2LWJmYjYtYzk5MDUyODJmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEquzXomMK44PKkvBoAsgeKwuBO6I+jKYlPgJpiWP0SROH3/ZyLZ x3cKJl8YIqxW9GvAxbF2S9IyWgFJ9d7I8NfUW+2TYZn+Shi5jYIyLulJfJp+IdAp 0M5cG32Ar5nUb8BQw/iQIXk3vvY/eS7f/L9qY1Ly0wXt6El8ppxl9Wa93JAqjEO4 4pGhBRQ3APaHZd5iJwLVRhFDgJqQGtODDsSknhdCmKViXOpgDY7bEboUVmZwU52s 0dURSJ6sDAd8TtT4NpV/RFCnHBQIs8a7Jiu6TIl18Km0dMAYhZ7TQK0H6Pcv2CLX 7kuqg4LXpH+Csxwm6WU/aUm6NfVJ+dEVi68= -----END CERTIFICATE-----Generated at Sat Aug 23 13:57:10 2025 by rpki-client