$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89332e90-bde7-3d89-9717-9debfa1249b3.roa File: 89332e90-bde7-3d89-9717-9debfa1249b3.roa (raw, json) Hash identifier: jqe7/jylaT7BAO0i8Xhw7J6zHjrTJqLV1LG3TfOVrJg= Subject key identifier: FD:00:04:56:57:63:86:97:A7:3D:19:89:BB:C4:91:89:F9:72:1A:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A74C45BAD24EFE42AE7242940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89332e90-bde7-3d89-9717-9debfa1249b3.roa Signing time: Wed 09 Jul 2025 01:30:10 +0000 ROA not before: Wed 09 Jul 2025 01:30:10 +0000 ROA not after: Tue 07 Oct 2025 01:30:10 +0000 asID: 139005 IP address blocks: 2001:470:31a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:c4:5b:ad:24:ef:e4:2a:e7:24:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 9 01:30:10 2025 GMT Not After : Oct 7 01:30:10 2025 GMT Subject: CN=bb69ade6-d767-40d1-a4b4-020730bd8675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:52:79:74:ef:f5:01:1c:af:26:e9:05:a5: 5a:16:da:d7:ee:ba:05:4f:44:06:2b:cf:df:78:43: 5b:3a:0d:d9:36:03:e9:9a:af:9e:44:fd:99:bc:24: ec:93:2b:a3:7a:e2:1b:a6:02:e1:ff:0b:11:c0:de: 83:d7:1f:0b:d5:87:a0:b4:9b:2e:2c:03:22:c2:8f: cb:58:00:d8:28:c2:42:9c:93:f6:f5:ce:00:ea:ee: 74:2b:ce:02:d5:4f:b1:5f:e8:76:4c:b5:05:b0:75: cf:20:4f:76:34:f6:3b:9c:0a:87:53:9d:4f:84:bf: 3b:e3:9f:7f:07:e4:76:1c:96:56:4e:1e:6d:8f:90: 23:a7:b0:13:02:b7:9e:ad:8e:dc:44:8d:fe:ce:a1: de:85:4b:78:34:57:0c:78:99:97:1c:ab:39:8d:3d: c2:e7:cd:bd:4e:e2:86:65:b1:f7:32:23:b4:14:da: 8c:b5:e9:95:b4:d5:98:64:7e:b0:b6:16:72:bc:f6: 56:dd:ba:1c:80:b8:63:f0:b6:d1:4d:cb:3b:61:0e: e7:eb:d9:e0:18:27:a1:a6:2b:15:52:d0:47:15:fa: e0:6a:6f:7e:97:ef:ef:25:d5:47:e2:e6:2b:76:cb: 69:a4:18:ea:01:b4:c7:be:0e:63:09:ac:11:02:c8: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:04:56:57:63:86:97:A7:3D:19:89:BB:C4:91:89:F9:72:1A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89332e90-bde7-3d89-9717-9debfa1249b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:18:ce:ed:25:72:89:9f:0f:38:e0:7f:e0:a8:de:46:9f:f7: 7e:e3:aa:3f:2a:58:8b:9d:52:fe:12:8e:64:37:31:14:2e:2c: 9c:b9:05:1c:9b:7a:f5:bb:cc:9b:1b:b9:b8:29:f9:8b:0b:00: 1c:8e:b6:6b:57:93:3b:fb:e9:cc:68:0d:df:61:f6:e3:57:31: 47:9a:67:45:1d:aa:2d:b0:a0:0d:db:b7:8c:61:0d:a0:1e:a6: 20:e9:f4:49:ed:aa:e7:10:f9:f0:1e:3b:e3:dc:c8:0e:86:08: 58:c0:12:43:f3:e9:9d:ed:8e:2a:b1:42:1b:70:45:9f:9d:c3: 86:04:16:8d:9e:4d:3c:48:52:55:8a:5a:68:82:17:93:04:1d: ff:24:ac:4e:ed:51:7a:38:04:af:6c:bf:4b:05:ba:50:27:4b: bc:02:b2:71:a5:09:b1:0e:cc:3e:5d:88:16:50:29:4a:06:7e: aa:57:b6:65:82:44:a7:7c:8e:a9:b1:bc:a4:ad:ba:61:45:8e: 7e:17:27:0c:cd:0c:06:92:51:08:db:0f:a1:cd:67:87:1f:b7: fd:36:22:c7:28:5f:9c:6c:75:a9:75:27:e5:b3:4d:79:03:34: e2:84:14:b5:32:d7:fc:77:b2:6b:7e:d3:17:d6:e6:c1:e1:a8: a9:19:3e:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0xFutJO/kKuckKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcwOTAxMzAxMFoXDTI1MTAwNzAxMzAxMFowLzEtMCsGA1UEAxMk YmI2OWFkZTYtZDc2Ny00MGQxLWE0YjQtMDIwNzMwYmQ4Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOtSeXTv9QEcrybpBaVaFtrX7roFT0QGK8/f eENbOg3ZNgPpmq+eRP2ZvCTskyujeuIbpgLh/wsRwN6D1x8L1YegtJsuLAMiwo/L WADYKMJCnJP29c4A6u50K84C1U+xX+h2TLUFsHXPIE92NPY7nAqHU51PhL87459/ B+R2HJZWTh5tj5Ajp7ATAreerY7cRI3+zqHehUt4NFcMeJmXHKs5jT3C5829TuKG ZbH3MiO0FNqMtemVtNWYZH6wthZyvPZW3bocgLhj8LbRTcs7YQ7n69ngGCehpisV UtBHFfrgam9+l+/vJdVH4uYrdstppBjqAbTHvg5jCawRAshOJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0ABFZXY4aXpz0ZibvEkYn5chrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODkzMzJlOTAtYmRlNy0z ZDg5LTk3MTctOWRlYmZhMTI0OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIYzu0lcomfDzjgf+Co3kaf937jqj8qWIudUv4SjmQ3MRQuLJy5 BRybevW7zJsbubgp+YsLAByOtmtXkzv76cxoDd9h9uNXMUeaZ0Udqi2woA3bt4xh DaAepiDp9EntqucQ+fAeO+PcyA6GCFjAEkPz6Z3tjiqxQhtwRZ+dw4YEFo2eTTxI UlWKWmiCF5MEHf8krE7tUXo4BK9sv0sFulAnS7wCsnGlCbEOzD5diBZQKUoGfqpX tmWCRKd8jqmxvKStumFFjn4XJwzNDAaSUQjbD6HNZ4cft/02IscoX5xsdal1J+Wz TXkDNOKEFLUy1/x3smt+0xfW5sHhqKkZPmE= -----END CERTIFICATE-----Generated at Thu Jul 17 11:05:13 2025 by rpki-client