$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ec0dc9c-b793-3bf3-8eee-2ea7ab0fda28.roa File: 0ec0dc9c-b793-3bf3-8eee-2ea7ab0fda28.roa (raw, json) Hash identifier: nzwaleEp0aclfCukkwcPAvmokfu9m0TLA1vAvkM7sao= Subject key identifier: DC:7A:44:80:25:C7:EA:2A:0D:02:82:2D:53:F4:37:70:6D:ED:50:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9379E25D95BF51C8978B785C Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ec0dc9c-b793-3bf3-8eee-2ea7ab0fda28.roa Signing time: Sun 20 Jul 2025 01:30:10 +0000 ROA not before: Sun 20 Jul 2025 01:30:10 +0000 ROA not after: Sat 18 Oct 2025 01:30:10 +0000 asID: 149994 IP address blocks: 2001:470:493::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:79:e2:5d:95:bf:51:c8:97:8b:78:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 20 01:30:10 2025 GMT Not After : Oct 18 01:30:10 2025 GMT Subject: CN=fd7e3f1a-5aee-407b-a84a-499bd5aff2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:76:61:e8:7d:de:05:eb:7e:aa:1b:86:c5: 00:6d:41:f8:c2:e2:03:da:75:ad:69:36:a9:81:d4: fa:6c:1c:cd:b9:ec:bd:c2:13:86:63:ad:1c:15:65: 73:bb:ae:70:b2:0d:24:ee:63:d6:5b:30:f2:ea:6c: 33:f8:22:6b:8e:bb:ec:8e:83:60:8b:eb:2d:0d:88: 8a:eb:83:57:68:39:69:1c:73:69:66:db:c9:b7:73: da:3b:51:b1:e8:88:2b:7f:5d:e4:86:ed:0e:6b:31: 59:c7:e9:5c:98:4c:f7:fb:ac:02:a3:cc:04:1f:47: b4:6e:a0:6e:85:18:82:f2:0b:c8:6e:0f:5b:c2:70: ba:c3:f8:55:37:6a:fb:ad:c2:40:14:f8:df:55:11: c8:77:93:f4:16:eb:9a:9e:65:06:55:43:d9:0f:26: fc:b7:0a:47:f1:49:e2:83:38:c8:40:5a:fb:fc:7a: 34:9f:4c:08:79:f8:da:a6:c6:fc:7a:70:78:6a:bb: bb:5d:e3:d8:b8:95:a4:ca:8d:73:bd:b8:0b:5b:84: 83:ac:1a:1e:11:45:09:0e:43:34:5e:f3:64:c0:27: 6d:36:c9:cf:35:29:81:aa:eb:79:46:fa:4c:dc:63: 8b:67:36:c9:f0:5f:4d:4c:ff:a0:55:8b:6c:00:44: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:44:80:25:C7:EA:2A:0D:02:82:2D:53:F4:37:70:6D:ED:50:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ec0dc9c-b793-3bf3-8eee-2ea7ab0fda28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:493::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e8:c0:fc:9c:bf:55:f8:70:46:83:a5:8e:9c:23:d8:14:a6: e9:d7:4c:a5:fc:2b:c3:e4:7d:15:27:5d:00:f0:f0:e9:dc:f9: 36:cb:8c:47:22:6a:a2:06:3d:95:4c:c6:58:4d:fb:2c:b0:c6: d1:d0:f8:b5:8b:8f:7c:d9:29:fc:0d:83:ac:b8:59:7b:b0:c9: 58:3d:df:38:a3:2c:79:af:9a:5c:96:2f:8a:e9:15:1e:51:9c: d9:79:86:48:92:21:34:28:3a:3a:81:92:c9:b7:83:45:6a:01: 7f:e7:24:ed:b7:c1:6f:9e:86:f8:12:9b:2b:48:14:fc:0f:72: 9b:65:dd:30:ad:e6:79:c8:b0:43:ac:e7:8f:9e:31:b6:39:fd: 3c:68:73:b3:f5:6e:1f:0b:b2:d0:ff:e1:44:4c:90:b1:31:cd: 49:78:fc:57:11:63:0e:a2:4c:57:0a:9f:e9:a3:fd:90:a6:f3: 3e:5d:5a:e2:21:92:48:7c:6a:43:68:37:c7:2c:e5:a1:94:5c: 66:c3:fb:84:d3:52:30:54:71:a7:c5:e2:0b:80:97:2e:62:e9: 1b:de:0a:85:61:14:2d:9c:3f:57:f7:39:e4:80:e3:16:3d:c3: 4e:41:67:69:9d:07:3d:93:50:31:21:c8:b9:4b:fc:62:4a:b8: 50:6e:a6:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqTeeJdlb9RyJeLeFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMDAxMzAxMFoXDTI1MTAxODAxMzAxMFowLzEtMCsGA1UEAxMk ZmQ3ZTNmMWEtNWFlZS00MDdiLWE4NGEtNDk5YmQ1YWZmMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcN2Yeh93gXrfqobhsUAbUH4wuID2nWtaTap gdT6bBzNuey9whOGY60cFWVzu65wsg0k7mPWWzDy6mwz+CJrjrvsjoNgi+stDYiK 64NXaDlpHHNpZtvJt3PaO1Gx6Igrf13khu0OazFZx+lcmEz3+6wCo8wEH0e0bqBu hRiC8gvIbg9bwnC6w/hVN2r7rcJAFPjfVRHId5P0FuuanmUGVUPZDyb8twpH8Uni gzjIQFr7/Ho0n0wIefjapsb8enB4aru7XePYuJWkyo1zvbgLW4SDrBoeEUUJDkM0 XvNkwCdtNsnPNSmBqut5RvpM3GOLZzbJ8F9NTP+gVYtsAETB9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNx6RIAlx+oqDQKCLVP0N3Bt7VAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGVjMGRjOWMtYjc5My0z YmYzLThlZWUtMmVhN2FiMGZkYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAST MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJjowPycv1X4cEaDpY6cI9gUpunXTKX8K8PkfRUnXQDw8Onc+TbL jEciaqIGPZVMxlhN+yywxtHQ+LWLj3zZKfwNg6y4WXuwyVg93zijLHmvmlyWL4rp FR5RnNl5hkiSITQoOjqBksm3g0VqAX/nJO23wW+ehvgSmytIFPwPcptl3TCt5nnI sEOs54+eMbY5/Txoc7P1bh8LstD/4URMkLExzUl4/FcRYw6iTFcKn+mj/ZCm8z5d WuIhkkh8akNoN8cs5aGUXGbD+4TTUjBUcafF4guAly5i6RveCoVhFC2cP1f3OeSA 4xY9w05BZ2mdBz2TUDEhyLlL/GJKuFBupkQ= -----END CERTIFICATE-----Generated at Sun Jul 20 14:10:02 2025 by rpki-client