$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa File: 520e4953-007e-380b-bca8-88866d4faf25.roa (raw, json) Hash identifier: dkVpTZ7Rh2+lAQyQ9f+sZu/VgaP2omHXnfXMQtTc5Mc= Subject key identifier: 38:97:B1:7C:76:33:20:FB:A9:B2:3F:97:B5:96:FA:45:BA:D7:76:4D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF7EBE0A48F7382B716A0BD50 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 6939 IP address blocks: 65.49.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e0:a4:8f:73:82:b7:16:a0:bd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=397f5463-afb4-47a1-8881-a36cccf3a125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:ca:87:bf:66:d5:27:6c:57:db:f7:58:d9: cd:e8:5a:66:4c:f7:20:bb:b5:ec:04:39:85:8b:77: b7:00:5d:4d:02:8f:ae:85:4f:b9:14:9e:eb:5c:26: 31:75:a8:7f:4a:73:50:74:b0:c7:ec:0c:32:db:c0: 68:17:40:76:97:15:cb:1d:82:d7:86:4d:f9:69:e2: d5:97:48:9f:ca:0e:3b:55:64:39:77:02:0d:e6:e9: 73:72:c7:d0:2d:b7:c1:bc:7c:09:c1:d1:21:32:f5: a9:cc:9c:0d:28:df:66:a7:fb:b5:6d:ca:2b:42:23: b9:5b:76:5a:18:a5:a4:cd:d1:88:79:64:4e:12:13: 15:4e:5f:82:ab:55:9a:3a:15:ec:b0:9c:3c:03:1f: a5:d7:4f:14:5d:8f:91:08:55:86:d5:00:1e:c7:2a: 78:51:1f:23:c9:5e:7e:ec:cc:16:e0:0c:8d:b7:ba: 67:93:9c:c1:f7:77:b1:b8:98:74:d0:83:e4:3a:4f: 07:8d:84:c8:ae:9b:00:31:42:5a:59:9c:df:cf:3f: 4f:07:cf:70:36:09:1b:a4:19:62:59:31:f8:68:e1: 08:c1:70:b7:e6:a3:94:06:97:37:93:7f:92:64:b8: 2e:11:8c:66:30:d7:f2:bc:e7:86:7f:6b:fa:2a:7b: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:B1:7C:76:33:20:FB:A9:B2:3F:97:B5:96:FA:45:BA:D7:76:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ca:c6:0c:50:11:6e:41:51:f1:73:66:6d:d9:ce:20:78:84: cb:0b:25:68:09:04:36:24:c2:8b:2a:0a:8f:9e:af:ff:ec:ff: 96:25:6d:fa:e3:8f:ce:a2:50:21:b4:59:20:b9:5c:3e:41:c8: c0:a2:a7:09:b2:69:4d:54:56:db:d2:45:81:be:ef:fe:bb:24: 19:43:1d:e7:1e:57:66:94:a4:77:3c:a4:b6:55:39:db:58:57: 63:48:78:f6:bb:7d:9a:78:b4:07:98:55:2a:3c:8b:0e:e7:cb: 7a:ef:65:d7:f8:7f:1d:8c:ef:89:22:d2:d7:ec:72:8a:f9:bb: 23:13:9f:01:74:97:67:79:9d:a1:6b:52:c9:ac:04:9e:36:ca: 00:23:ca:0d:ae:17:cd:33:2f:30:ce:1c:58:cf:0b:fc:b8:7d: 0e:d2:96:0b:71:50:09:8f:de:a7:44:af:00:99:80:b5:c9:48: a5:66:44:ad:31:6b:a2:4c:ce:09:29:f1:9a:9b:66:4a:98:4a: 4d:84:cb:0f:ff:21:f5:c1:e2:5d:35:1f:61:88:15:42:2d:53: 2d:22:52:95:6a:94:f0:a3:97:d5:cd:fc:f2:96:f8:76:0a:2f: 4b:6b:0e:e4:04:84:aa:04:37:98:77:ba:d5:16:2f:b3:d7:c9: df:6d:c1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+Ckj3OCtxagvVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk Mzk3ZjU0NjMtYWZiNC00N2ExLTg4ODEtYTM2Y2NjZjNhMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkfKh79m1SdsV9v3WNnN6FpmTPcgu7XsBDmF i3e3AF1NAo+uhU+5FJ7rXCYxdah/SnNQdLDH7Awy28BoF0B2lxXLHYLXhk35aeLV l0ifyg47VWQ5dwIN5ulzcsfQLbfBvHwJwdEhMvWpzJwNKN9mp/u1bcorQiO5W3Za GKWkzdGIeWROEhMVTl+Cq1WaOhXssJw8Ax+l108UXY+RCFWG1QAexyp4UR8jyV5+ 7MwW4AyNt7pnk5zB93exuJh00IPkOk8HjYTIrpsAMUJaWZzfzz9PB89wNgkbpBli WTH4aOEIwXC35qOUBpc3k3+SZLguEYxmMNfyvOeGf2v6KnthwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiXsXx2MyD7qbI/l7WW+kW613ZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIwZTQ5NTMtMDA3ZS0z ODBiLWJjYTgtODg4NjZkNGZhZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQTEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHKxgxQEW5BUfFzZm3ZziB4hMsLJWgJBDYkwosqCo+er//s/5Ylbfrj j86iUCG0WSC5XD5ByMCipwmyaU1UVtvSRYG+7/67JBlDHeceV2aUpHc8pLZVOdtY V2NIePa7fZp4tAeYVSo8iw7ny3rvZdf4fx2M74ki0tfscor5uyMTnwF0l2d5naFr UsmsBJ42ygAjyg2uF80zLzDOHFjPC/y4fQ7SlgtxUAmP3qdErwCZgLXJSKVmRK0x a6JMzgkp8ZqbZkqYSk2Eyw//IfXB4l01H2GIFUItUy0iUpVqlPCjl9XN/PKW+HYK L0trDuQEhKoEN5h3utUWL7PXyd9twZk= -----END CERTIFICATE-----Generated at Tue Sep 16 17:28:32 2025 by rpki-client