$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa File: 023eb0c5-6621-36f4-b644-b1d687cab0f3.roa (raw, json) Hash identifier: 6eHQGnqHlo7SxwYbD69iVKdfvCUDn798SqMGn09rt58= Subject key identifier: BA:F0:4E:05:0F:DA:81:D0:FA:C4:AA:32:7B:1F:32:F9:52:AF:8A:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BBF60B00CF509FC3DB780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 393238 IP address blocks: 2001:470:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:bf:60:b0:0c:f5:09:fc:3d:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ba905cf1-0afa-4059-a469-02173769a13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:03:34:d4:30:3d:cc:31:c6:46:74:a3:a1: b0:4c:a3:a8:47:7f:9b:a4:53:87:19:2c:d4:e2:a8: 67:79:3b:82:39:1d:40:bd:72:83:a3:20:95:05:55: 22:c3:b4:87:b7:00:b7:16:9f:5f:44:1b:2a:49:46: 5e:02:05:63:98:e7:8e:f7:70:44:21:5c:a2:65:eb: 10:d3:5e:e9:82:e9:89:43:05:d2:e3:e7:48:4d:97: 66:fe:fa:4b:07:f1:65:86:96:46:9c:19:d8:43:d9: 99:76:3b:21:56:cf:48:d0:db:48:9b:77:63:aa:fb: 26:4d:53:7f:81:6e:c5:14:44:8e:9b:a3:6b:52:e6: 2a:d6:37:4e:e6:e9:9d:68:fc:80:a5:29:73:ec:73: 46:8c:c2:f2:74:57:2d:60:2c:11:a0:a6:dc:53:e6: b7:cb:95:fd:b4:99:3f:0e:67:e4:66:f9:5e:20:4f: 0d:5e:4c:2c:aa:43:52:d9:09:06:33:85:55:12:2d: b6:02:2b:af:ff:08:05:b2:1c:68:37:61:56:43:af: 9e:52:c9:cc:6b:23:34:59:25:6f:d3:c0:68:7f:d5: 59:93:1d:6a:47:2e:41:14:03:18:13:31:33:1e:bb: fc:c0:5c:5b:54:f3:1b:50:9d:76:1c:cd:c6:09:7c: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F0:4E:05:0F:DA:81:D0:FA:C4:AA:32:7B:1F:32:F9:52:AF:8A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:55::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:21:e7:5e:61:cc:74:e3:97:0b:97:5a:0b:33:12:36:1a: 7b:45:8e:05:77:13:d8:cb:00:1f:84:c2:1b:a3:99:9d:3a:25: 1a:24:62:b7:3f:ac:1a:ac:67:a3:b0:71:ab:49:03:93:05:2c: 3f:3b:11:4e:18:48:c6:ba:4c:f9:e0:f6:60:0c:49:5e:b6:22: 8d:56:4b:ba:63:f9:e7:71:ec:c3:76:7b:77:54:d1:c8:12:f9: a7:5e:45:25:93:37:1f:30:91:63:ed:e5:65:ff:3e:75:7f:3d: 33:5a:50:88:ab:88:82:8c:aa:c9:19:2f:7b:83:60:99:bf:3a: 1e:b2:4d:3f:f3:8a:ee:3a:f6:1b:b8:59:d6:8a:3a:6d:5e:37: 4b:61:97:0b:07:d6:38:2e:d2:69:fb:2f:18:11:1e:22:77:c1: 06:ef:b4:41:30:5d:5b:3d:c8:40:79:7a:00:30:fb:aa:6b:c4: aa:46:78:8f:b4:7c:3c:c6:f5:03:6d:05:74:7c:db:5f:64:60: 4b:6b:28:40:12:8d:32:4e:a0:c8:af:bb:93:bc:e4:cd:44:92: 6b:19:eb:ff:af:74:47:4b:d9:85:75:41:e0:d3:36:69:d5:70: ce:fb:6f:db:12:43:e7:68:05:88:1e:cf:6b:0c:5a:59:d2:b8: c8:1c:6a:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G79gsAz1Cfw9t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmE5MDVjZjEtMGFmYS00MDU5LWE0NjktMDIxNzM3NjlhMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM4DNNQwPcwxxkZ0o6GwTKOoR3+bpFOHGSzU 4qhneTuCOR1AvXKDoyCVBVUiw7SHtwC3Fp9fRBsqSUZeAgVjmOeO93BEIVyiZesQ 017pgumJQwXS4+dITZdm/vpLB/FlhpZGnBnYQ9mZdjshVs9I0NtIm3djqvsmTVN/ gW7FFESOm6NrUuYq1jdO5umdaPyApSlz7HNGjMLydFctYCwRoKbcU+a3y5X9tJk/ DmfkZvleIE8NXkwsqkNS2QkGM4VVEi22Aiuv/wgFshxoN2FWQ6+eUsnMayM0WSVv 08Bof9VZkx1qRy5BFAMYEzEzHrv8wFxbVPMbUJ12HM3GCXxpUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLrwTgUP2oHQ+sSqMnsfMvlSr4qQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDIzZWIwYzUtNjYyMS0z NmY0LWI2NDQtYjFkNjg3Y2FiMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfVIedeYcx045cLl1oLMxI2GntFjgV3E9jLAB+EwhujmZ06JRok Yrc/rBqsZ6OwcatJA5MFLD87EU4YSMa6TPng9mAMSV62Io1WS7pj+edx7MN2e3dU 0cgS+adeRSWTNx8wkWPt5WX/PnV/PTNaUIiriIKMqskZL3uDYJm/Oh6yTT/ziu46 9hu4WdaKOm1eN0thlwsH1jgu0mn7LxgRHiJ3wQbvtEEwXVs9yEB5egAw+6prxKpG eI+0fDzG9QNtBXR8219kYEtrKEASjTJOoMivu5O85M1EkmsZ6/+vdEdL2YV1QeDT NmnVcM77b9sSQ+doBYgez2sMWlnSuMgcarI= -----END CERTIFICATE-----Generated at Mon Aug 4 07:52:36 2025 by rpki-client