$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa File: 2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa (raw, json) Hash identifier: taD3Ue863pzrsKufx07x/d9mAO8QSIUTpb0BLmr4fgk= Subject key identifier: 80:8C:8E:3A:1D:86:4B:67:C8:7F:9E:47:76:CE:F1:0B:50:B4:6E:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCEC4AB52A734E1811000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 33621 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:c4:ab:52:a7:34:e1:81:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=29c39ce3-824d-44ab-9828-54ad6898d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:46:1a:4f:6c:9c:11:02:7e:d1:91:a6:1e: 1a:c7:0d:15:2d:94:bf:6b:b1:24:ee:d0:63:4c:a4: af:b5:e6:5f:3b:e4:b6:7b:ca:b9:d0:c5:08:cc:dc: 2d:c8:9e:6a:7a:85:d1:88:c1:bc:4f:8b:47:4e:8f: 6e:2d:20:b1:77:0b:8b:13:ea:d9:ae:e9:49:b2:cc: e8:2f:99:68:b8:bb:7b:46:d6:c5:51:7c:52:0e:6a: 03:04:dd:67:f5:22:31:1c:3a:54:10:be:8a:10:8d: 19:1c:68:35:98:38:42:8d:2d:48:a0:f1:32:a4:a4: 21:17:aa:5b:a0:5f:6a:ae:f1:a5:30:e4:25:ba:0f: 6b:64:2e:3f:79:03:aa:c3:5c:06:83:54:5d:5c:c3: ae:ec:e7:96:cd:b0:4a:24:e4:f8:26:e6:54:60:18: cc:18:b6:a6:e1:2e:cd:92:6a:bb:3a:9d:c7:39:66: 93:6d:43:76:f3:84:eb:c8:6f:32:8d:c9:b2:76:db: cb:1b:a1:85:2d:b9:48:90:86:a4:dc:fd:68:6d:8d: c2:5d:ab:63:6a:3c:60:16:2f:7f:d1:e5:c4:07:99: 37:51:3b:f3:bc:23:d9:7e:30:ed:c4:61:41:33:90: a9:60:b4:67:e2:9e:c5:ea:a2:9f:b2:fb:71:8a:a5: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8C:8E:3A:1D:86:4B:67:C8:7F:9E:47:76:CE:F1:0B:50:B4:6E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8d:13:50:17:a7:97:b7:19:be:28:38:53:05:44:1c:27:89: 0e:18:ae:5f:aa:5d:2b:43:79:de:e9:0a:f7:48:8e:c4:47:46: c0:b1:d9:22:17:d9:2c:e6:20:6c:9a:ec:73:2c:ea:48:3f:c9: c2:2e:9e:cf:73:b0:4f:4d:e7:16:d2:f1:64:87:df:15:11:e5: fc:3e:a9:ff:48:1e:39:88:68:bd:9e:1a:b8:5d:eb:69:c6:a6: cf:7c:7d:01:1f:73:1d:d4:16:23:81:a1:cf:04:d4:21:36:5f: 42:3c:e5:31:b4:c0:ea:e5:f1:b6:62:bc:17:03:a1:99:bd:4f: 72:4a:e1:4c:97:8d:38:ef:ca:7f:4d:8e:a4:2c:ed:84:d2:cc: 6e:a7:82:1d:8c:cf:c6:a4:80:a5:96:fc:12:71:91:04:21:00: 7e:b3:e0:de:3f:06:54:00:45:23:43:fb:fa:73:ee:d9:be:29: c4:92:63:19:6d:52:9a:d1:15:a4:33:a2:a6:7b:91:85:9f:c0: 90:ca:2f:7c:1e:da:90:81:48:bb:56:47:50:34:45:0e:82:2c: 5d:72:22:3c:c1:1a:3b:b3:c6:db:36:42:e5:5d:0b:63:e2:d1: 86:50:94:c0:fd:c1:24:a6:b1:8a:5d:4f:05:c4:35:6b:d4:c6: 7e:68:b0:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G87Eq1KnNOGBEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjljMzljZTMtODI0ZC00NGFiLTk4MjgtNTRhZDY4OThkNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP1GGk9snBECftGRph4axw0VLZS/a7Ek7tBj TKSvteZfO+S2e8q50MUIzNwtyJ5qeoXRiMG8T4tHTo9uLSCxdwuLE+rZrulJsszo L5louLt7RtbFUXxSDmoDBN1n9SIxHDpUEL6KEI0ZHGg1mDhCjS1IoPEypKQhF6pb oF9qrvGlMOQlug9rZC4/eQOqw1wGg1RdXMOu7OeWzbBKJOT4JuZUYBjMGLam4S7N kmq7Op3HOWaTbUN284TryG8yjcmydtvLG6GFLblIkIak3P1obY3CXatjajxgFi9/ 0eXEB5k3UTvzvCPZfjDtxGFBM5CpYLRn4p7F6qKfsvtxiqVTcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICMjjodhktnyH+eR3bO8QtQtG5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQwNThmYzItOWQxYi0z N2NlLWJjYzctOWRiZDI2MjdkNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJCNE1AXp5e3Gb4oOFMFRBwniQ4Yrl+qXStDed7pCvdIjsRHRsCx 2SIX2SzmIGya7HMs6kg/ycIuns9zsE9N5xbS8WSH3xUR5fw+qf9IHjmIaL2eGrhd 62nGps98fQEfcx3UFiOBoc8E1CE2X0I85TG0wOrl8bZivBcDoZm9T3JK4UyXjTjv yn9NjqQs7YTSzG6ngh2Mz8akgKWW/BJxkQQhAH6z4N4/BlQARSND+/pz7tm+KcSS YxltUprRFaQzoqZ7kYWfwJDKL3we2pCBSLtWR1A0RQ6CLF1yIjzBGjuzxts2QuVd C2Pi0YZQlMD9wSSmsYpdTwXENWvUxn5osMs= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:34 2025 by rpki-client