$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa File: 30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa (raw, json) Hash identifier: lISmKmeWXkkaU/3r+ArJIEk+7ebLZGjTZTCV2MNU0Lo= Subject key identifier: 6D:44:B8:DB:04:D1:AD:B7:B4:44:64:C9:91:CA:E5:21:5E:61:AB:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ABBE6332E4863E9665F557380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 201470 IP address blocks: 2001:470:3db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:33:2e:48:63:e9:66:5f:55:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=4d9d3268-4a93-4080-b2d7-865ee4300a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:db:7c:04:b4:a0:2e:0b:8d:ac:e5:15:15: 99:0b:57:c0:a0:98:06:88:36:b6:c4:9a:69:09:54: 38:85:02:b7:e6:de:ea:a1:99:5a:d2:03:bf:cf:46: 98:39:21:87:0b:c8:07:c6:4e:5d:cf:bd:49:70:f7: 5e:86:c9:a7:ce:8b:d2:be:86:b2:7d:58:36:f7:b4: ca:4e:64:e7:8b:c7:c9:14:4e:4e:2f:3a:f6:63:15: 15:96:fe:c7:51:33:87:82:ad:44:26:85:9f:46:78: 34:7f:24:53:29:6a:84:83:a7:67:3a:bd:9f:e0:45: 71:f1:82:dd:42:7c:04:24:f7:7c:a3:a1:4c:94:e3: 37:32:8f:4a:4b:8c:70:e6:02:7d:b5:11:07:d1:8e: 63:c7:35:bd:ce:cf:32:45:ac:29:f5:59:d8:e6:3e: 5a:42:b9:3d:1f:f4:d0:60:87:61:a0:11:bd:4d:2b: 39:1c:67:ab:87:ab:e0:b2:b5:ce:77:b7:0f:45:64: 52:17:d0:cb:e6:f7:bd:c7:89:eb:36:93:2e:97:ca: 70:ab:2e:39:61:0b:a0:d4:47:d7:7c:d1:e5:03:e5: c2:ba:fd:4e:ae:cf:94:ad:43:56:45:b3:2d:31:81: e3:fb:c9:97:01:97:ed:24:fb:b3:39:0a:7a:76:56: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:44:B8:DB:04:D1:AD:B7:B4:44:64:C9:91:CA:E5:21:5E:61:AB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:59:53:07:42:f4:c1:82:d2:05:42:62:cd:f3:27:01:6f:c7: 14:64:51:37:02:b0:8b:29:75:f9:31:d9:1f:30:15:4e:f5:c4: ea:ff:5d:28:60:31:ba:dc:12:16:99:8f:ae:8e:cd:49:86:20: 62:60:e6:46:1c:09:40:f4:ce:10:16:c5:86:49:19:ae:80:cf: 20:8a:50:b2:5e:e9:04:91:17:d5:13:a5:88:0a:dd:55:4a:f3: 6c:ab:b8:d7:6a:c1:95:59:0d:53:0e:bb:c0:59:35:dd:50:94: ae:64:00:27:85:a5:10:b0:30:95:32:d0:80:48:a4:8f:30:33: 66:da:fa:6a:e5:79:6c:c6:ca:d5:5e:92:7f:4e:38:8e:97:46: 48:cb:d9:9d:44:89:35:22:73:87:9e:29:73:d7:f3:9a:a1:c5: 50:1c:95:7a:21:46:e3:66:6d:25:8a:ee:aa:10:fd:b8:69:c6: e8:f3:c7:c7:c7:c5:e5:2b:6b:c7:63:28:46:06:6f:f7:4d:2a: 0e:a6:e4:1f:af:fb:2d:73:f0:46:06:94:5b:7c:e8:50:be:d0: 7e:dd:64:72:f5:ec:0c:1d:fa:81:0e:63:34:15:5c:40:f7:6e: 1b:9c:17:57:2b:dd:54:75:8c:6f:75:e5:0f:c4:89:a2:70:20: d0:64:68:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jMuSGPpZl9Vc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NGQ5ZDMyNjgtNGE5My00MDgwLWIyZDctODY1ZWU0MzAwYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkjbfAS0oC4LjazlFRWZC1fAoJgGiDa2xJpp CVQ4hQK35t7qoZla0gO/z0aYOSGHC8gHxk5dz71JcPdehsmnzovSvoayfVg297TK TmTni8fJFE5OLzr2YxUVlv7HUTOHgq1EJoWfRng0fyRTKWqEg6dnOr2f4EVx8YLd QnwEJPd8o6FMlOM3Mo9KS4xw5gJ9tREH0Y5jxzW9zs8yRawp9VnY5j5aQrk9H/TQ YIdhoBG9TSs5HGerh6vgsrXOd7cPRWRSF9DL5ve9x4nrNpMul8pwqy45YQug1EfX fNHlA+XCuv1Ors+UrUNWRbMtMYHj+8mXAZftJPuzOQp6dlalMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1EuNsE0a23tERkyZHK5SFeYatMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzBlOGI1ZjYtY2FiMC0z NzkyLWEwNjYtNzNjZDBhNDBiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZZUwdC9MGC0gVCYs3zJwFvxxRkUTcCsIspdfkx2R8wFU71xOr/ XShgMbrcEhaZj66OzUmGIGJg5kYcCUD0zhAWxYZJGa6AzyCKULJe6QSRF9UTpYgK 3VVK82yruNdqwZVZDVMOu8BZNd1QlK5kACeFpRCwMJUy0IBIpI8wM2ba+mrleWzG ytVekn9OOI6XRkjL2Z1EiTUic4eeKXPX85qhxVAclXohRuNmbSWK7qoQ/bhpxujz x8fHxeUra8djKEYGb/dNKg6m5B+v+y1z8EYGlFt86FC+0H7dZHL17Awd+oEOYzQV XED3bhucF1cr3VR1jG915Q/EiaJwINBkaJU= -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:40 2025 by rpki-client