$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa File: 3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa (raw, json) Hash identifier: 9O09oXvY3D4rfohOgzVD0pxqF6JqMb2EH4db8qaNPnk= Subject key identifier: 4C:D9:F5:98:B7:DA:31:FA:60:71:AA:21:3D:97:74:EC:CB:9F:4D:D3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFB3056B50C25C905BE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 28773 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fb:30:56:b5:0c:25:c9:05:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=bc8488bd-8db7-4919-88d0-118f7c7f99cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:46:34:f3:b3:9f:c6:4b:5d:ca:11:20:f8: 81:d1:a6:f9:82:29:ad:f6:a0:e6:03:2f:9d:2d:f1: 06:18:c1:be:57:47:ce:46:61:3e:56:6f:1e:a3:bf: 19:8b:74:24:1c:fc:ac:f1:88:c6:3c:c4:92:2f:59: 8a:12:44:e7:b6:16:6c:c6:90:b8:70:a7:3a:dc:7d: 6c:7a:3c:78:2c:95:c9:48:1c:70:75:f1:a4:f8:95: 18:82:ce:5c:9b:0a:16:3d:6b:cb:14:42:b8:ea:27: da:24:04:70:6f:a7:87:14:54:ff:65:1b:ed:8d:2d: 5c:a1:82:75:72:d2:99:db:3c:ce:8e:71:e9:9b:a1: 12:97:9a:5f:64:26:9a:93:74:16:36:75:67:8e:eb: 3d:80:eb:af:2b:dd:fb:c5:f0:81:f8:df:cf:67:d9: 7d:a3:6c:35:b0:5d:fe:74:aa:32:09:33:13:29:57: 54:95:46:1e:b3:6b:d9:58:86:e3:d1:53:fa:26:08: f7:7b:71:31:23:92:24:3e:91:53:f2:29:10:a2:39: 2c:6a:8d:5e:9b:2e:fc:09:c8:86:31:49:21:ff:90: d9:3d:36:5c:a8:da:c0:f4:b7:2c:9c:11:cb:65:83: 28:54:4e:ff:ef:df:2e:6f:c1:24:ff:27:62:99:f5: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D9:F5:98:B7:DA:31:FA:60:71:AA:21:3D:97:74:EC:CB:9F:4D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b0:5f:ea:ee:89:f9:2d:10:7a:a8:7b:77:14:21:d7:1b:db: dd:d7:1b:a5:58:4c:74:be:15:d1:cb:02:fe:82:83:7b:41:38: ac:1f:ef:28:62:87:13:b3:50:73:c4:0d:ab:66:b2:3c:ef:f8: bd:a6:12:22:8d:65:a0:7d:ad:6b:ff:85:b9:dc:fc:09:d5:e9: 82:11:aa:08:c0:fb:f6:b5:54:df:0b:df:22:0b:d1:87:31:b1: cb:17:ac:f2:c2:44:84:e4:a8:46:d4:72:33:85:6e:3b:f9:43: 22:ba:fd:78:16:fd:3b:ee:95:f0:d1:d8:5c:ab:28:00:58:a6: 28:43:35:55:5b:12:82:01:dd:18:57:5f:70:69:aa:d0:a7:4e: 92:83:2d:2e:4b:ec:aa:3f:b7:c0:df:6c:cd:99:c7:0c:16:f1: 1b:32:b3:ef:e5:92:c1:cb:bf:10:ff:dc:93:44:06:bf:6c:8b: ac:91:21:aa:89:d7:f2:29:41:42:a4:20:a2:c9:bb:a1:c2:dc: 7a:9f:0b:30:76:19:60:0e:78:a0:52:92:a8:56:26:d7:c3:2a: fe:34:f4:b3:2d:57:41:66:1e:bb:46:d1:56:e8:0b:fa:e7:0f: 4a:6b:00:9e:66:ee:f2:c1:3c:17:f5:67:7a:c1:9c:c9:21:8f: 58:48:a4:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/swVrUMJckFvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmM4NDg4YmQtOGRiNy00OTE5LTg4ZDAtMTE4ZjdjN2Y5OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDxGNPOzn8ZLXcoRIPiB0ab5gimt9qDmAy+d LfEGGMG+V0fORmE+Vm8eo78Zi3QkHPys8YjGPMSSL1mKEkTnthZsxpC4cKc63H1s ejx4LJXJSBxwdfGk+JUYgs5cmwoWPWvLFEK46ifaJARwb6eHFFT/ZRvtjS1coYJ1 ctKZ2zzOjnHpm6ESl5pfZCaak3QWNnVnjus9gOuvK937xfCB+N/PZ9l9o2w1sF3+ dKoyCTMTKVdUlUYes2vZWIbj0VP6Jgj3e3ExI5IkPpFT8ikQojksao1emy78CciG MUkh/5DZPTZcqNrA9LcsnBHLZYMoVE7/798ub8Ek/ydimfWqFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzZ9Zi32jH6YHGqIT2XdOzLn03TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2RhMzljZmItNjNjNC0z M2I5LWJkZWUtY2VmY2E5OWYxYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOwX+ruifktEHqoe3cUIdcb293XG6VYTHS+FdHLAv6Cg3tBOKwf 7yhihxOzUHPEDatmsjzv+L2mEiKNZaB9rWv/hbnc/AnV6YIRqgjA+/a1VN8L3yIL 0YcxscsXrPLCRITkqEbUcjOFbjv5QyK6/XgW/TvulfDR2FyrKABYpihDNVVbEoIB 3RhXX3BpqtCnTpKDLS5L7Ko/t8DfbM2ZxwwW8Rsys+/lksHLvxD/3JNEBr9si6yR IaqJ1/IpQUKkIKLJu6HC3HqfCzB2GWAOeKBSkqhWJtfDKv409LMtV0FmHrtG0Vbo C/rnD0prAJ5m7vLBPBf1Z3rBnMkhj1hIpI4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:53:06 2025 by rpki-client