$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa File: 704445ba-6dda-306b-9a4a-64db2b1238b1.roa (raw, json) Hash identifier: s+z2ZYVMUYKPx9hGCXdtKmYGA6C8mVbPikuooHXDk6g= Subject key identifier: 89:7C:86:49:87:F4:18:BD:93:B3:45:CC:D5:33:40:22:30:DB:DA:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD2A53CD7CEE41ABA3850 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 394330 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d2:a5:3c:d7:ce:e4:1a:ba:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=db953634-6ab0-4263-8a59-124079a9175a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:c3:c2:1d:4e:5f:9b:fa:39:65:83:3f:6f: e2:1c:16:83:b4:61:ad:fe:c7:17:2c:d5:22:f8:8d: b3:cf:95:20:6e:d5:78:85:47:ea:9e:8c:e3:63:8c: a4:d2:0a:d8:6a:f9:b1:95:85:44:c4:5a:32:aa:94: 61:f1:45:88:74:be:a9:2e:b1:a6:c7:de:e2:cf:9f: 2b:bd:33:fb:5d:f4:7f:08:e8:0b:5b:19:10:92:67: 1f:9a:0e:d9:49:e7:55:5e:3c:01:79:aa:6d:98:85: 4d:19:67:b3:b5:ca:3f:35:f2:f8:d8:15:17:09:b6: 06:2a:ae:42:d4:ec:12:78:db:ed:68:e2:bc:e3:7c: 4d:73:df:06:c2:df:cc:09:e8:c3:8c:a1:af:ac:04: 3b:2e:ac:67:19:49:33:1d:ff:b3:85:ca:30:f7:a2: 90:3f:d1:64:91:74:7d:79:7e:33:d8:8e:1c:9a:5e: da:fe:e8:02:ad:44:7e:08:9e:11:24:ff:2d:68:ab: 2b:8a:66:fe:2d:4f:42:fb:85:d7:c5:08:b3:82:fd: 5a:8a:6e:a4:a5:4c:fd:2b:2b:2f:6d:95:8e:08:92: 4a:63:e6:2e:06:60:db:51:ab:e5:3d:29:66:09:31: 84:6c:ef:c2:7f:68:ca:f9:cc:90:b1:b7:bb:e3:57: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:86:49:87:F4:18:BD:93:B3:45:CC:D5:33:40:22:30:DB:DA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7e:af:c0:1b:c6:b6:0c:e6:7a:87:1b:69:3a:cd:90:65:ce: 41:f3:ac:21:53:e1:0c:ac:53:63:92:2d:41:de:73:19:83:65: af:fe:d4:9e:9f:9b:49:b0:09:d4:c9:3c:ae:4f:6f:95:1f:46: 05:e5:1c:7e:78:ee:53:38:16:ed:02:ec:82:74:07:9c:b0:b2: d1:94:aa:07:75:0e:fc:ed:db:45:2b:ed:db:79:b3:91:18:be: 7b:38:5c:44:77:e4:89:51:d2:cc:6b:15:4d:9d:db:a3:c0:9c: 46:db:3d:46:ef:8d:01:46:2f:c6:f8:71:e1:0f:9f:41:0f:68: 6c:f5:35:08:f3:1c:5a:85:cf:a5:b8:37:cf:3b:a0:5b:d2:e8: d7:01:00:d2:eb:0a:e9:e7:7c:20:c8:84:66:ad:c2:22:e5:97: 35:74:aa:33:6c:a8:27:87:87:22:10:da:f7:3f:f2:6b:fe:1d: 0f:bc:07:3b:f3:39:4c:1f:1a:be:75:ef:45:06:56:35:e7:64: 34:68:f8:db:98:06:7b:39:a0:72:91:7d:35:79:df:28:74:0f: c7:1e:52:a0:72:c9:49:2f:db:12:0e:05:05:e4:66:5b:78:2a: a9:72:99:fa:e1:0e:b7:4d:c8:33:ce:da:43:44:0e:25:4b:67: 79:a0:9c:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9KlPNfO5Bq6OFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGI5NTM2MzQtNmFiMC00MjYzLThhNTktMTI0MDc5YTkxNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EHDwh1OX5v6OWWDP2/iHBaDtGGt/scXLNUi +I2zz5UgbtV4hUfqnozjY4yk0grYavmxlYVExFoyqpRh8UWIdL6pLrGmx97iz58r vTP7XfR/COgLWxkQkmcfmg7ZSedVXjwBeaptmIVNGWeztco/NfL42BUXCbYGKq5C 1OwSeNvtaOK843xNc98Gwt/MCejDjKGvrAQ7LqxnGUkzHf+zhcow96KQP9FkkXR9 eX4z2I4cml7a/ugCrUR+CJ4RJP8taKsrimb+LU9C+4XXxQizgv1aim6kpUz9Kysv bZWOCJJKY+YuBmDbUavlPSlmCTGEbO/Cf2jK+cyQsbe741dhJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIl8hkmH9Bi9k7NFzNUzQCIw29rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzA0NDQ1YmEtNmRkYS0z MDZiLTlhNGEtNjRkYjJiMTIzOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABx+r8AbxrYM5nqHG2k6zZBlzkHzrCFT4QysU2OSLUHecxmDZa/+ 1J6fm0mwCdTJPK5Pb5UfRgXlHH547lM4Fu0C7IJ0B5ywstGUqgd1Dvzt20Ur7dt5 s5EYvns4XER35IlR0sxrFU2d26PAnEbbPUbvjQFGL8b4ceEPn0EPaGz1NQjzHFqF z6W4N887oFvS6NcBANLrCunnfCDIhGatwiLllzV0qjNsqCeHhyIQ2vc/8mv+HQ+8 BzvzOUwfGr5170UGVjXnZDRo+NuYBns5oHKRfTV53yh0D8ceUqByyUkv2xIOBQXk Zlt4KqlymfrhDrdNyDPO2kNEDiVLZ3mgnOs= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:55 2025 by rpki-client