$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ceb8e65-288e-398e-8365-768aec9277f8.roa File: 7ceb8e65-288e-398e-8365-768aec9277f8.roa (raw, json) Hash identifier: gbdsuzQLemYsKhtH7EGzkZrMOlheQHTv7TNBq0D53g8= Subject key identifier: 23:55:6F:09:4A:29:39:41:C7:EE:79:32:B3:48:D2:74:48:32:75:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C0100F55E6E21C2488A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ceb8e65-288e-398e-8365-768aec9277f8.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 33765 IP address blocks: 2001:470:2c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:01:00:f5:5e:6e:21:c2:48:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d66476b4-4096-4174-91b4-9578194de4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:bf:87:25:d4:b6:9e:24:d4:af:67:52:7d: 29:4d:d5:c9:cc:52:b1:66:43:ba:4c:10:b6:cf:d8: 3b:90:e6:da:d8:e0:c9:ff:e7:24:fd:5f:1d:09:48: 8c:aa:1c:9c:c6:3b:fc:e8:93:9f:43:b1:87:98:b5: f0:9b:be:75:32:cd:42:cf:2a:df:14:c1:45:52:c2: d6:cd:91:29:e3:5e:4f:60:98:9f:8c:50:88:f1:5b: 37:7d:1d:5b:b5:f2:8c:79:89:67:8c:15:aa:1b:b8: e7:3a:42:62:57:b0:f6:1a:7e:d6:f9:8c:10:3a:6d: a9:fe:a5:76:c5:37:f6:4e:ee:6e:92:4f:9c:87:ff: ed:de:50:20:22:e2:2a:86:1a:cd:9b:de:00:0d:98: c9:d1:95:8b:b7:a3:2a:c1:20:ca:a3:67:2e:77:15: e8:7e:51:ed:60:ad:85:db:2f:fc:3f:c5:e2:3d:ac: 82:6e:9b:43:89:e4:a5:88:31:bb:a8:f6:ba:80:3f: a4:5e:7c:c8:98:ca:87:28:c7:d1:62:d5:9d:be:f0: e6:ac:55:aa:ba:27:b7:39:2f:1f:22:e8:87:85:cd: d1:9f:64:54:a5:fd:c2:87:d3:cf:b4:10:e2:d5:2c: 80:7a:f6:24:f9:c3:bc:c7:58:4d:a0:c3:11:bc:b7: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:6F:09:4A:29:39:41:C7:EE:79:32:B3:48:D2:74:48:32:75:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ceb8e65-288e-398e-8365-768aec9277f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9a:30:09:7e:ca:da:a1:62:0d:c3:35:15:89:e7:4e:77:9c: 3a:b2:0a:62:8a:d5:7c:71:90:8a:f9:37:dc:73:4c:b5:15:a2: fe:89:1b:69:65:72:53:39:98:e8:cf:54:aa:25:8a:c1:01:7d: 89:12:95:ab:76:c4:89:23:cd:00:95:18:6a:98:5f:1f:4d:4b: 44:b8:e3:b6:8f:65:4b:3b:59:74:36:2f:7b:e1:4b:7b:fa:22: e2:d0:bb:b9:ee:83:6b:db:05:2d:71:ac:93:58:24:64:85:65: 21:8d:18:e9:c3:2d:a8:75:aa:95:6d:23:4f:f3:01:d5:c5:c1: f7:8e:b8:eb:10:0f:8c:66:17:4d:cf:1f:a2:c3:5b:ff:1c:56: fa:08:f5:0b:05:30:1f:8b:eb:c2:9d:48:a9:c5:43:95:c1:29: 8d:b2:d1:03:03:4a:b6:05:7b:97:79:98:26:05:00:28:26:b0: 3a:c6:6c:2e:3b:50:be:17:36:d7:3c:43:5e:59:88:45:3b:dc: a5:30:76:61:63:d4:8e:0f:89:24:4f:78:92:0c:ed:f1:d0:78: 82:e8:29:df:5e:3f:b1:30:9e:5e:cf:0f:a4:76:0d:96:88:cb: 1c:9b:a3:4d:7f:17:a2:ed:46:ae:21:a7:04:3c:09:68:96:c2: f9:f5:0c:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAEA9V5uIcJIioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDY2NDc2YjQtNDA5Ni00MTc0LTkxYjQtOTU3ODE5NGRlNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoie/hyXUtp4k1K9nUn0pTdXJzFKxZkO6TBC2 z9g7kOba2ODJ/+ck/V8dCUiMqhycxjv86JOfQ7GHmLXwm751Ms1CzyrfFMFFUsLW zZEp415PYJifjFCI8Vs3fR1btfKMeYlnjBWqG7jnOkJiV7D2Gn7W+YwQOm2p/qV2 xTf2Tu5ukk+ch//t3lAgIuIqhhrNm94ADZjJ0ZWLt6MqwSDKo2cudxXoflHtYK2F 2y/8P8XiPayCbptDieSliDG7qPa6gD+kXnzImMqHKMfRYtWdvvDmrFWquie3OS8f IuiHhc3Rn2RUpf3Ch9PPtBDi1SyAevYk+cO8x1hNoMMRvLedSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNVbwlKKTlBx+55MrNI0nRIMnXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2NlYjhlNjUtMjg4ZS0z OThlLTgzNjUtNzY4YWVjOTI3N2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmaMAl+ytqhYg3DNRWJ5053nDqyCmKK1XxxkIr5N9xzTLUVov6J G2llclM5mOjPVKolisEBfYkSlat2xIkjzQCVGGqYXx9NS0S447aPZUs7WXQ2L3vh S3v6IuLQu7nug2vbBS1xrJNYJGSFZSGNGOnDLah1qpVtI0/zAdXFwfeOuOsQD4xm F03PH6LDW/8cVvoI9QsFMB+L68KdSKnFQ5XBKY2y0QMDSrYFe5d5mCYFACgmsDrG bC47UL4XNtc8Q15ZiEU73KUwdmFj1I4PiSRPeJIM7fHQeILoKd9eP7Ewnl7PD6R2 DZaIyxybo01/F6LtRq4hpwQ8CWiWwvn1DLc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:18 2025 by rpki-client