$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e58ebe2-1d40-368f-ad8c-578986367d7d.roa File: 7e58ebe2-1d40-368f-ad8c-578986367d7d.roa (raw, json) Hash identifier: NpEWAr6wLaTw1+WJ4ngL6L9hMirHyXrTbpI04kNwU+A= Subject key identifier: A4:1B:6B:A2:34:C0:81:A5:D7:06:B9:71:41:8D:B4:E0:95:0E:F1:0C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BFDDB5A3D07B967458CE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e58ebe2-1d40-368f-ad8c-578986367d7d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 395681 IP address blocks: 2001:470:296::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:fd:db:5a:3d:07:b9:67:45:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c4c962aa-1e58-4cb6-84ce-85cc421dac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:56:5e:4c:e4:66:e9:0e:9d:1c:0f:3a:3b:fb: 3e:1c:21:66:d9:89:55:87:1c:b1:ab:36:4d:a8:1e: a4:e9:b8:df:8a:27:2d:4d:13:64:c5:9a:9a:cb:49: 2e:d9:42:8c:e8:0e:4c:bc:f9:09:89:b5:fe:88:99: fa:33:ec:b6:3d:dc:5c:19:f1:9e:f1:a5:d1:45:ff: b2:7a:3c:90:3c:b9:1e:b9:c0:db:e6:8e:c9:e6:0e: 4f:e1:fd:8a:71:82:88:85:cd:1d:17:a1:50:06:e7: 11:98:e3:6b:0e:0f:3e:a1:26:07:71:f0:86:1d:7d: cf:c3:6c:22:08:82:58:ec:16:03:4a:1c:85:15:21: 36:43:77:13:c5:7f:e2:9e:92:ce:f3:db:89:f4:0a: 57:e4:fc:cc:0e:b5:e7:cc:38:10:c2:a9:b5:7a:ea: 61:44:2f:93:0e:bf:eb:25:e4:7f:83:51:1b:5a:b4: 17:93:11:66:bc:57:3d:43:bf:15:d2:fa:5c:37:22: f4:77:35:d8:61:55:48:6f:af:b6:bf:8d:fd:35:c3: e6:83:0e:98:24:11:83:4d:9a:65:fb:07:1d:d5:a5: d7:c3:c3:86:85:02:bf:8d:40:d3:ba:b8:bd:ca:bf: 1b:8d:8a:e1:19:1e:75:54:25:de:c5:25:12:3e:e6: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1B:6B:A2:34:C0:81:A5:D7:06:B9:71:41:8D:B4:E0:95:0E:F1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e58ebe2-1d40-368f-ad8c-578986367d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:296::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3d:2c:5d:84:a6:5d:07:5f:35:93:95:a7:fd:59:8c:22:fb: 79:e8:e0:33:7b:78:6c:7f:bc:ef:7b:20:14:fb:07:a2:78:e4: 5d:10:18:50:b2:d8:e4:7a:82:ec:7b:eb:93:02:13:48:41:ac: 82:03:7d:a6:09:7a:68:21:62:60:5d:28:cc:43:f2:03:39:e0: 89:74:d6:e3:e2:ad:53:08:3d:e5:04:3a:12:7f:0a:3c:d6:b9: b7:4e:34:86:ac:51:e3:a0:5a:9d:17:24:bb:64:2d:27:5a:ca: 34:30:0b:2e:1e:ed:46:fc:83:50:02:e2:0f:0a:62:40:f2:a7: 68:c1:41:c5:03:1b:21:26:b9:04:55:d4:5f:b8:ac:55:48:ed: 7d:d5:06:06:ce:fe:70:a1:aa:dd:76:8e:a0:8d:2b:4e:4c:ad: dd:30:93:a5:cf:7b:4f:a9:e4:cc:94:b8:2c:95:99:a5:46:58: 1b:83:7d:7d:4f:79:88:d7:33:d1:fe:10:58:c7:6a:cf:59:2b: 8f:fb:1f:db:0b:9e:2c:d7:5b:40:b8:36:15:8f:e6:e1:85:98: 4e:9e:6f:b7:39:ff:78:8a:c4:3d:b9:91:8b:c6:f7:e4:55:0c: 01:cf:27:b9:b2:dc:64:8e:28:8f:58:36:98:0a:dd:cf:fa:ad: 7b:dd:ba:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/3bWj0HuWdFjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzRjOTYyYWEtMWU1OC00Y2I2LTg0Y2UtODVjYzQyMWRhYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglZeTORm6Q6dHA86O/s+HCFm2YlVhxyxqzZN qB6k6bjfiictTRNkxZqay0ku2UKM6A5MvPkJibX+iJn6M+y2PdxcGfGe8aXRRf+y ejyQPLkeucDb5o7J5g5P4f2KcYKIhc0dF6FQBucRmONrDg8+oSYHcfCGHX3Pw2wi CIJY7BYDShyFFSE2Q3cTxX/inpLO89uJ9ApX5PzMDrXnzDgQwqm1euphRC+TDr/r JeR/g1EbWrQXkxFmvFc9Q78V0vpcNyL0dzXYYVVIb6+2v439NcPmgw6YJBGDTZpl +wcd1aXXw8OGhQK/jUDTuri9yr8bjYrhGR51VCXexSUSPuZbFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQba6I0wIGl1wa5cUGNtOCVDvEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2U1OGViZTItMWQ0MC0z NjhmLWFkOGMtNTc4OTg2MzY3ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEE9LF2Epl0HXzWTlaf9WYwi+3no4DN7eGx/vO97IBT7B6J45F0Q GFCy2OR6gux765MCE0hBrIIDfaYJemghYmBdKMxD8gM54Il01uPirVMIPeUEOhJ/ CjzWubdONIasUeOgWp0XJLtkLSdayjQwCy4e7Ub8g1AC4g8KYkDyp2jBQcUDGyEm uQRV1F+4rFVI7X3VBgbO/nChqt12jqCNK05Mrd0wk6XPe0+p5MyUuCyVmaVGWBuD fX1PeYjXM9H+EFjHas9ZK4/7H9sLnizXW0C4NhWP5uGFmE6eb7c5/3iKxD25kYvG 9+RVDAHPJ7my3GSOKI9YNpgK3c/6rXvduvQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:24 2025 by rpki-client