$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa File: 880d49ca-e401-311f-a067-ae0de57822c1.roa (raw, json) Hash identifier: GjvvWC0vsTrA06SjkAkD9kOtkikLkmcaSt6XertBYYU= Subject key identifier: 21:16:23:4B:8B:86:7C:D4:F5:7E:E3:A0:21:77:61:D7:81:25:14:59 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD33235D7820C0CF25280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 9416 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d3:32:35:d7:82:0c:0c:f2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=0dd1ced5-5993-490d-b96b-25357d930a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:59:f8:d2:38:05:d4:6e:24:33:b2:16:48:97: d8:a6:7d:bb:ae:40:00:65:1c:08:71:91:35:0a:85: 81:d0:4a:2a:3d:ae:68:2f:74:f2:cf:57:58:36:a2: 74:dd:5d:0e:78:d9:97:09:49:9c:77:06:cd:a5:ec: 62:fe:d3:0e:77:77:17:ca:33:80:b5:c1:a9:93:39: 13:44:f2:e3:1a:f1:9d:34:ea:af:90:10:9b:9c:c8: e7:fe:64:90:be:8c:d7:9b:12:61:8f:42:4b:fa:67: 8b:4a:3a:83:18:7c:0d:06:48:5f:cb:8f:b4:f6:87: 3d:d9:1f:11:79:26:71:6a:cc:7e:1a:9f:48:f1:d5: 23:32:2c:72:a9:47:ed:64:62:df:f9:c4:fb:7e:e2: 4b:58:a4:db:86:a5:a9:b0:98:d8:c6:80:30:b9:5d: 80:54:f3:77:92:f0:ed:58:50:59:00:7d:78:c7:14: 8c:f8:30:41:86:96:57:0f:b6:23:04:ff:96:65:35: 19:a8:8d:c1:90:be:47:4b:a4:e4:01:72:90:48:cb: 74:cc:f0:05:36:9f:96:24:7e:3c:97:62:0d:fd:9c: 6a:d2:c1:8a:73:73:05:fd:b0:c4:d9:46:30:ea:d1: c1:9c:c7:d2:d1:f3:59:c4:7c:7b:6d:d9:70:da:1d: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:23:4B:8B:86:7C:D4:F5:7E:E3:A0:21:77:61:D7:81:25:14:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:29:e7:c0:9b:a7:4a:b1:a8:38:85:c0:02:9e:63:17:b2:5c: b4:92:bd:27:b2:12:f2:a4:6f:11:23:09:e4:c6:36:e1:bb:87: e4:f0:24:cf:cd:79:3c:bb:95:5c:6e:8f:02:92:2f:a7:93:cd: d2:da:44:5e:f0:ed:2e:79:c2:5a:03:4d:09:67:91:d9:54:99: 9b:76:a8:7f:28:21:91:f4:e6:3a:1e:25:fe:17:2b:1d:a4:0a: e5:8b:a9:41:96:a6:ed:bc:0b:70:ee:a7:64:0b:3e:86:cc:5b: cc:98:4f:19:26:0a:d5:4a:7a:31:9b:d1:86:1f:22:db:f4:5b: 5d:08:80:70:1a:43:df:c0:3c:58:ba:ca:60:91:e0:17:b4:e6: 26:92:59:15:df:59:ba:30:72:4a:02:bc:c0:08:ed:bb:c6:85: 2f:a0:eb:12:14:e8:e5:92:0f:d0:a7:91:87:37:c4:8b:d5:15: 97:e5:7e:72:0a:0d:8e:fd:d3:d7:5b:76:14:f7:32:9a:68:f2: d9:96:9f:50:4f:07:5e:70:a9:06:7e:98:f0:09:f9:93:08:05: 6f:2d:d3:c1:eb:8c:a2:7d:3f:e6:07:36:cc:5a:d1:58:55:cc: 29:b3:b5:f1:6b:0f:e0:4c:2f:20:9b:3d:b0:4d:5a:dc:0b:50: 68:23:cb:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9MyNdeCDAzyUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGRkMWNlZDUtNTk5My00OTBkLWI5NmItMjUzNTdkOTMwYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVn40jgF1G4kM7IWSJfYpn27rkAAZRwIcZE1 CoWB0EoqPa5oL3Tyz1dYNqJ03V0OeNmXCUmcdwbNpexi/tMOd3cXyjOAtcGpkzkT RPLjGvGdNOqvkBCbnMjn/mSQvozXmxJhj0JL+meLSjqDGHwNBkhfy4+09oc92R8R eSZxasx+Gp9I8dUjMixyqUftZGLf+cT7fuJLWKTbhqWpsJjYxoAwuV2AVPN3kvDt WFBZAH14xxSM+DBBhpZXD7YjBP+WZTUZqI3BkL5HS6TkAXKQSMt0zPAFNp+WJH48 l2IN/Zxq0sGKc3MF/bDE2UYw6tHBnMfS0fNZxHx7bdlw2h247QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEWI0uLhnzU9X7joCF3YdeBJRRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODgwZDQ5Y2EtZTQwMS0z MTFmLWEwNjctYWUwZGU1NzgyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMp58Cbp0qxqDiFwAKeYxeyXLSSvSeyEvKkbxEjCeTGNuG7h+Tw JM/NeTy7lVxujwKSL6eTzdLaRF7w7S55wloDTQlnkdlUmZt2qH8oIZH05joeJf4X Kx2kCuWLqUGWpu28C3Dup2QLPobMW8yYTxkmCtVKejGb0YYfItv0W10IgHAaQ9/A PFi6ymCR4Be05iaSWRXfWbowckoCvMAI7bvGhS+g6xIU6OWSD9CnkYc3xIvVFZfl fnIKDY7909dbdhT3Mppo8tmWn1BPB15wqQZ+mPAJ+ZMIBW8t08HrjKJ9P+YHNsxa 0VhVzCmztfFrD+BMLyCbPbBNWtwLUGgjy4o= -----END CERTIFICATE-----Generated at Mon Aug 4 07:51:34 2025 by rpki-client