$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa File: 883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa (raw, json) Hash identifier: NXbvk3RuVRTOrShn2u08C2T0ppS52mKvvQkUy7LkDVQ= Subject key identifier: 41:4C:7A:19:F7:9B:78:D8:AE:34:BD:95:74:8E:23:1B:C3:4C:A5:3A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC7CB844D5FE87F8BEAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 31769 IP address blocks: 2001:470:137::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c7:cb:84:4d:5f:e8:7f:8b:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1670bc29-0f55-40a5-9ed1-0ed97e510c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:fe:76:20:21:eb:36:4d:23:68:d6:e0:bd: 59:be:b4:1b:f2:67:1b:c8:0e:7b:f7:34:50:07:73: e8:7e:f0:fe:eb:ff:f2:ce:85:13:68:90:c5:ea:5f: 9f:de:4a:df:3e:28:00:1d:1c:d7:b9:5a:48:7e:7f: 9a:6a:d7:02:b7:47:5d:86:bf:3b:fb:d7:c5:9f:60: b0:79:af:9d:2d:2f:15:89:14:41:35:75:e8:3e:39: 34:68:16:e5:9a:d5:3a:be:44:d8:55:f2:b1:aa:1f: d3:f3:ee:15:df:3d:06:b0:37:1b:a7:38:90:c2:0b: dc:3a:b2:21:08:f5:8d:f8:3f:34:d7:9b:2f:44:ce: c5:4f:ab:c1:f2:fe:b6:05:d6:28:60:6f:9d:84:bc: 91:6a:08:5b:4e:0b:61:29:9b:61:2a:af:26:37:6b: 82:a6:a7:4f:73:04:06:91:f0:04:bf:d4:ca:6b:2e: d7:c2:80:9d:2b:45:d3:b8:af:bb:4c:03:df:bb:71: 72:c7:60:b5:c3:90:3c:18:10:26:9f:6f:03:56:f9: 0d:25:96:68:4b:47:c8:1e:46:04:a8:52:a3:fb:ca: 0f:e1:d4:ef:a2:31:f7:66:c1:b5:07:91:bf:d9:2f: 37:bb:c8:0d:b5:2b:09:f4:69:23:73:26:2b:d4:45: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:7A:19:F7:9B:78:D8:AE:34:BD:95:74:8E:23:1B:C3:4C:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/883ad1ce-8738-3986-a2a3-3cd7ecab38e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:137::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ab:e7:11:8d:77:34:1a:68:1a:7a:53:de:4b:02:60:eb:e9: 98:c3:b2:7e:17:4a:fc:57:d5:57:5b:df:e2:85:df:f9:71:18: 32:f0:ef:a2:64:ab:18:01:d9:00:68:ef:3e:7e:7a:0a:e5:38: 58:35:8b:f0:6f:05:4a:9a:b7:72:1a:a6:f3:0a:29:24:65:96: b0:c7:21:be:fb:5c:a0:1d:1d:37:33:24:93:f3:02:f1:fd:12: 9e:1d:24:7e:b3:79:59:7b:92:a0:b2:f2:3a:c5:00:78:01:53: 55:f8:34:37:83:96:24:60:0c:ca:02:92:dd:12:63:91:37:b9: 0c:92:9b:64:34:7d:cb:8a:c2:a7:32:f6:3e:4d:14:a5:11:08: eb:2b:d8:09:b2:7e:d5:74:a0:f9:06:f1:ca:6e:49:4b:7e:a4: b1:06:ba:31:2e:77:ef:34:75:69:04:b2:e7:87:33:45:50:fb: 04:b2:c6:d5:86:d0:f2:d7:fd:69:6a:65:a9:6c:1e:d9:95:a5: db:fa:03:c2:c8:f0:1e:ea:d9:65:76:c7:4a:69:e4:bf:de:d7: e2:8b:cb:db:01:cf:1d:37:a8:d1:34:6b:a9:46:1f:c7:1a:64: 89:1d:57:11:79:f9:74:6a:f2:95:c2:ef:80:6e:ef:fd:44:ec: 56:6f:24:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8fLhE1f6H+L6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTY3MGJjMjktMGY1NS00MGE1LTllZDEtMGVkOTdlNTEwYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum3+diAh6zZNI2jW4L1ZvrQb8mcbyA579zRQ B3PofvD+6//yzoUTaJDF6l+f3krfPigAHRzXuVpIfn+aatcCt0ddhr87+9fFn2Cw ea+dLS8ViRRBNXXoPjk0aBblmtU6vkTYVfKxqh/T8+4V3z0GsDcbpziQwgvcOrIh CPWN+D8015svRM7FT6vB8v62BdYoYG+dhLyRaghbTgthKZthKq8mN2uCpqdPcwQG kfAEv9TKay7XwoCdK0XTuK+7TAPfu3Fyx2C1w5A8GBAmn28DVvkNJZZoS0fIHkYE qFKj+8oP4dTvojH3ZsG1B5G/2S83u8gNtSsJ9GkjcyYr1EUucQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFMehn3m3jYrjS9lXSOIxvDTKU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODgzYWQxY2UtODczOC0z OTg2LWEyYTMtM2NkN2VjYWIzOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCr5xGNdzQaaBp6U95LAmDr6ZjDsn4XSvxX1Vdb3+KF3/lxGDLw 76JkqxgB2QBo7z5+egrlOFg1i/BvBUqat3IapvMKKSRllrDHIb77XKAdHTczJJPz AvH9Ep4dJH6zeVl7kqCy8jrFAHgBU1X4NDeDliRgDMoCkt0SY5E3uQySm2Q0fcuK wqcy9j5NFKURCOsr2AmyftV0oPkG8cpuSUt+pLEGujEud+80dWkEsueHM0VQ+wSy xtWG0PLX/WlqZalsHtmVpdv6A8LI8B7q2WV2x0pp5L/e1+KLy9sBzx03qNE0a6lG H8caZIkdVxF5+XRq8pXC74Bu7/1E7FZvJNM= -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:32 2025 by rpki-client