$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa File: 947af4f1-5ba2-3829-894d-febe54856a1d.roa (raw, json) Hash identifier: 32ZhmKBkXBGrapEwDhU3Fn+/k48298msWEX72xfAG98= Subject key identifier: F5:F5:49:96:2D:02:B6:B1:B7:BE:CF:2F:FC:D4:6D:9F:2D:31:33:C3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BC5680FB02947E9D57600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 394680 IP address blocks: 2001:470:b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:c5:68:0f:b0:29:47:e9:d5:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ead4e2da-bcef-4b1e-8a8f-8517be82d16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:28:e9:db:30:1d:eb:d0:d9:36:62:ff:c1: b3:2a:72:86:ba:7d:69:bc:8f:6b:db:44:41:a1:c6: 08:65:15:55:e4:5e:b3:72:5f:97:71:7e:3c:1d:9b: d3:49:ea:b6:f2:28:f5:50:3e:4c:39:39:31:ac:be: 6c:b9:3d:6e:06:a7:40:c9:b3:31:79:c0:46:b4:27: 46:a1:48:cb:0c:be:b2:8d:ad:90:86:c4:e3:99:9e: 34:cd:a6:1b:df:c4:f5:dd:a5:79:9f:6a:9c:cb:6b: 9f:e0:66:f8:17:f9:89:b1:a4:0b:39:26:6a:07:5e: 17:39:59:1c:97:0a:88:f3:c9:bf:a1:cf:2a:0d:07: a0:34:09:be:60:4c:f5:0b:32:08:c0:27:96:4d:40: 73:79:80:c2:db:0f:30:bc:e2:52:95:1d:e0:14:29: cd:d5:2d:0d:59:c4:5a:7f:4e:cd:28:5f:81:d6:72: aa:be:9a:bc:39:4b:06:dc:bc:00:cf:85:e2:a1:21: 68:b5:b3:33:0f:d4:09:b7:ea:d0:b0:9d:61:7d:09: ac:0d:3a:56:b6:03:c9:f2:f0:1a:28:a9:9d:4b:cb: 66:ad:1f:2e:e4:ad:95:05:7f:dc:93:42:1d:9c:22: 28:50:22:8e:64:da:b3:36:64:cf:8b:85:e6:b6:aa: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F5:49:96:2D:02:B6:B1:B7:BE:CF:2F:FC:D4:6D:9F:2D:31:33:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/947af4f1-5ba2-3829-894d-febe54856a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5b:43:5e:c8:bf:f4:90:8a:03:c7:28:a5:2e:96:e1:3a:57: be:6b:cd:1b:6d:31:d6:5c:13:15:24:ad:7f:39:dd:96:f0:a2: 4f:04:2d:7b:52:7e:ea:e0:a9:a8:a8:6a:65:4d:4d:c7:b4:e2: 32:bd:76:4c:a1:01:bf:70:c5:b1:ed:db:50:80:23:7f:a9:d7: 28:9a:71:f5:cc:1e:de:2f:e8:6b:50:2e:00:28:c6:48:f5:64: e1:92:61:22:7c:98:5d:9b:bd:99:bc:06:00:82:8c:7d:8b:aa: 37:1a:3d:78:49:26:3d:67:04:3c:4e:40:b5:f0:d6:da:a5:58: 35:4f:a1:ec:b1:80:3e:4e:e0:10:f5:fe:3b:c5:a8:23:3b:20: 6c:3d:5e:2a:3e:ef:fa:8f:2f:4d:d6:ad:ba:af:02:16:bc:6a: 70:9a:67:d5:6c:82:29:1d:8f:ee:0a:d2:28:7b:f6:ad:51:3d: ee:47:ba:14:28:9b:d3:bf:f4:30:87:b1:e5:b9:42:bc:c0:6f: f7:96:03:4d:36:72:80:cc:09:d7:ed:57:1c:2b:1a:17:50:be: 06:1c:d2:b1:35:97:52:3c:07:e0:fa:96:73:b9:c8:2e:bd:ac: ad:57:3f:54:c0:d3:d9:4e:ac:12:82:29:67:e3:f5:ae:70:95: a4:93:05:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G8VoD7ApR+nVdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZWFkNGUyZGEtYmNlZi00YjFlLThhOGYtODUxN2JlODJkMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmwo6dswHevQ2TZi/8GzKnKGun1pvI9r20RB ocYIZRVV5F6zcl+XcX48HZvTSeq28ij1UD5MOTkxrL5suT1uBqdAybMxecBGtCdG oUjLDL6yja2QhsTjmZ40zaYb38T13aV5n2qcy2uf4Gb4F/mJsaQLOSZqB14XOVkc lwqI88m/oc8qDQegNAm+YEz1CzIIwCeWTUBzeYDC2w8wvOJSlR3gFCnN1S0NWcRa f07NKF+B1nKqvpq8OUsG3LwAz4XioSFotbMzD9QJt+rQsJ1hfQmsDTpWtgPJ8vAa KKmdS8tmrR8u5K2VBX/ck0IdnCIoUCKOZNqzNmTPi4XmtqrBrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPX1SZYtAraxt77PL/zUbZ8tMTPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTQ3YWY0ZjEtNWJhMi0z ODI5LTg5NGQtZmViZTU0ODU2YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALlbQ17Iv/SQigPHKKUuluE6V75rzRttMdZcExUkrX853Zbwok8E LXtSfurgqaioamVNTce04jK9dkyhAb9wxbHt21CAI3+p1yiacfXMHt4v6GtQLgAo xkj1ZOGSYSJ8mF2bvZm8BgCCjH2LqjcaPXhJJj1nBDxOQLXw1tqlWDVPoeyxgD5O 4BD1/jvFqCM7IGw9Xio+7/qPL03WrbqvAha8anCaZ9Vsgikdj+4K0ih79q1RPe5H uhQom9O/9DCHseW5QrzAb/eWA002coDMCdftVxwrGhdQvgYc0rE1l1I8B+D6lnO5 yC69rK1XP1TA09lOrBKCKWfj9a5wlaSTBd0= -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:22 2025 by rpki-client