$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa File: a09b7742-cb4a-35e9-8fc9-02bee3443977.roa (raw, json) Hash identifier: hzv4lKmZkCSRFnDP3dU9m0WMeYuu/LjML1gIsfXhZeM= Subject key identifier: 4C:D8:AE:35:5C:4A:28:55:80:10:14:51:B9:D5:58:D1:0E:02:9A:CD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BCE6C55CAF00369DC8D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 54133 IP address blocks: 2001:470:1bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ce:6c:55:ca:f0:03:69:dc:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a05627e9-6c65-4efc-aaaf-8e9fa44f0284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:3a:a2:eb:de:e4:c6:9d:17:b5:eb:25:14: cc:56:2f:da:1d:e5:df:fb:63:ea:d6:57:9d:c5:43: 19:04:95:67:94:92:07:5e:8d:f1:07:3c:e8:65:c8: d5:8d:71:4b:91:9d:ed:5e:78:aa:92:10:02:39:b5: 69:df:72:49:76:9d:bf:35:70:5c:78:83:a5:b7:e6: 87:70:c4:cd:5d:5e:bd:ae:6a:8b:33:34:3a:02:11: b1:b5:8f:c9:17:35:43:34:46:56:1b:ab:0c:52:09: 49:0f:b8:39:8f:3c:4f:1d:58:b0:62:bd:6f:20:37: d2:ec:e1:50:2a:a5:29:59:c5:62:01:eb:ee:ef:c8: bf:df:39:ef:1d:f2:d7:e2:32:3b:52:09:22:b9:e5: f4:8a:6c:8a:c0:77:2b:7a:49:de:3f:5c:48:67:34: b1:86:0d:c0:83:00:c4:cb:c4:b7:d3:26:00:a5:c5: ff:f8:6a:70:5c:8e:97:be:b0:b2:26:ed:c6:a4:28: 64:a7:0a:a5:56:3a:54:5d:8f:92:05:51:83:09:b3: f0:2d:c0:98:01:14:32:8e:0a:13:ce:99:04:19:88: 36:cc:4c:65:ca:b8:34:4e:d6:4c:ab:54:d0:70:d3: 25:a6:c0:ba:2c:43:89:76:26:ba:21:88:67:1f:5e: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D8:AE:35:5C:4A:28:55:80:10:14:51:B9:D5:58:D1:0E:02:9A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7f:7a:b4:3c:b0:c9:e9:67:26:c8:4f:62:9c:d5:4c:75:d2: 54:45:be:4a:06:52:27:66:57:9a:54:42:54:38:a4:cf:8c:0e: e2:95:b1:ee:de:4d:64:42:e1:75:c4:e5:a5:d4:5d:6e:d5:92: 67:37:1c:8f:b7:82:4b:66:37:5b:8b:8b:f8:ff:ad:49:25:b4: f6:d8:96:e0:bd:b0:04:8b:1a:8e:c9:72:2b:74:20:68:1a:16: c6:c3:e0:15:40:42:77:27:2c:5f:4c:d3:82:2a:22:b9:6d:98: 8c:da:97:5d:d2:d5:dc:68:f8:47:ef:cf:ad:28:5e:af:5f:e6: 67:45:ba:98:ac:fc:a0:b7:92:d8:a5:aa:22:36:b5:37:8f:c1: 43:3c:05:e2:7f:e6:81:60:98:bd:36:a7:60:b6:00:49:79:1b: 3d:6b:ad:fe:75:90:7b:3b:83:8d:74:3b:a9:db:30:18:21:82: 6d:b3:52:1a:76:b5:de:08:8b:1d:a0:56:c6:31:7c:64:b2:65: 8e:d8:37:83:57:f5:4f:2b:ed:4e:60:16:d1:70:28:3c:10:c9: ae:e6:20:99:02:6a:a9:a7:3b:6a:47:7e:e7:a0:bd:29:77:a3: 90:ff:6e:0a:b9:4d:a5:1f:61:f1:f8:6a:ce:83:9f:ef:c0:ad: f1:37:48:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G85sVcrwA2ncjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTA1NjI3ZTktNmM2NS00ZWZjLWFhYWYtOGU5ZmE0NGYwMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSw6ouve5MadF7XrJRTMVi/aHeXf+2Pq1led xUMZBJVnlJIHXo3xBzzoZcjVjXFLkZ3tXniqkhACObVp33JJdp2/NXBceIOlt+aH cMTNXV69rmqLMzQ6AhGxtY/JFzVDNEZWG6sMUglJD7g5jzxPHViwYr1vIDfS7OFQ KqUpWcViAevu78i/3znvHfLX4jI7UgkiueX0imyKwHcrekneP1xIZzSxhg3AgwDE y8S30yYApcX/+GpwXI6XvrCyJu3GpChkpwqlVjpUXY+SBVGDCbPwLcCYARQyjgoT zpkEGYg2zExlyrg0TtZMq1TQcNMlpsC6LEOJdia6IYhnH14i9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzYrjVcSihVgBAUUbnVWNEOAprNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTA5Yjc3NDItY2I0YS0z NWU5LThmYzktMDJiZWUzNDQzOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd/erQ8sMnpZybIT2Kc1Ux10lRFvkoGUidmV5pUQlQ4pM+MDuKV se7eTWRC4XXE5aXUXW7Vkmc3HI+3gktmN1uLi/j/rUkltPbYluC9sASLGo7Jcit0 IGgaFsbD4BVAQncnLF9M04IqIrltmIzal13S1dxo+Efvz60oXq9f5mdFupis/KC3 ktilqiI2tTePwUM8BeJ/5oFgmL02p2C2AEl5Gz1rrf51kHs7g410O6nbMBghgm2z Uhp2td4Iix2gVsYxfGSyZY7YN4NX9U8r7U5gFtFwKDwQya7mIJkCaqmnO2pHfueg vSl3o5D/bgq5TaUfYfH4as6Dn+/ArfE3SP0= -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:23 2025 by rpki-client