$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa File: c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa (raw, json) Hash identifier: EeWYhF/OCHx44TNdunIE0J78CV5NEAb20J64ULbSw8Y= Subject key identifier: 41:A9:E1:A5:F3:2F:DE:C4:72:0D:89:D0:52:F3:7E:00:EB:11:08:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9D30FC5CD0E543CD98E20A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 55201 IP address blocks: 2001:470:3d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fc:5c:d0:e5:43:cd:98:e2:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=2b4edcc3-6d6b-4ea8-b5e3-6c814e70a00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:33:73:b3:f7:9b:c1:c4:26:a5:56:5d:c1: ef:a2:b9:f9:0b:1d:b7:ee:80:60:3d:17:34:88:f3: 73:1d:02:32:66:0d:a1:22:b2:a3:a9:9a:4f:fa:f2: 85:c7:59:63:3a:78:ce:6c:21:33:6c:8f:a4:8a:db: bd:08:cb:b8:38:a9:8d:59:18:a8:24:21:6b:58:3a: 2c:6a:3a:fb:a1:3d:a3:d1:f4:9c:20:65:66:34:6b: 79:b7:79:54:5d:b4:2a:5e:cb:7f:44:03:3d:2c:94: 42:02:01:ef:41:34:38:12:5f:59:fd:7b:2e:b7:3d: cd:d6:f0:81:82:25:f0:e0:e4:fa:a9:b5:a1:af:4c: 65:fa:83:d5:01:59:80:9d:c6:bd:18:c3:c6:b1:b3: 83:13:db:cb:57:73:40:4f:b6:cc:73:cb:52:6b:38: 15:bd:5f:96:31:7b:3a:5c:e1:58:4c:55:54:a4:3d: 6b:3b:fc:f9:9d:67:72:f3:53:a0:b6:a3:3f:f2:e3: 30:bf:66:16:94:aa:6d:86:f4:94:01:24:f5:91:a0: f1:c5:98:78:54:56:8f:7f:8d:64:98:17:88:f2:f0: 39:9a:a6:1d:66:1c:a9:e0:fa:c9:25:9d:f7:34:11: 68:9f:9d:ef:ff:03:29:ce:e2:83:88:4e:1d:70:cb: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:E1:A5:F3:2F:DE:C4:72:0D:89:D0:52:F3:7E:00:EB:11:08:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:cc:83:e3:ad:c8:e5:98:8e:65:0c:f3:c0:cb:4f:03:3e:09: 90:07:3c:85:19:59:f7:27:12:64:81:39:c6:6d:2d:b9:71:4e: 51:d6:04:53:0a:b8:65:2b:fd:81:17:4d:97:7c:16:8e:6d:4f: 20:5a:67:a5:15:50:7b:c5:3a:c4:cd:9f:a5:e3:d3:ff:cf:dd: 56:94:54:6e:4d:f4:fb:23:65:d5:02:2d:50:98:00:3a:89:a1: 53:74:a3:54:2b:f4:66:e3:ef:87:9e:3d:ab:e0:2f:58:6d:86: b3:91:8d:e5:19:92:77:d6:94:6f:97:87:d2:61:88:3e:2b:65: ea:11:dc:db:7c:0e:9b:de:70:48:50:d4:4c:d6:52:40:96:a4: b0:93:40:d8:63:ac:5d:5f:b7:d4:9d:2a:2f:a2:b4:19:c5:ed: 58:c8:69:f5:65:d9:76:de:88:ca:11:62:35:9d:84:66:a9:1e: 42:69:c5:a6:a8:b8:2a:ce:59:b6:b4:9e:5d:d0:74:2e:ee:ec: 64:dd:d9:fa:31:a5:0b:ad:a2:4d:98:84:10:89:c5:10:53:70: 95:8a:c0:5a:08:13:17:c3:ea:ee:53:1c:59:d3:f1:ff:5f:a4: 34:45:fd:58:85:98:2b:23:95:c3:f0:5e:88:da:27:39:1a:c4: 41:50:01:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqdMPxc0OVDzZjiCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MmI0ZWRjYzMtNmQ2Yi00ZWE4LWI1ZTMtNmM4MTRlNzBhMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt8zc7P3m8HEJqVWXcHvorn5Cx237oBgPRc0 iPNzHQIyZg2hIrKjqZpP+vKFx1ljOnjObCEzbI+kitu9CMu4OKmNWRioJCFrWDos ajr7oT2j0fScIGVmNGt5t3lUXbQqXst/RAM9LJRCAgHvQTQ4El9Z/Xsutz3N1vCB giXw4OT6qbWhr0xl+oPVAVmAnca9GMPGsbODE9vLV3NAT7bMc8tSazgVvV+WMXs6 XOFYTFVUpD1rO/z5nWdy81OgtqM/8uMwv2YWlKpthvSUAST1kaDxxZh4VFaPf41k mBeI8vA5mqYdZhyp4PrJJZ33NBFon53v/wMpzuKDiE4dcMsJDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGp4aXzL97Ecg2J0FLzfgDrEQhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzAzMjIyM2EtOGYyYy0z YmFmLWIwYTctNTYxODkwYmJiOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3Mg+OtyOWYjmUM88DLTwM+CZAHPIUZWfcnEmSBOcZtLblxTlHW BFMKuGUr/YEXTZd8Fo5tTyBaZ6UVUHvFOsTNn6Xj0//P3VaUVG5N9PsjZdUCLVCY ADqJoVN0o1Qr9Gbj74eePavgL1hthrORjeUZknfWlG+Xh9JhiD4rZeoR3Nt8Dpve cEhQ1EzWUkCWpLCTQNhjrF1ft9SdKi+itBnF7VjIafVl2XbeiMoRYjWdhGapHkJp xaaouCrOWba0nl3QdC7u7GTd2foxpQutok2YhBCJxRBTcJWKwFoIExfD6u5THFnT 8f9fpDRF/ViFmCsjlcPwXojaJzkaxEFQAQA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:35 2025 by rpki-client