$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa File: c868022a-c81f-37f1-9880-bdac50bec316.roa (raw, json) Hash identifier: 4k7O0Kd4Ei0cOSEO5lsPaDGunyCkzN5EqS8NzqFQlxU= Subject key identifier: 47:0F:96:EB:9E:BF:40:B6:A0:B6:45:FB:C0:AA:68:6B:94:A0:9E:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9FFBB0D7C81F063116E88460 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 393238 IP address blocks: 2001:470:381::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b0:d7:c8:1f:06:31:16:e8:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=d59a87aa-726d-4285-9695-4b55492eca1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:d7:da:6b:70:fe:42:9a:6d:84:18:51:f2: 15:df:29:68:6d:88:b0:6f:4e:5e:cc:15:c0:78:8c: af:ec:f5:da:32:29:2a:a6:09:ce:44:43:f4:c4:9f: 04:a2:47:5d:df:31:5b:ad:4a:ae:35:d6:cc:66:43: c1:5c:4f:10:f0:7f:a0:60:cc:44:67:ac:ee:58:d0: 42:52:6c:b5:fa:3a:6a:8e:18:f2:e8:cd:f9:39:4c: 86:3e:37:e2:b0:b0:2d:94:38:fe:4a:f8:f9:84:85: 74:38:bb:78:c0:eb:71:b1:05:1c:db:b6:67:43:71: 2d:d5:a8:33:33:a8:7f:b2:ce:35:3c:3c:63:bc:19: 76:17:27:ff:51:e8:0c:af:70:b9:05:d9:eb:a9:a5: 0c:1f:8a:32:58:43:2e:3c:99:91:71:48:0b:0c:ed: 8e:1e:20:54:a9:3d:73:5c:4c:52:c8:f6:92:e5:e4: 69:f5:11:e0:ae:60:ce:2e:5d:1c:86:1f:a6:08:3a: 5e:e8:bd:e5:37:49:32:c4:12:7a:ed:28:12:db:c1: c7:5b:ca:d6:1c:51:cc:ad:45:10:3a:89:fe:92:7e: 0b:23:b5:31:2b:b5:0f:e6:7d:66:ac:83:20:c5:58: 64:3f:db:e7:18:44:12:a0:ac:82:35:f9:40:fb:da: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:96:EB:9E:BF:40:B6:A0:B6:45:FB:C0:AA:68:6B:94:A0:9E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:381::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6f:60:f7:7f:2e:11:33:15:dc:f0:47:36:c0:a5:60:77:f7: b0:5c:25:02:c1:de:80:1a:ba:b9:e6:c3:b3:a4:86:64:7e:99: e1:cb:27:38:80:0a:63:c6:e1:8f:8b:13:0c:af:b6:2f:3f:36: e9:73:ee:8a:04:e4:a4:48:bc:18:be:5b:28:47:ef:2c:80:8a: 22:34:ef:e3:34:9e:8b:c4:91:57:55:42:8d:e8:80:9c:4c:24: ef:cd:b5:39:97:d6:c7:5c:40:35:a6:12:cd:92:7d:86:7a:5f: 63:63:59:39:b3:27:e7:81:6f:f5:a6:8d:c1:8f:64:b3:0f:13: 8d:78:80:df:58:63:ee:af:33:84:27:dc:6d:a9:77:50:2b:1e: 5d:c1:06:f2:95:ea:97:91:2c:2d:de:59:b9:d7:eb:0d:22:3b: df:9a:3e:2e:ad:3b:ee:cd:b4:ca:98:5b:28:18:73:4d:2b:57: e5:65:7f:74:b0:33:73:55:16:c5:31:7e:5f:c5:db:f2:f1:fc: 77:1a:36:8c:d7:28:ac:3f:c9:62:12:ac:bb:1f:17:aa:46:7b: d7:27:d9:20:b5:31:f5:dc:e8:9c:8b:b4:3d:f8:26:e8:ab:bc: 16:73:db:5c:79:3c:10:93:7d:40:a6:de:e3:cc:b2:63:44:2f: 74:38:f5:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+7DXyB8GMRbohGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZDU5YTg3YWEtNzI2ZC00Mjg1LTk2OTUtNGI1NTQ5MmVjYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfX2mtw/kKabYQYUfIV3ylobYiwb05ezBXA eIyv7PXaMikqpgnOREP0xJ8Eokdd3zFbrUquNdbMZkPBXE8Q8H+gYMxEZ6zuWNBC Umy1+jpqjhjy6M35OUyGPjfisLAtlDj+Svj5hIV0OLt4wOtxsQUc27ZnQ3Et1agz M6h/ss41PDxjvBl2Fyf/UegMr3C5BdnrqaUMH4oyWEMuPJmRcUgLDO2OHiBUqT1z XExSyPaS5eRp9RHgrmDOLl0chh+mCDpe6L3lN0kyxBJ67SgS28HHW8rWHFHMrUUQ Oon+kn4LI7UxK7UP5n1mrIMgxVhkP9vnGEQSoKyCNflA+9qjqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcPluuev0C2oLZF+8CqaGuUoJ5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg2ODAyMmEtYzgxZi0z N2YxLTk4ODAtYmRhYzUwYmVjMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExvYPd/LhEzFdzwRzbApWB397BcJQLB3oAaurnmw7OkhmR+meHL JziACmPG4Y+LEwyvti8/Nulz7ooE5KRIvBi+WyhH7yyAiiI07+M0novEkVdVQo3o gJxMJO/NtTmX1sdcQDWmEs2SfYZ6X2NjWTmzJ+eBb/WmjcGPZLMPE414gN9YY+6v M4Qn3G2pd1ArHl3BBvKV6peRLC3eWbnX6w0iO9+aPi6tO+7NtMqYWygYc00rV+Vl f3SwM3NVFsUxfl/F2/Lx/HcaNozXKKw/yWISrLsfF6pGe9cn2SC1MfXc6JyLtD34 JuirvBZz21x5PBCTfUCm3uPMsmNEL3Q49ZE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:37 2025 by rpki-client