$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa File: d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa (raw, json) Hash identifier: D3NMrDIyI/17leU9IEBrAwg+k6VeTf7ClqGCRh0Nh8Q= Subject key identifier: 55:CB:89:E2:A0:EE:D6:32:D3:36:F7:59:2E:A5:FA:9D:7B:9F:30:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF0B2C6E08D12B690EC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 397778 IP address blocks: 2001:470:11b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f0:b2:c6:e0:8d:12:b6:90:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=e4dc165e-e255-46ff-9acb-dce294df12ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:91:48:1d:1a:76:62:55:a1:ed:28:46:43: b6:bf:a5:5d:d0:06:8f:61:8b:94:15:91:cf:2f:96: 85:99:a1:b6:6c:15:66:b0:99:62:3b:62:d7:70:02: eb:9f:8c:4a:33:4e:ac:cf:20:a4:99:07:45:65:b6: 91:78:29:86:c8:6c:dd:2b:08:2f:9b:74:4d:cb:b1: 11:ee:d5:0e:77:6b:88:9c:d7:16:ff:ff:9f:21:35: f4:f3:02:7d:0e:0b:77:e7:ef:24:21:c5:dc:28:14: be:f6:18:6b:95:f4:8d:0e:c1:36:e3:ef:58:a3:81: ef:86:67:3f:52:c4:9b:01:3d:a1:01:62:f3:92:fe: 0a:19:42:4a:3b:f4:e8:29:50:66:a3:8a:d1:9c:a0: 0e:db:4f:22:c8:c3:f1:19:cf:b8:ef:db:39:4e:7a: 4e:fc:c7:91:4f:f6:48:a5:3a:fa:5f:61:a9:6b:ea: 85:e6:63:bf:b4:14:0f:5b:57:67:16:5a:01:72:48: 89:e4:62:2b:fa:af:c7:8e:b9:83:d9:32:0b:c2:4d: b5:07:92:16:21:9e:14:9a:98:71:b0:f7:04:85:e4: 6b:d3:cc:f5:7e:e3:99:f2:af:96:fc:36:5f:c0:f1: 7e:18:c7:b3:b0:e6:b1:95:6a:b6:9b:65:bf:ab:70: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CB:89:E2:A0:EE:D6:32:D3:36:F7:59:2E:A5:FA:9D:7B:9F:30:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8f706f2-5fb8-3490-bc6e-0af2cbc72e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:11b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8d:61:cb:e0:32:1b:86:c6:c2:cf:ef:15:76:7c:9d:3a:81: f6:71:0b:5d:de:1b:ec:10:ca:1a:76:14:23:03:08:46:8d:1c: 78:36:5b:4a:96:83:57:9f:39:c2:7a:ee:45:74:c4:cc:ee:69: aa:38:be:12:15:b0:50:b0:de:c2:a2:4d:4e:0a:b1:56:ec:81: b8:96:3f:a6:4f:02:56:23:2f:fc:2a:9d:1f:97:10:f1:9c:0e: ee:59:56:6a:ae:0c:16:c1:10:7b:23:9c:24:cf:55:02:83:cc: f0:4d:37:71:01:4a:57:84:5b:c4:4a:5d:b8:a3:0a:ce:ac:d8: e1:c7:7d:25:21:32:a8:7a:7e:12:84:23:8b:ec:79:41:ff:da: 12:66:a4:ba:39:42:6e:96:0d:68:69:f1:54:21:66:77:73:ff: 34:55:f1:40:27:d2:9c:0b:ef:cb:0b:37:2a:aa:1e:69:2f:8a: 84:5b:24:63:f5:5e:e7:30:e8:ad:d6:6d:df:1b:05:73:cd:c0: 46:56:53:e3:63:22:d9:38:03:05:8c:91:db:a9:c3:de:c0:f6: 65:ea:e0:f7:ba:00:0c:06:bc:47:5e:bf:12:bc:6b:2d:8d:b8: d4:f6:09:c3:9b:ba:d7:4c:c5:ef:cf:32:9a:c0:c5:f8:89:96: ef:79:71:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/CyxuCNEraQ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTRkYzE2NWUtZTI1NS00NmZmLTlhY2ItZGNlMjk0ZGYxMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/yRSB0admJVoe0oRkO2v6Vd0AaPYYuUFZHP L5aFmaG2bBVmsJliO2LXcALrn4xKM06szyCkmQdFZbaReCmGyGzdKwgvm3RNy7ER 7tUOd2uInNcW//+fITX08wJ9Dgt35+8kIcXcKBS+9hhrlfSNDsE24+9Yo4Hvhmc/ UsSbAT2hAWLzkv4KGUJKO/ToKVBmo4rRnKAO208iyMPxGc+479s5TnpO/MeRT/ZI pTr6X2Gpa+qF5mO/tBQPW1dnFloBckiJ5GIr+q/HjrmD2TILwk21B5IWIZ4Umphx sPcEheRr08z1fuOZ8q+W/DZfwPF+GMezsOaxlWq2m2W/q3BwXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFXLieKg7tYy0zb3WS6l+p17nzBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDhmNzA2ZjItNWZiOC0z NDkwLWJjNmUtMGFmMmNiYzcyZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmNYcvgMhuGxsLP7xV2fJ06gfZxC13eG+wQyhp2FCMDCEaNHHg2 W0qWg1efOcJ67kV0xMzuaao4vhIVsFCw3sKiTU4KsVbsgbiWP6ZPAlYjL/wqnR+X EPGcDu5ZVmquDBbBEHsjnCTPVQKDzPBNN3EBSleEW8RKXbijCs6s2OHHfSUhMqh6 fhKEI4vseUH/2hJmpLo5Qm6WDWhp8VQhZndz/zRV8UAn0pwL78sLNyqqHmkvioRb JGP1Xucw6K3Wbd8bBXPNwEZWU+NjItk4AwWMkdupw97A9mXq4Pe6AAwGvEdevxK8 ay2NuNT2CcObutdMxe/PMprAxfiJlu95cbY= -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:19 2025 by rpki-client