$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa File: ddb71113-1076-356e-9ae6-7ad953a944c3.roa (raw, json) Hash identifier: Jj6Tipvg7xkDIWMWci56E06H+WFmgL1jIpO9cSWhNlA= Subject key identifier: 93:96:BF:28:D4:96:A6:6A:A1:C5:69:30:5F:A8:34:B2:38:11:66:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BDA52E9A62F273D441FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 397409 IP address blocks: 2001:470:2db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:da:52:e9:a6:2f:27:3d:44:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ce15332a-5f10-45dc-8ed3-e7f775268d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:c9:1e:53:d4:c0:93:9b:9a:ea:f7:23:e3: 33:4d:99:4a:7d:b9:1c:dd:a1:c9:8f:e0:99:df:cc: 36:a9:9d:2b:be:db:da:f8:b9:77:16:63:a2:99:29: 76:36:a0:0d:f6:cf:be:49:bc:e7:fd:f0:05:30:60: e4:ba:b3:e1:42:80:13:41:16:6d:d8:b6:91:d3:ff: c7:6f:1e:5e:4b:a3:4e:ff:dc:69:51:9c:9f:94:df: e9:53:59:5f:d6:b3:e5:26:42:3d:99:3a:d3:95:31: 1a:fa:48:a9:31:5c:dd:8a:8c:cf:87:f1:9d:61:70: 01:5a:fc:bb:d5:84:0f:06:67:9f:e3:b4:f0:ad:43: cb:59:5c:c7:13:37:fd:cd:2b:48:e2:fb:ff:cf:ee: 23:68:cc:5a:ab:ff:4d:a3:48:15:3a:14:32:5d:69: 0d:59:46:70:e2:59:23:74:33:12:e0:d2:fb:4d:03: 2b:88:f3:49:c6:c9:94:4d:0d:63:24:0d:6d:74:3d: 6c:31:9c:ad:35:6b:62:bd:d2:a2:9b:aa:5b:ff:9c: 9b:ac:5b:a8:99:7e:8c:17:8b:08:a8:fc:37:a9:fa: 14:51:e3:69:81:59:a2:1f:c7:04:c7:16:e6:6d:de: 77:7d:db:e8:17:03:6c:7d:70:14:7f:ee:c6:57:e2: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:96:BF:28:D4:96:A6:6A:A1:C5:69:30:5F:A8:34:B2:38:11:66:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e6:c2:8f:43:a2:2f:5c:66:d7:49:ab:32:9f:18:fb:67:e2: f9:05:af:f7:71:30:c8:bd:1d:82:bd:76:a4:14:2b:21:84:88: f0:1a:d9:47:50:89:88:8c:ef:d7:c5:20:c8:e5:75:b5:cb:3f: 5b:db:63:79:71:d7:e4:cf:f7:c1:1e:b5:5e:55:1d:36:9c:35: 8d:93:e7:99:43:e7:f9:6f:45:e3:3e:40:19:a0:c3:80:5e:47: 11:80:b1:f3:04:5b:a3:4e:38:ba:a7:d6:13:c4:db:da:6e:1b: 3f:05:42:a0:3c:06:5a:60:21:08:8a:e1:06:12:44:24:0d:75: 45:e8:6a:8c:b7:11:54:47:4c:d1:38:b6:9c:50:25:32:d1:54: a0:ec:92:04:15:95:9c:23:d8:14:07:30:c2:37:f4:4a:f7:86: 9f:80:38:e1:ad:17:ae:86:49:51:55:20:28:c9:d5:03:b2:69: 53:c7:6a:14:a5:99:06:51:0e:e2:89:60:72:dc:c2:59:5f:7f: 53:10:8d:f3:41:7e:08:98:4b:a6:82:31:35:df:46:1e:7b:a3: 2e:2c:da:6c:64:b6:6d:2d:38:b0:2d:f6:46:cc:5e:2f:52:52: 55:27:01:7c:cf:0f:39:2d:30:3e:06:49:e8:eb:66:eb:10:7b: 69:00:aa:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9pS6aYvJz1EH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2UxNTMzMmEtNWYxMC00NWRjLThlZDMtZTdmNzc1MjY4ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfJHlPUwJObmur3I+MzTZlKfbkc3aHJj+CZ 38w2qZ0rvtva+Ll3FmOimSl2NqAN9s++Sbzn/fAFMGDkurPhQoATQRZt2LaR0//H bx5eS6NO/9xpUZyflN/pU1lf1rPlJkI9mTrTlTEa+kipMVzdiozPh/GdYXABWvy7 1YQPBmef47TwrUPLWVzHEzf9zStI4vv/z+4jaMxaq/9No0gVOhQyXWkNWUZw4lkj dDMS4NL7TQMriPNJxsmUTQ1jJA1tdD1sMZytNWtivdKim6pb/5ybrFuomX6MF4sI qPw3qfoUUeNpgVmiH8cExxbmbd53fdvoFwNsfXAUf+7GV+K76wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOWvyjUlqZqocVpMF+oNLI4EWZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGRiNzExMTMtMTA3Ni0z NTZlLTlhZTYtN2FkOTUzYTk0NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvmwo9Doi9cZtdJqzKfGPtn4vkFr/dxMMi9HYK9dqQUKyGEiPAa 2UdQiYiM79fFIMjldbXLP1vbY3lx1+TP98EetV5VHTacNY2T55lD5/lvReM+QBmg w4BeRxGAsfMEW6NOOLqn1hPE29puGz8FQqA8BlpgIQiK4QYSRCQNdUXoaoy3EVRH TNE4tpxQJTLRVKDskgQVlZwj2BQHMMI39Er3hp+AOOGtF66GSVFVICjJ1QOyaVPH ahSlmQZRDuKJYHLcwllff1MQjfNBfgiYS6aCMTXfRh57oy4s2mxktm0tOLAt9kbM Xi9SUlUnAXzPDzktMD4GSejrZusQe2kAqnM= -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:17 2025 by rpki-client