$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa File: ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa (raw, json) Hash identifier: aHa9gMcvXw52DfX0IDj1zgEjS2fu1PVsYG1cAS84ki4= Subject key identifier: FA:02:05:F6:7E:07:E7:5D:41:53:28:93:18:D4:D1:AD:0E:49:B2:70 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BF8502A7940AC0F714A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 27424 IP address blocks: 2001:470:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:f8:50:2a:79:40:ac:0f:71:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=42ac8295-c1e4-4824-ad07-cb128a1bd674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:ff:fa:a4:48:4d:18:fd:30:c1:b7:a5:23: 28:dc:df:91:d9:74:be:96:0c:f6:ba:48:9f:28:0c: 03:fe:c9:99:b3:b5:cd:91:b2:78:67:2c:81:14:1a: b8:96:12:9e:78:a5:24:4e:03:b7:1b:0b:f5:f1:25: cd:87:68:13:4c:d1:89:95:ac:cf:ab:7f:57:ba:a3: 12:ee:6c:9e:86:72:b8:6e:4f:4d:5d:12:5d:d4:db: ce:ba:50:96:42:5e:e6:19:8a:3c:7e:74:fc:56:26: 02:2b:04:b6:7f:54:82:03:e7:2b:b1:13:01:2a:5a: 7a:52:f0:cc:02:c9:26:44:0c:d9:74:73:8d:04:80: 09:05:20:b9:88:e4:d7:8c:40:20:f7:31:5d:68:29: 05:dd:c0:59:b2:73:f5:cd:f8:68:23:e6:52:6d:4d: d3:52:15:3e:47:db:d7:eb:d4:42:76:7a:f0:12:a7: ce:73:25:3e:68:43:6a:a4:18:36:58:e5:6e:a3:b2: 1c:75:d7:5b:b4:23:21:f0:6c:6e:f4:a8:eb:1a:65: 12:4b:a6:96:50:2b:3f:92:3e:f2:ea:02:39:1a:06: 09:0a:44:82:fb:78:ed:35:cd:e7:ef:bc:90:35:49: e4:e6:23:80:43:eb:a3:75:12:d0:ee:5e:58:96:9b: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:02:05:F6:7E:07:E7:5D:41:53:28:93:18:D4:D1:AD:0E:49:B2:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef9c2f5a-a6b4-30a6-8dbc-f29c82ca7ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:204::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:78:ac:35:bc:95:6f:35:af:09:70:15:01:b6:69:c8:20:a0: dc:1f:8e:5b:4a:43:83:c6:aa:18:74:3a:7b:4c:0e:a3:bf:b1: 90:2d:2e:b2:27:95:f2:d7:27:c2:1e:4b:3a:2d:ff:ad:d1:ce: 0a:e1:29:4f:03:0a:f1:3e:74:e2:32:05:9b:0a:2c:fe:17:ec: 6e:57:70:82:d3:fe:b4:9c:d0:68:20:ee:85:00:15:89:8e:ac: c3:d6:45:fe:0a:74:df:c3:52:2f:d5:0c:bb:07:18:cb:08:8d: 4f:43:95:40:30:d0:ed:17:a0:30:fc:32:70:44:5a:9e:b7:a6: 62:59:70:78:41:c2:05:3b:c3:b7:56:8c:bc:42:0c:03:a2:55: 23:37:7c:36:34:4b:99:eb:11:ff:d1:5d:ca:b9:2d:c3:13:09: f2:71:a3:6c:0a:c7:94:b3:62:62:54:c1:1a:60:29:02:bf:e0: 82:7b:d2:c5:86:56:6f:f2:ba:3b:92:0a:cd:ff:29:e6:54:a7: b3:7b:ca:fa:2f:fe:de:43:a4:ad:ba:e5:88:17:52:89:3d:10: 9c:53:aa:a0:21:aa:a8:91:a2:1e:b5:96:b7:5b:12:49:0d:6b: 6b:a8:32:96:8f:2d:2c:4a:6b:86:e8:a9:6c:6c:07:0e:7f:6e: c0:f7:9f:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/hQKnlArA9xSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDJhYzgyOTUtYzFlNC00ODI0LWFkMDctY2IxMjhhMWJkNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFD/+qRITRj9MMG3pSMo3N+R2XS+lgz2ukif KAwD/smZs7XNkbJ4ZyyBFBq4lhKeeKUkTgO3Gwv18SXNh2gTTNGJlazPq39XuqMS 7myehnK4bk9NXRJd1NvOulCWQl7mGYo8fnT8ViYCKwS2f1SCA+crsRMBKlp6UvDM AskmRAzZdHONBIAJBSC5iOTXjEAg9zFdaCkF3cBZsnP1zfhoI+ZSbU3TUhU+R9vX 69RCdnrwEqfOcyU+aENqpBg2WOVuo7IcdddbtCMh8Gxu9KjrGmUSS6aWUCs/kj7y 6gI5GgYJCkSC+3jtNc3n77yQNUnk5iOAQ+ujdRLQ7l5YlpuOzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPoCBfZ+B+ddQVMokxjU0a0OSbJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWY5YzJmNWEtYTZiNC0z MGE2LThkYmMtZjI5YzgyY2E3YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGN4rDW8lW81rwlwFQG2acggoNwfjltKQ4PGqhh0OntMDqO/sZAt LrInlfLXJ8IeSzot/63RzgrhKU8DCvE+dOIyBZsKLP4X7G5XcILT/rSc0Ggg7oUA FYmOrMPWRf4KdN/DUi/VDLsHGMsIjU9DlUAw0O0XoDD8MnBEWp63pmJZcHhBwgU7 w7dWjLxCDAOiVSM3fDY0S5nrEf/RXcq5LcMTCfJxo2wKx5SzYmJUwRpgKQK/4IJ7 0sWGVm/yujuSCs3/KeZUp7N7yvov/t5DpK265YgXUok9EJxTqqAhqqiRoh61lrdb EkkNa2uoMpaPLSxKa4boqWxsBw5/bsD3n7w= -----END CERTIFICATE-----Generated at Mon Aug 4 07:40:13 2025 by rpki-client