$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5e68f54-9ce4-3f6d-b70a-bc3d2f8edecf.roa File: f5e68f54-9ce4-3f6d-b70a-bc3d2f8edecf.roa (raw, json) Hash identifier: DZANr/YM6QBdPJOq5ipTFcWgKa9VdSZJAeU1Wz+caPA= Subject key identifier: 64:9A:6C:65:64:23:68:8D:D3:57:27:BE:3F:23:1D:00:B5:97:FF:90 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BD57410D2880BE9B8B8C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5e68f54-9ce4-3f6d-b70a-bc3d2f8edecf.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 55943 IP address blocks: 2001:470:28a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:d5:74:10:d2:88:0b:e9:b8:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=267b46d5-f723-44fb-82fb-c2ed0ce44e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:39:d0:c5:44:43:df:a8:a8:09:50:05:c3: 51:e7:4f:72:15:36:00:d1:71:ae:d6:71:de:9c:0b: cd:7d:5c:8e:50:b9:35:e8:03:cd:ad:58:0b:37:f2: 42:26:f4:d8:b6:17:16:b6:5f:00:e7:46:ff:57:02: 8a:a8:63:da:b8:8b:89:35:6c:52:e8:f7:7b:3a:1f: 53:9c:33:be:9e:d6:10:fb:d3:66:76:a6:17:a7:a1: 61:c3:24:b8:73:30:1b:ff:dd:aa:42:5a:3d:9b:59: 41:ef:22:e6:c9:64:50:dc:a4:6e:05:14:70:04:8c: 2c:d4:6d:ab:72:af:c8:6a:a0:d5:81:1d:5d:0b:c2: fa:12:a5:95:72:41:1a:c9:f9:c8:23:42:15:e2:14: d0:9d:26:c1:99:61:8b:22:b8:6d:06:af:f5:11:42: 5c:d4:2c:3a:bb:d2:8d:16:57:59:65:18:1d:04:be: fc:54:6e:58:f9:2b:58:41:e8:30:cf:aa:71:59:09: fc:76:12:93:f6:6d:da:d7:d8:a7:3d:60:4d:53:a3: d2:05:83:fb:92:d1:80:ba:5e:ee:40:a7:d2:0e:30: 12:dc:85:af:eb:e8:59:49:48:95:73:a9:d4:fd:a8: c5:a4:3b:0f:68:8b:46:9e:27:44:0a:b6:1c:63:88: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:6C:65:64:23:68:8D:D3:57:27:BE:3F:23:1D:00:B5:97:FF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f5e68f54-9ce4-3f6d-b70a-bc3d2f8edecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:28a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:5d:00:40:16:19:a9:df:9d:18:ae:8b:72:cb:34:a5:66:fe: 88:0e:10:20:f5:6c:fa:87:75:54:d3:3d:ac:30:3b:e8:02:0c: 95:1d:6b:e1:0f:88:51:75:7e:63:aa:d8:64:f7:21:61:71:ba: 47:92:c8:1a:cf:d1:24:80:d3:e8:ce:a5:15:19:12:b7:66:e3: 3a:4e:c8:23:3a:4a:3c:01:12:9f:42:37:ab:2a:59:d1:7d:aa: e0:e4:a9:00:7b:54:74:98:79:f6:df:14:03:01:82:ee:e2:5a: 27:2b:d9:17:f2:a0:6d:8d:2b:06:0a:d9:aa:bf:c1:29:da:89: 0e:fb:27:eb:9f:ad:e0:bd:43:fa:af:47:de:fb:32:c6:28:d6: f3:8d:5d:56:ff:18:ca:15:d2:22:4b:6d:4a:28:c1:6c:ba:6d: 92:cd:0b:42:26:93:64:97:fc:d7:c9:fb:6d:c8:a7:4d:9a:ca: b5:fa:21:d8:c5:0e:d9:08:27:f2:18:5c:50:85:27:8e:07:6d: 42:f9:17:a1:22:9c:05:83:aa:f7:d9:67:0f:85:6f:02:41:b8: ad:40:ad:e4:3b:7b:98:20:00:55:d2:1c:22:c4:69:a2:ae:7a: ae:8d:06:b3:ed:f3:f8:b7:70:49:0e:cb:f0:80:39:5b:25:9f: 72:42:d0:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9V0ENKIC+m4uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjY3YjQ2ZDUtZjcyMy00NGZiLTgyZmItYzJlZDBjZTQ0ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojE50MVEQ9+oqAlQBcNR509yFTYA0XGu1nHe nAvNfVyOULk16APNrVgLN/JCJvTYthcWtl8A50b/VwKKqGPauIuJNWxS6Pd7Oh9T nDO+ntYQ+9NmdqYXp6FhwyS4czAb/92qQlo9m1lB7yLmyWRQ3KRuBRRwBIws1G2r cq/IaqDVgR1dC8L6EqWVckEayfnII0IV4hTQnSbBmWGLIrhtBq/1EUJc1Cw6u9KN FldZZRgdBL78VG5Y+StYQegwz6pxWQn8dhKT9m3a19inPWBNU6PSBYP7ktGAul7u QKfSDjAS3IWv6+hZSUiVc6nU/ajFpDsPaItGnidECrYcY4ik9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSabGVkI2iN01cnvj8jHQC1l/+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjVlNjhmNTQtOWNlNC0z ZjZkLWI3MGEtYmMzZDJmOGVkZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMNdAEAWGanfnRiui3LLNKVm/ogOECD1bPqHdVTTPawwO+gCDJUd a+EPiFF1fmOq2GT3IWFxukeSyBrP0SSA0+jOpRUZErdm4zpOyCM6SjwBEp9CN6sq WdF9quDkqQB7VHSYefbfFAMBgu7iWicr2RfyoG2NKwYK2aq/wSnaiQ77J+ufreC9 Q/qvR977MsYo1vONXVb/GMoV0iJLbUoowWy6bZLNC0Imk2SX/NfJ+23Ip02ayrX6 IdjFDtkIJ/IYXFCFJ44HbUL5F6EinAWDqvfZZw+FbwJBuK1AreQ7e5ggAFXSHCLE aaKueq6NBrPt8/i3cEkOy/CAOVsln3JC0CI= -----END CERTIFICATE-----Generated at Mon Aug 4 07:56:42 2025 by rpki-client