$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a900c03-d6c8-3035-8ab2-9cc7451be88c.roa File: 1a900c03-d6c8-3035-8ab2-9cc7451be88c.roa (raw, json) Hash identifier: hV6dCq+7zGYy2Ztj/9jTnU6Bd8ltZv4algkYebnRX94= Subject key identifier: 9B:1A:48:11:BC:1B:7E:38:7B:38:2F:EC:DE:3F:CC:C9:A2:51:00:53 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ACB410269523D3D46FB158FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a900c03-d6c8-3035-8ab2-9cc7451be88c.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 9664 IP address blocks: 2001:470:3e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:02:69:52:3d:3d:46:fb:15:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=a7b43c6b-e13b-4d90-b22d-ba46231dcd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:b3:8e:05:db:b1:03:95:5d:14:19:36:65: 87:c6:0a:41:5c:1e:0c:24:cd:eb:7a:e0:dc:a2:b3: 01:65:ec:5a:4e:ff:e9:39:53:01:6c:be:7f:ec:09: 52:fb:b6:78:76:6f:a6:b6:cb:33:1b:92:8e:81:c3: 17:d5:dd:66:ec:18:64:2b:3d:2f:33:70:dd:1c:19: 63:6f:26:e1:ae:db:82:2c:6a:63:f7:bf:50:1c:9d: 5a:e8:da:e1:f2:b2:7d:57:27:0a:0c:a6:a8:0a:1b: a5:cd:e0:96:b8:f3:e0:58:e6:7a:33:69:29:9f:7c: 8c:91:40:b1:0b:15:ab:c5:86:f5:f5:9a:3f:d5:f4: 02:d7:19:c1:bd:5f:d0:9f:d7:b3:1a:dd:b8:49:a7: 65:62:1d:d7:a4:08:e5:9d:30:b8:96:59:e0:5d:ae: 61:d0:01:d1:51:4e:91:cf:af:b6:93:02:f7:62:fa: 2d:ab:b8:29:c8:31:d5:b6:5e:d7:3a:ec:62:49:e3: 41:ae:98:2e:7d:5c:aa:d7:8a:de:93:76:8c:b7:f5: 99:bb:7c:8b:62:a2:09:d4:9d:ea:b2:6c:04:06:d6: 1f:62:6d:20:e0:39:b1:16:04:65:22:f6:bd:c6:7e: 89:50:6d:02:39:19:ed:b6:fb:d2:8b:7d:4a:d8:ad: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:48:11:BC:1B:7E:38:7B:38:2F:EC:DE:3F:CC:C9:A2:51:00:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a900c03-d6c8-3035-8ab2-9cc7451be88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:91:61:a5:22:3d:48:53:38:68:f4:df:a2:a5:f4:f5:72:55: 23:8d:85:c6:64:ea:ad:e7:01:e1:61:ae:5c:c8:c6:fd:4d:a2: f6:0f:73:97:66:5e:b4:62:92:73:b2:6c:81:13:40:62:83:cc: e9:d5:48:d0:71:d6:be:a4:a7:1b:d2:98:40:fb:89:99:4f:08: c2:c5:d2:81:08:3c:5d:d8:70:c5:52:75:45:df:1b:59:d3:3d: 9f:23:57:de:f6:71:65:24:7d:b8:8d:ab:03:32:04:d5:5a:84: a0:e8:30:a2:ec:bb:64:66:f9:46:86:6f:5a:98:5c:0c:9a:54: ec:70:44:c9:2c:12:5e:aa:fa:98:69:56:f4:0d:5e:6a:cc:35: 87:66:9c:a2:b6:48:79:f3:08:d6:2b:fe:d8:8a:f1:84:6c:31: a7:37:8f:79:57:74:4f:c1:17:38:be:ed:41:0f:a1:27:8f:3e: ee:0c:e0:1f:05:ce:9a:fe:dd:30:8b:8a:04:1c:1d:86:34:0c: 67:7a:da:87:f9:7c:43:ca:64:98:35:6e:b0:63:13:7f:37:63: cb:d8:c8:ea:9e:a1:1d:4c:f1:71:7a:c6:d0:5f:3f:3a:73:f6: 4b:f2:45:1e:50:e7:f6:63:47:2c:38:36:72:a3:88:46:6f:9a: 8c:24:11:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQQJpUj09RvsVj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTdiNDNjNmItZTEzYi00ZDkwLWIyMmQtYmE0NjIzMWRjZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFGzjgXbsQOVXRQZNmWHxgpBXB4MJM3reuDc orMBZexaTv/pOVMBbL5/7AlS+7Z4dm+mtsszG5KOgcMX1d1m7BhkKz0vM3DdHBlj bybhrtuCLGpj979QHJ1a6Nrh8rJ9VycKDKaoChulzeCWuPPgWOZ6M2kpn3yMkUCx CxWrxYb19Zo/1fQC1xnBvV/Qn9ezGt24SadlYh3XpAjlnTC4llngXa5h0AHRUU6R z6+2kwL3Yvotq7gpyDHVtl7XOuxiSeNBrpgufVyq14rek3aMt/WZu3yLYqIJ1J3q smwEBtYfYm0g4DmxFgRlIva9xn6JUG0CORnttvvSi31K2K32dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJsaSBG8G344ezgv7N4/zMmiUQBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWE5MDBjMDMtZDZjOC0z MDM1LThhYjItOWNjNzQ1MWJlODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyRYaUiPUhTOGj036Kl9PVyVSONhcZk6q3nAeFhrlzIxv1NovYP c5dmXrRiknOybIETQGKDzOnVSNBx1r6kpxvSmED7iZlPCMLF0oEIPF3YcMVSdUXf G1nTPZ8jV972cWUkfbiNqwMyBNVahKDoMKLsu2Rm+UaGb1qYXAyaVOxwRMksEl6q +phpVvQNXmrMNYdmnKK2SHnzCNYr/tiK8YRsMac3j3lXdE/BFzi+7UEPoSePPu4M 4B8Fzpr+3TCLigQcHYY0DGd62of5fEPKZJg1brBjE383Y8vYyOqeoR1M8XF6xtBf Pzpz9kvyRR5Q5/ZjRyw4NnKjiEZvmowkEYc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:56:18 2025 by rpki-client