$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa File: 33b725f1-5fb3-308f-8792-e7c898b5e67a.roa (raw, json) Hash identifier: xli1Uz66pRzqjNx+1EW+KYjGrHWZMnYrdNC9wnb7/P0= Subject key identifier: 46:7E:76:28:57:F9:F0:DC:09:54:6C:08:5A:BC:25:DB:54:14:81:34 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD3A123E6C90D4346A12A44C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 22709 IP address blocks: 2001:470:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:23:e6:c9:0d:43:46:a1:2a:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=991042e2-df11-40e5-9527-782af443d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:6a:b7:df:db:b3:52:87:4b:1e:fc:64:86: b7:4f:8f:28:1f:cf:dc:55:93:24:61:3c:7b:f1:78: 02:24:1b:cd:2b:d9:0b:72:3a:a9:06:4e:4b:d3:ea: da:e5:25:2a:73:3a:ed:d9:e9:d4:8e:a9:b0:f6:35: f5:07:08:97:00:53:63:aa:e8:cb:31:6d:e1:6b:2d: e4:d8:d8:d8:4e:f2:08:97:c2:97:ce:2d:5d:a2:a7: 22:aa:ac:66:3e:d9:c0:5f:41:b0:77:72:86:ee:96: 67:48:88:c1:19:1f:af:fa:fb:a5:75:74:34:e5:3f: 7e:e4:16:0d:c3:e2:c0:ed:69:49:e8:fa:1b:99:3a: 6b:8d:fe:a5:14:47:79:f3:a0:0e:f4:a7:59:50:26: e9:46:0e:69:83:84:a6:52:47:8a:9f:e8:d5:09:68: 03:2a:c6:31:6f:45:75:2f:9f:7b:77:61:61:8a:ad: 6b:14:36:a4:df:8a:6d:e7:89:0a:0d:46:af:6b:bd: 0f:7f:cb:75:93:07:d7:98:75:1b:22:0a:f0:9b:88: 97:49:e0:ea:0c:c1:a2:57:74:a7:bf:67:11:fa:e0: 4b:46:e5:a6:a1:90:9c:87:75:aa:47:07:8d:73:ee: 0a:0b:7c:ab:51:8a:6a:05:b4:a3:cd:a9:0a:2f:c6: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:76:28:57:F9:F0:DC:09:54:6C:08:5A:BC:25:DB:54:14:81:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:394::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:67:60:65:65:b2:02:49:46:98:ed:c9:34:83:f5:25:9f:b5: 15:26:44:31:ac:0c:52:07:18:36:ef:0d:a4:61:f6:83:c3:56: 6f:7b:ba:d8:44:b3:08:12:1e:6c:d7:cd:7c:8a:b9:a4:8c:81: d0:2a:01:90:c0:00:c7:e1:68:d1:0d:cc:42:54:7f:a1:b9:01: 5e:9b:d3:5c:7b:c0:aa:41:9e:1e:6d:35:af:89:c7:d1:34:56: f8:ef:97:76:f1:f1:14:36:36:bc:3e:aa:6d:f8:42:fb:57:2c: 48:1b:10:e4:55:3f:06:27:58:e3:5c:15:ff:a4:89:f8:27:6e: 29:c2:d7:52:80:71:de:50:47:8d:ba:e7:f3:da:5e:c0:03:18: 5e:7e:b5:08:9d:18:9c:ac:ea:d4:b9:e7:37:ed:30:dc:ea:85: 0d:36:20:e0:e8:bf:5b:69:82:20:dd:b7:a1:2d:71:fd:25:fe: cd:b1:8e:ff:3b:e8:68:25:85:84:45:e9:5a:2c:ec:6a:fc:93: 49:f8:19:86:32:bb:c7:44:0d:6e:01:55:c4:85:1b:aa:2e:78: a9:78:32:80:ca:78:5a:49:66:35:ce:ab:a0:0a:8c:0b:a0:64: ba:b6:08:95:1a:d4:8a:f3:d4:d7:9e:9e:7d:79:2f:50:a9:74: bb:df:66:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToSPmyQ1DRqEqRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTkxMDQyZTItZGYxMS00MGU1LTk1MjctNzgyYWY0NDNkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1qt9/bs1KHSx78ZIa3T48oH8/cVZMkYTx7 8XgCJBvNK9kLcjqpBk5L0+ra5SUqczrt2enUjqmw9jX1BwiXAFNjqujLMW3hay3k 2NjYTvIIl8KXzi1doqciqqxmPtnAX0Gwd3KG7pZnSIjBGR+v+vuldXQ05T9+5BYN w+LA7WlJ6PobmTprjf6lFEd586AO9KdZUCbpRg5pg4SmUkeKn+jVCWgDKsYxb0V1 L597d2Fhiq1rFDak34pt54kKDUava70Pf8t1kwfXmHUbIgrwm4iXSeDqDMGiV3Sn v2cR+uBLRuWmoZCch3WqRweNc+4KC3yrUYpqBbSjzakKL8YLzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZ+dihX+fDcCVRsCFq8JdtUFIE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNiNzI1ZjEtNWZiMy0z MDhmLTg3OTItZTdjODk4YjVlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZnYGVlsgJJRpjtyTSD9SWftRUmRDGsDFIHGDbvDaRh9oPDVm97 uthEswgSHmzXzXyKuaSMgdAqAZDAAMfhaNENzEJUf6G5AV6b01x7wKpBnh5tNa+J x9E0Vvjvl3bx8RQ2Nrw+qm34QvtXLEgbEORVPwYnWONcFf+kifgnbinC11KAcd5Q R4265/PaXsADGF5+tQidGJys6tS55zftMNzqhQ02IODov1tpgiDdt6Etcf0l/s2x jv876GglhYRF6Vos7Gr8k0n4GYYyu8dEDW4BVcSFG6oueKl4MoDKeFpJZjXOq6AK jAugZLq2CJUa1Irz1Neenn15L1CpdLvfZtM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:16 2025 by rpki-client