$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa File: a0a5fafb-9602-388d-b21b-0ba4f6937692.roa (raw, json) Hash identifier: zPgHbtEzd3KLtlvjCBO7805z3vsKOjQI7QhbCxWLqD4= Subject key identifier: 1B:86:72:D0:1E:7C:D4:E0:EF:07:87:F2:04:88:D9:E0:9E:BD:FC:DE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AD0D6679E28C4DE801F40EF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 18821 IP address blocks: 2001:470:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:67:9e:28:c4:de:80:1f:40:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=7fea2d02-0912-45cb-bca7-7ce2c3dc589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:c3:c9:43:3c:ee:ee:7d:ea:09:5d:e8:6a: c1:ee:c2:8a:ce:1a:50:a9:b4:13:d2:d2:b4:b6:be: 75:1c:3b:7a:b9:8c:b0:94:5d:f4:08:ca:36:b1:4f: 5c:11:e9:96:e6:af:f4:47:db:b7:12:1d:26:4a:33: 4c:cc:52:35:48:73:fa:e6:b0:3a:fd:48:c8:52:02: c0:8e:a8:f3:68:a5:b3:b4:f3:87:40:0f:68:f6:53: 0e:34:4d:34:59:d0:77:7a:48:97:85:ea:c8:9c:d0: 20:57:f3:22:77:14:5c:c9:58:52:07:cd:45:57:a9: f5:d8:56:67:76:da:a5:1e:aa:31:0e:46:19:b8:ba: 1f:ed:c9:f7:a4:f3:b8:f5:ff:3a:59:29:8f:47:f0: e0:95:6b:cc:00:18:dc:11:03:ac:18:a3:b7:04:7d: 0b:c0:6e:55:14:17:1b:f4:e3:c0:d2:1c:40:35:88: 99:c8:9d:19:70:92:9a:8b:25:af:7f:0e:5c:68:5e: 35:9d:2a:00:9c:ab:a0:24:ac:36:05:48:b7:e7:2d: 4f:97:47:4e:0f:4a:7c:96:45:3b:67:a1:5a:4e:0e: d9:15:e2:3b:75:0b:8f:92:af:c7:9f:cd:a1:4f:e1: 5c:b8:45:d2:9e:29:17:91:52:1b:4a:6e:67:41:ba: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:86:72:D0:1E:7C:D4:E0:EF:07:87:F2:04:88:D9:E0:9E:BD:FC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7d:75:d8:09:95:c1:4d:e1:aa:eb:c3:a7:54:91:07:80:6e: 75:8f:c6:86:ea:9c:22:b9:6f:5a:78:f4:f6:9d:58:45:dc:b1: b2:cc:d7:a6:7e:df:a3:29:ef:a9:1f:c4:ef:d2:da:a0:9e:20: 02:9a:1f:f2:bf:b1:f8:5c:c4:e6:04:9c:33:2c:d0:77:50:45: 38:26:af:08:d8:be:02:38:2d:c8:6c:8a:4a:b5:41:87:d3:02: ea:5a:1c:9b:80:e1:a3:69:c8:24:99:1f:72:71:0a:15:ab:d4: da:d0:7e:e8:c7:8e:88:0b:34:c3:1e:71:10:e5:a9:d8:49:ff: 00:a5:06:90:19:45:fe:7b:52:4c:5b:df:10:49:7a:05:de:89: 20:8b:0f:b6:5c:1e:ee:cc:dc:2a:61:53:cc:62:9e:60:20:17: c5:93:2e:b3:f3:3c:19:3d:58:65:1f:e0:57:cc:56:30:5d:8d: aa:3a:33:42:8d:8b:42:a2:d3:4e:d1:4b:b2:dc:cb:43:c9:f1: 2e:32:4b:09:7f:4c:53:8d:be:c0:bc:57:94:49:b5:c5:d5:b6: 25:ea:65:03:2a:af:f6:cd:30:fc:eb:b5:46:e3:e8:8e:c2:0e: 5c:2c:0a:27:ed:27:fd:91:2f:9c:c0:0b:f8:eb:3e:e2:5d:e9: ce:ab:3b:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1meeKMTegB9A74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk N2ZlYTJkMDItMDkxMi00NWNiLWJjYTctN2NlMmMzZGM1ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gjDyUM87u596gld6GrB7sKKzhpQqbQT0tK0 tr51HDt6uYywlF30CMo2sU9cEemW5q/0R9u3Eh0mSjNMzFI1SHP65rA6/UjIUgLA jqjzaKWztPOHQA9o9lMONE00WdB3ekiXherInNAgV/MidxRcyVhSB81FV6n12FZn dtqlHqoxDkYZuLof7cn3pPO49f86WSmPR/DglWvMABjcEQOsGKO3BH0LwG5VFBcb 9OPA0hxANYiZyJ0ZcJKaiyWvfw5caF41nSoAnKugJKw2BUi35y1Pl0dOD0p8lkU7 Z6FaTg7ZFeI7dQuPkq/Hn82hT+FcuEXSnikXkVIbSm5nQbp6vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBuGctAefNTg7weH8gSI2eCevfzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBhNWZhZmItOTYwMi0z ODhkLWIyMWItMGJhNGY2OTM3NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJd9ddgJlcFN4arrw6dUkQeAbnWPxobqnCK5b1p49PadWEXcsbLM 16Z+36Mp76kfxO/S2qCeIAKaH/K/sfhcxOYEnDMs0HdQRTgmrwjYvgI4Lchsikq1 QYfTAupaHJuA4aNpyCSZH3JxChWr1NrQfujHjogLNMMecRDlqdhJ/wClBpAZRf57 Ukxb3xBJegXeiSCLD7ZcHu7M3CphU8xinmAgF8WTLrPzPBk9WGUf4FfMVjBdjao6 M0KNi0Ki007RS7Lcy0PJ8S4ySwl/TFONvsC8V5RJtcXVtiXqZQMqr/bNMPzrtUbj 6I7CDlwsCiftJ/2RL5zAC/jrPuJd6c6rO0g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:23 2025 by rpki-client