$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a603503e-2efa-3d18-9b78-d74f783c4408.roa File: a603503e-2efa-3d18-9b78-d74f783c4408.roa (raw, json) Hash identifier: SHXluC0sbZnDBbYMjgJXEoPOW+D1erReAst3l3B/ba8= Subject key identifier: C7:AE:9E:8D:AD:CA:13:3C:8B:4B:60:38:F1:69:12:60:AD:E6:2E:1A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ACF710F189307D155F0E7C5C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a603503e-2efa-3d18-9b78-d74f783c4408.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 203115 IP address blocks: 2001:470:41d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0f:18:93:07:d1:55:f0:e7:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=93cdc096-4f1e-427a-806e-836ad1e60e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b1:f7:7c:76:b3:9a:4b:e6:58:fd:d1:f0:bb: 7b:91:b5:6b:3d:d1:62:00:87:af:04:1a:9a:9e:7d: a3:00:1b:95:b1:5a:ff:09:b7:9c:c5:4f:ef:6e:c2: d6:2d:b5:5f:3a:fb:d4:85:2b:94:b0:c4:16:37:22: 99:26:0e:46:ab:4d:34:16:26:e7:05:73:85:0c:5a: 87:64:90:01:2d:39:59:58:30:86:e4:62:27:71:d8: 79:ca:f8:fb:aa:51:dc:34:71:10:6b:4a:d2:5b:b5: 08:04:0f:a5:c0:e7:2e:93:56:e2:9a:03:97:55:6a: fa:95:ee:2c:dd:fd:43:a7:1e:29:c1:da:ba:f1:5b: de:b9:de:09:d5:4f:3f:30:67:59:4d:46:05:b9:fb: a0:b5:1a:1e:15:e9:ee:21:51:94:5e:f7:0f:63:a4: 13:f4:5b:4e:33:8b:5b:57:0e:bb:76:cc:10:e2:64: 90:65:5b:bd:fd:86:8b:98:c6:65:2b:c1:dc:8b:81: f8:c8:b8:f2:7c:c5:e6:d7:15:eb:3a:33:52:f4:b7: 18:ee:e2:e8:76:08:51:89:d3:79:c4:3e:88:5b:ab: 0b:83:41:82:99:91:0c:c2:67:43:7c:c2:47:21:46: cf:01:af:fe:49:ca:4e:b4:d7:e2:5d:f6:37:f7:44: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:9E:8D:AD:CA:13:3C:8B:4B:60:38:F1:69:12:60:AD:E6:2E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a603503e-2efa-3d18-9b78-d74f783c4408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:41d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5b:31:60:d2:4d:dc:f7:08:a3:b8:fc:f5:d2:90:59:6a:33: 70:88:76:f1:f0:f3:6d:3a:3e:f2:c9:99:6e:01:6a:0c:97:af: ea:73:c8:a8:a2:19:85:9a:e7:ab:7e:29:7d:dd:2d:f2:64:1c: 56:40:10:67:11:26:f8:8c:8f:8f:82:b9:31:e8:d6:df:14:16: 93:64:29:86:89:9d:f7:e0:81:0c:49:d4:72:05:3f:53:18:5a: 3f:45:4b:08:23:bb:92:fb:58:87:33:d2:21:cf:58:cc:48:ba: c6:9f:3e:8f:08:31:c4:47:51:37:45:42:bf:6d:12:cd:b3:d7: cb:f5:b8:86:3c:6c:82:4f:52:fc:21:03:33:7d:f3:65:9a:ef: 3a:79:de:0f:fa:76:26:4e:94:d5:1a:5a:a0:e0:00:5d:e8:de: 7a:5b:8b:db:b9:58:6f:99:fd:d8:08:5f:6e:46:b5:d0:0b:86: 88:b1:2a:be:e7:f0:00:f5:3c:fa:6d:70:b9:85:5d:fd:c5:b8: dd:31:70:cb:08:da:63:05:ff:bd:e2:32:ff:2b:99:1a:9d:cc: d1:f6:b3:2f:61:ec:1d:02:61:85:1d:3b:89:29:e3:a6:0b:1d: 31:2d:0e:c0:6b:a6:78:fa:66:b0:89:0f:58:9d:e2:5d:4e:0e: 76:f2:e5:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErPcQ8YkwfRVfDnxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk OTNjZGMwOTYtNGYxZS00MjdhLTgwNmUtODM2YWQxZTYwZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7H3fHazmkvmWP3R8Lt7kbVrPdFiAIevBBqa nn2jABuVsVr/CbecxU/vbsLWLbVfOvvUhSuUsMQWNyKZJg5Gq000FibnBXOFDFqH ZJABLTlZWDCG5GIncdh5yvj7qlHcNHEQa0rSW7UIBA+lwOcuk1bimgOXVWr6le4s 3f1Dpx4pwdq68Vveud4J1U8/MGdZTUYFufugtRoeFenuIVGUXvcPY6QT9FtOM4tb Vw67dswQ4mSQZVu9/YaLmMZlK8Hci4H4yLjyfMXm1xXrOjNS9LcY7uLodghRidN5 xD6IW6sLg0GCmZEMwmdDfMJHIUbPAa/+ScpOtNfiXfY390SnPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMeuno2tyhM8i0tgOPFpEmCt5i4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTYwMzUwM2UtMmVmYS0z ZDE4LTliNzgtZDc0Zjc4M2M0NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtbMWDSTdz3CKO4/PXSkFlqM3CIdvHw8206PvLJmW4BagyXr+pz yKiiGYWa56t+KX3dLfJkHFZAEGcRJviMj4+CuTHo1t8UFpNkKYaJnffggQxJ1HIF P1MYWj9FSwgju5L7WIcz0iHPWMxIusafPo8IMcRHUTdFQr9tEs2z18v1uIY8bIJP UvwhAzN982Wa7zp53g/6diZOlNUaWqDgAF3o3npbi9u5WG+Z/dgIX25GtdALhoix Kr7n8AD1PPptcLmFXf3FuN0xcMsI2mMF/73iMv8rmRqdzNH2sy9h7B0CYYUdO4kp 46YLHTEtDsBrpnj6ZrCJD1id4l1ODnby5dM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:09:15 2025 by rpki-client