$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c95440eb-024f-3a30-81f9-a6186f1ea6f9.roa File: c95440eb-024f-3a30-81f9-a6186f1ea6f9.roa (raw, json) Hash identifier: CW7SqCv5akYQiPzbj9aH9QIVdAROEGCTUE6RIEKO06A= Subject key identifier: BD:50:6D:81:48:7D:E4:65:DF:78:BD:EC:02:D6:66:50:04:3F:3C:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9379E1B616DC9B82A4866DA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c95440eb-024f-3a30-81f9-a6186f1ea6f9.roa Signing time: Sun 20 Jul 2025 01:30:10 +0000 ROA not before: Sun 20 Jul 2025 01:30:10 +0000 ROA not after: Sat 18 Oct 2025 01:30:10 +0000 asID: 17806 IP address blocks: 2001:470:493::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:79:e1:b6:16:dc:9b:82:a4:86:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 20 01:30:10 2025 GMT Not After : Oct 18 01:30:10 2025 GMT Subject: CN=32c1ad2b-1040-423e-a513-902588e42a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:d2:dc:10:ae:ca:62:25:30:25:bf:25:4d: ae:2a:82:03:01:db:12:34:1b:4f:e2:55:fb:76:2f: 37:c3:22:3e:a9:7a:e3:6b:35:14:93:71:44:ac:d5: a2:16:f7:f2:39:0a:24:ad:8f:83:1c:6b:b0:b1:79: 91:e3:83:45:8d:88:f0:92:9a:6d:98:e0:e7:d5:c7: d9:84:35:53:4a:b0:5a:4a:8d:39:78:8c:5e:c6:52: a3:e1:90:05:17:e1:12:7b:5d:44:7c:4b:bf:cc:96: d1:e3:b8:43:c2:35:27:9f:75:4e:5e:dc:43:be:5b: 89:35:49:6c:c9:2f:6c:9f:b6:9c:42:9b:57:d4:58: 63:42:78:d9:82:5a:5f:ca:d4:a9:fb:f1:b6:ea:81: 6c:3a:1c:10:94:f3:9c:07:50:4b:0b:69:98:d1:7a: 3d:b1:72:e2:02:48:31:f4:25:a0:b8:ef:9e:bc:d3: ae:cc:70:28:0d:13:d5:a9:91:b2:92:49:1e:18:ad: 33:24:42:e2:cc:b7:01:e2:79:b6:ed:94:d0:02:ae: 5c:2e:5d:ec:0f:5c:da:8c:7f:87:76:63:ce:9e:c8: 64:55:7b:05:ad:fb:30:9e:d4:07:2a:59:40:d5:1b: fc:ea:4c:0c:bf:87:96:30:18:26:14:b7:1e:4c:90: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:6D:81:48:7D:E4:65:DF:78:BD:EC:02:D6:66:50:04:3F:3C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c95440eb-024f-3a30-81f9-a6186f1ea6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:493::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:20:81:c4:db:b9:05:01:8d:12:af:df:4a:c7:a0:e3:ca:2d: cb:57:33:31:15:9e:b7:2a:51:28:f1:b7:e6:16:aa:72:e4:07: e3:31:0b:ac:2e:3e:a2:3c:4d:19:ed:55:a5:20:6d:8d:56:63: 05:1a:2b:cf:1b:51:00:a9:ea:f2:71:a4:64:58:4f:ae:1e:dd: 22:0f:b8:79:8b:a1:d6:89:a8:f5:98:0d:02:fa:56:c5:d5:bd: 7d:c2:f3:cc:9e:50:df:12:62:29:9e:dd:5e:43:3a:37:54:79: c1:6c:0e:d1:bc:a4:88:0f:17:b2:2b:5d:86:1f:36:02:c1:4b: 9a:17:eb:05:78:b1:3d:cb:c7:b1:db:87:cd:8e:f6:d8:89:50: 2a:57:a6:47:6c:7b:59:ed:14:9d:7c:58:bc:56:35:0a:a8:14: e1:8f:e2:ca:06:4b:71:04:c3:a3:f5:b9:4d:b5:3b:d0:dd:47: 66:49:72:7e:54:24:70:7b:90:88:21:3b:4c:71:64:ed:af:75: 60:88:f3:76:10:e3:b5:11:9f:2d:75:ba:bf:dd:7d:f6:20:25: 37:28:9a:52:6f:17:90:2e:71:bf:22:e2:a6:31:85:e5:da:a2: 43:52:9c:d1:6d:67:59:4b:61:c4:22:e7:0e:79:3c:9d:2c:dc: 47:08:84:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqTeeG2FtybgqSGbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMDAxMzAxMFoXDTI1MTAxODAxMzAxMFowLzEtMCsGA1UEAxMk MzJjMWFkMmItMTA0MC00MjNlLWE1MTMtOTAyNTg4ZTQyYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK7S3BCuymIlMCW/JU2uKoIDAdsSNBtP4lX7 di83wyI+qXrjazUUk3FErNWiFvfyOQokrY+DHGuwsXmR44NFjYjwkpptmODn1cfZ hDVTSrBaSo05eIxexlKj4ZAFF+ESe11EfEu/zJbR47hDwjUnn3VOXtxDvluJNUls yS9sn7acQptX1FhjQnjZglpfytSp+/G26oFsOhwQlPOcB1BLC2mY0Xo9sXLiAkgx 9CWguO+evNOuzHAoDRPVqZGykkkeGK0zJELizLcB4nm27ZTQAq5cLl3sD1zajH+H dmPOnshkVXsFrfswntQHKllA1Rv86kwMv4eWMBgmFLceTJD5aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1QbYFIfeRl33i97ALWZlAEPzzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzk1NDQwZWItMDI0Zi0z YTMwLTgxZjktYTYxODZmMWVhNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAST MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4ggcTbuQUBjRKv30rHoOPKLctXMzEVnrcqUSjxt+YWqnLkB+Mx C6wuPqI8TRntVaUgbY1WYwUaK88bUQCp6vJxpGRYT64e3SIPuHmLodaJqPWYDQL6 VsXVvX3C88yeUN8SYime3V5DOjdUecFsDtG8pIgPF7IrXYYfNgLBS5oX6wV4sT3L x7Hbh82O9tiJUCpXpkdse1ntFJ18WLxWNQqoFOGP4soGS3EEw6P1uU21O9DdR2ZJ cn5UJHB7kIghO0xxZO2vdWCI83YQ47URny11ur/dffYgJTcomlJvF5Aucb8i4qYx heXaokNSnNFtZ1lLYcQi5w55PJ0s3EcIhF4= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:36 2025 by rpki-client