$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa File: 23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa (raw, json) Hash identifier: 5i/ZfbYJ1ZWfftxnL7mBIapyZsAbOsMcyDT4vJd+gZk= Subject key identifier: 29:FD:4B:70:56:13:47:E0:3F:AE:62:E0:35:E8:F0:7A:6A:17:61:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF9514F7561CDEAE777A26FF0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 397270 IP address blocks: 2001:470:33d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4f:75:61:cd:ea:e7:77:a2:6f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=3c40b922-8720-4bf3-b120-8dbeaab8a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:84:45:d4:8e:5c:10:f6:e7:39:f3:57:94: 08:4a:c3:34:99:db:37:c7:aa:50:52:f7:c6:aa:5d: 2e:29:3f:d6:59:b0:74:91:02:35:7b:52:08:c2:76: 60:8f:55:00:cb:5c:77:28:b8:f6:20:40:bd:99:d5: 76:83:07:06:f0:19:63:55:58:6d:1d:86:d5:65:7f: fe:c9:a9:fa:91:76:45:7e:ba:59:c5:b2:69:f8:32: 72:29:2a:41:87:bb:71:9f:c7:94:f0:ab:8c:24:3b: 29:89:09:68:5e:40:da:cf:95:fb:68:7a:9f:e0:1e: c3:dd:91:c1:69:e9:d4:0d:3a:01:35:c4:57:8f:48: f3:06:03:51:4f:e3:7c:2f:cc:59:13:d4:b6:12:ad: 7a:47:1b:52:29:28:c9:dc:07:3e:35:18:5d:64:7d: 3e:54:ad:05:35:72:89:67:1a:04:cf:2a:96:c5:b1: e6:b5:8c:e0:21:31:2c:77:a4:7c:a9:cd:bb:5a:36: 34:7d:75:db:63:14:32:2a:65:72:1b:9a:71:91:ed: 46:4f:82:41:51:20:0d:a2:d8:9e:76:6b:7e:12:36: f3:84:66:b8:fe:5f:26:85:0f:96:dc:5b:f5:16:3c: 55:57:41:84:ea:e5:fd:8f:28:fb:ee:15:22:33:c3: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:4B:70:56:13:47:E0:3F:AE:62:E0:35:E8:F0:7A:6A:17:61:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:db:2b:21:91:8a:cf:5a:45:94:b5:d7:e0:00:23:51:72:6a: 5b:36:e5:54:3c:4a:31:f9:05:c0:20:72:41:c2:99:6b:35:f9: 4c:dc:e4:a6:37:b0:c9:c2:c3:bb:6f:8b:eb:df:86:32:20:07: 5d:17:93:d2:b5:e9:f6:9c:ed:dd:89:f3:ca:1b:2d:dd:68:de: 1f:3e:27:76:e8:9d:06:2e:05:aa:27:9a:4d:60:45:bd:28:7d: a6:a8:d2:45:d2:88:2d:59:24:72:ff:4f:a2:23:3a:b0:a2:71: ef:46:e2:44:d9:92:a6:89:42:08:76:c3:14:a9:85:2e:cf:b4: ad:bb:46:ae:8c:fe:d0:ee:97:72:37:b3:26:c8:73:5e:cd:29: 33:00:f0:c2:92:ac:d5:2a:d1:d1:17:d9:43:78:21:37:99:2b: 19:f2:c1:ad:e5:04:0e:bd:96:ba:6c:0b:d2:17:ab:79:3b:cc: 98:d5:88:3c:cb:91:39:53:fd:aa:2f:9b:09:89:b4:79:b8:d1: 80:35:3f:1e:ee:22:d3:33:1b:50:f9:47:d2:a3:74:f8:83:43: 9d:52:b4:c1:44:b9:8c:3e:07:3a:c4:a0:29:72:60:40:ac:4e: 76:cb:dd:9b:ef:2c:99:f7:53:50:ac:14:7e:ea:89:b8:19:39: 70:b8:ec:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UU91Yc3q53eib/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2M0MGI5MjItODcyMC00YmYzLWIxMjAtOGRiZWFhYjhhNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ieERdSOXBD25znzV5QISsM0mds3x6pQUvfG ql0uKT/WWbB0kQI1e1IIwnZgj1UAy1x3KLj2IEC9mdV2gwcG8BljVVhtHYbVZX/+ yan6kXZFfrpZxbJp+DJyKSpBh7txn8eU8KuMJDspiQloXkDaz5X7aHqf4B7D3ZHB aenUDToBNcRXj0jzBgNRT+N8L8xZE9S2Eq16RxtSKSjJ3Ac+NRhdZH0+VK0FNXKJ ZxoEzyqWxbHmtYzgITEsd6R8qc27WjY0fXXbYxQyKmVyG5pxke1GT4JBUSANotie dmt+EjbzhGa4/l8mhQ+W3Fv1FjxVV0GE6uX9jyj77hUiM8NQMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCn9S3BWE0fgP65i4DXo8HpqF2HxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjNhNzgxNzQtZThkZC0z ZTk4LTg2NzctOGVlNzliZDY2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHbKyGRis9aRZS11+AAI1Fyals25VQ8SjH5BcAgckHCmWs1+Uzc 5KY3sMnCw7tvi+vfhjIgB10Xk9K16fac7d2J88obLd1o3h8+J3bonQYuBaonmk1g Rb0ofaao0kXSiC1ZJHL/T6IjOrCice9G4kTZkqaJQgh2wxSphS7PtK27Rq6M/tDu l3I3sybIc17NKTMA8MKSrNUq0dEX2UN4ITeZKxnywa3lBA69lrpsC9IXq3k7zJjV iDzLkTlT/aovmwmJtHm40YA1Px7uItMzG1D5R9KjdPiDQ51StMFEuYw+BzrEoCly YECsTnbL3ZvvLJn3U1CsFH7qibgZOXC47AI= -----END CERTIFICATE-----Generated at Thu Sep 18 14:49:50 2025 by rpki-client