$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa File: 85f9682d-7d53-3d36-93a1-3376b5c05034.roa (raw, json) Hash identifier: hWEvlsaviBEcbW0ApgyoahsWuOULAv9Vgge5JKlbSac= Subject key identifier: 62:86:94:89:E7:4A:32:24:03:28:66:90:94:CD:1C:B6:D5:5C:FE:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0746CA01A93B0E57D5DCDF96 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 15267 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:ca:01:a9:3b:0e:57:d5:dc:df:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=52f84328-b2ca-471c-bf34-689173a8e54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:c6:42:5c:2c:3e:bc:a4:c1:39:80:54:2e: 14:26:65:13:2c:bf:76:82:a5:0b:d1:09:72:22:0f: 43:20:df:bf:e8:46:22:31:58:38:ac:1f:a6:33:c7: cf:42:77:63:53:53:4b:5c:16:8b:d5:18:d1:41:2f: e7:0b:15:46:25:ac:9d:ef:d2:61:52:4d:71:d9:b6: 63:77:bf:72:a6:14:0a:32:dc:93:e7:f0:31:26:3a: 4b:6a:3b:2e:21:49:c5:8e:4c:eb:00:65:5e:09:b9: 34:af:f5:83:76:91:22:ef:75:a0:bb:4c:83:17:67: 17:f6:bd:92:f1:4d:f4:40:c3:51:6a:70:45:60:7e: 88:7b:62:0c:37:32:10:77:a9:54:91:c7:1e:82:00: 8c:f4:74:60:d8:e6:79:fd:22:99:6a:ea:33:22:89: af:da:06:d1:39:b1:74:0f:8d:11:8a:7f:4e:9a:65: a5:38:39:92:78:11:9b:ca:54:fe:16:5a:6d:88:b4: b8:cc:50:9e:a5:ca:bb:93:28:d9:a8:4a:3a:ad:11: c9:f1:ed:92:a4:c4:86:40:f4:32:fd:27:21:93:b3: 73:30:ce:90:df:30:e3:d0:e9:0b:f9:bd:cd:e3:54: a7:b4:34:64:cf:12:74:d5:94:d6:44:09:e3:9c:75: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:86:94:89:E7:4A:32:24:03:28:66:90:94:CD:1C:B6:D5:5C:FE:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e9:8b:c3:c2:50:3f:bc:46:6f:0b:1a:fb:f1:35:7f:13:25: 3c:57:4e:75:7e:65:01:28:f3:08:da:70:4a:bf:f4:51:85:6e: ad:80:3f:6c:09:b0:7e:fb:3e:77:30:3c:ec:1e:07:4b:4f:bc: ce:e4:67:0b:0d:67:58:2a:09:66:34:bc:51:99:25:3c:9d:b0: 3f:13:2c:37:66:d4:de:d7:f8:45:a1:db:35:e9:66:a2:78:ea: ca:bc:5c:00:03:6b:2c:24:2c:bf:c9:52:8d:7c:40:15:e4:1c: 84:22:d3:b4:4e:18:34:5b:11:2f:7f:84:32:c1:31:43:3c:7d: eb:87:d8:2b:bd:85:4a:f6:fe:d1:b4:69:36:d1:44:e3:57:9c: 66:c6:a8:cc:f9:1a:37:25:34:8c:f9:92:45:86:36:42:fd:ba: c9:21:d3:83:c2:9f:43:31:4a:e2:40:53:99:6c:71:e9:2c:6a: 50:17:f8:72:fb:27:22:5e:70:06:d2:0c:da:bb:99:6d:3b:0b: f1:b7:2f:cb:aa:71:70:1e:80:ca:7c:c1:26:18:3c:42:d3:47: 8b:7e:a9:03:a4:91:71:1c:5c:d8:1a:63:ab:e1:21:bf:07:0d: 85:9b:5c:5e:ad:26:5a:47:45:1e:8f:be:14:be:95:85:08:49: e5:8c:a8:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsHRsoBqTsOV9Xc35YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NTJmODQzMjgtYjJjYS00NzFjLWJmMzQtNjg5MTczYThlNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdPGQlwsPrykwTmAVC4UJmUTLL92gqUL0Qly Ig9DIN+/6EYiMVg4rB+mM8fPQndjU1NLXBaL1RjRQS/nCxVGJayd79JhUk1x2bZj d79yphQKMtyT5/AxJjpLajsuIUnFjkzrAGVeCbk0r/WDdpEi73Wgu0yDF2cX9r2S 8U30QMNRanBFYH6Ie2IMNzIQd6lUkcceggCM9HRg2OZ5/SKZauozIomv2gbRObF0 D40Rin9OmmWlODmSeBGbylT+FlptiLS4zFCepcq7kyjZqEo6rRHJ8e2SpMSGQPQy /Schk7NzMM6Q3zDj0OkL+b3N41SntDRkzxJ01ZTWRAnjnHU0DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGKGlInnSjIkAyhmkJTNHLbVXP6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVmOTY4MmQtN2Q1My0z ZDM2LTkzYTEtMzM3NmI1YzA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzpi8PCUD+8Rm8LGvvxNX8TJTxXTnV+ZQEo8wjacEq/9FGFbq2A P2wJsH77PncwPOweB0tPvM7kZwsNZ1gqCWY0vFGZJTydsD8TLDdm1N7X+EWh2zXp ZqJ46sq8XAADaywkLL/JUo18QBXkHIQi07ROGDRbES9/hDLBMUM8feuH2Cu9hUr2 /tG0aTbRRONXnGbGqMz5GjclNIz5kkWGNkL9uskh04PCn0MxSuJAU5lsceksalAX +HL7JyJecAbSDNq7mW07C/G3L8uqcXAegMp8wSYYPELTR4t+qQOkkXEcXNgaY6vh Ib8HDYWbXF6tJlpHRR6PvhS+lYUISeWMqFc= -----END CERTIFICATE-----Generated at Wed Sep 17 00:23:08 2025 by rpki-client