$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa File: ef411482-5f78-3aad-b80c-bb1a5129e575.roa (raw, json) Hash identifier: WkIVAfipNHP+nIx+AoHvZBc4cxeTtAXwf0jP9SWHfC8= Subject key identifier: 23:CA:80:E7:FA:73:18:CB:95:62:E9:C3:17:44:D4:FB:26:5A:6B:98 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584A9D30F3BF0449DE23E8397980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 216138 IP address blocks: 2001:470:38a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f3:bf:04:49:de:23:e8:39:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=e336b930-fd98-4c72-aa5c-db1f04c358c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:3c:eb:aa:21:db:d8:c3:f4:84:17:4f:25: 66:13:40:fa:ec:87:a8:e8:91:e4:9b:f5:a0:c8:91: d8:2d:1b:2b:65:3e:db:bb:6f:52:69:f0:04:00:c1: 8f:ac:56:50:f0:cb:c6:56:8e:8c:4a:8d:15:ce:84: 7c:5e:f0:2c:ba:cb:9d:1c:f0:09:a4:83:3e:e1:ae: d8:0a:c1:2b:58:55:c4:1c:ee:07:9f:f4:04:83:56: 03:01:da:0c:1f:a8:e1:e2:48:25:e1:54:84:8f:2a: 5e:39:e8:9c:82:47:48:c8:36:3d:3d:31:2e:c6:64: ff:aa:b6:aa:6e:ec:f9:ad:44:43:20:a3:28:77:b9: 1e:2d:88:bc:a4:1c:ae:cf:ca:d9:2a:8d:ef:04:09: fb:0e:a9:41:1a:cc:4e:f1:75:5b:09:5b:dd:b7:3a: 39:d1:a3:c5:07:6b:6d:60:2f:ea:97:89:95:5b:a0: fd:62:2d:47:31:06:91:bd:ab:9b:ad:34:01:98:e0: 96:6f:3d:eb:6c:f6:f9:ea:dc:d3:9e:51:73:ec:90: b8:02:bc:7b:91:2a:45:7b:29:9c:2f:7f:b9:4b:be: 7f:36:db:31:03:09:74:bc:8e:5f:fd:9c:7b:9b:80: d4:90:73:14:47:a5:21:92:a8:72:01:22:f3:7b:bd: fa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CA:80:E7:FA:73:18:CB:95:62:E9:C3:17:44:D4:FB:26:5A:6B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:45:83:94:17:9a:be:b1:52:b3:7b:4c:99:bc:58:ef:b1:2e: b2:1d:47:8b:c0:66:bd:ba:cb:e3:d4:dd:74:96:4f:33:80:00: dd:3f:18:c9:69:c9:2c:16:54:63:3b:62:46:c1:21:f6:dd:0e: 27:80:d2:38:89:57:bf:56:90:c1:0a:1b:f6:03:04:ea:77:42: d9:16:5d:ca:70:09:47:c7:11:a2:44:d5:1f:56:2c:f8:41:75: d5:8d:66:c6:88:db:1f:9b:8f:82:22:f0:90:7b:cd:4a:5a:90: 58:5a:33:5d:00:04:d8:50:70:ef:06:df:73:a0:95:f1:2e:c8: c1:6e:19:d3:7e:e7:37:02:60:0b:21:04:79:37:3c:60:cf:45: 6b:93:9b:a8:76:e3:95:16:c5:5d:5a:22:87:8e:12:0b:15:ee: 89:0e:5a:1a:81:7f:18:a9:2b:10:db:c6:e5:bb:ae:c9:46:1b: 98:2b:1f:57:87:d6:02:10:be:50:41:57:55:16:c7:75:67:4a: 63:49:94:0c:67:75:93:91:15:f7:fc:09:75:4e:7f:66:08:ef: ee:a9:5e:dd:94:1c:fd:22:8e:82:b4:e2:74:c3:65:6c:1d:c9: c8:be:37:ef:be:df:76:64:54:6d:4f:3d:f5:df:a8:84:cf:0f: 09:71:6f:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqdMPO/BEneI+g5eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZTMzNmI5MzAtZmQ5OC00YzcyLWFhNWMtZGIxZjA0YzM1OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGk866oh29jD9IQXTyVmE0D67Ieo6JHkm/Wg yJHYLRsrZT7bu29SafAEAMGPrFZQ8MvGVo6MSo0VzoR8XvAsusudHPAJpIM+4a7Y CsErWFXEHO4Hn/QEg1YDAdoMH6jh4kgl4VSEjypeOeicgkdIyDY9PTEuxmT/qraq buz5rURDIKMod7keLYi8pByuz8rZKo3vBAn7DqlBGsxO8XVbCVvdtzo50aPFB2tt YC/ql4mVW6D9Yi1HMQaRvaubrTQBmOCWbz3rbPb56tzTnlFz7JC4Arx7kSpFeymc L3+5S75/NtsxAwl0vI5f/Zx7m4DUkHMUR6UhkqhyASLze7369wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPKgOf6cxjLlWLpwxdE1PsmWmuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWY0MTE0ODItNWY3OC0z YWFkLWI4MGMtYmIxYTUxMjllNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1Fg5QXmr6xUrN7TJm8WO+xLrIdR4vAZr26y+PU3XSWTzOAAN0/ GMlpySwWVGM7YkbBIfbdDieA0jiJV79WkMEKG/YDBOp3QtkWXcpwCUfHEaJE1R9W LPhBddWNZsaI2x+bj4Ii8JB7zUpakFhaM10ABNhQcO8G33OglfEuyMFuGdN+5zcC YAshBHk3PGDPRWuTm6h245UWxV1aIoeOEgsV7okOWhqBfxipKxDbxuW7rslGG5gr H1eH1gIQvlBBV1UWx3VnSmNJlAxndZORFff8CXVOf2YI7+6pXt2UHP0ijoK04nTD ZWwdyci+N+++33ZkVG1PPfXfqITPDwlxb/E= -----END CERTIFICATE-----Generated at Thu Jul 31 05:17:18 2025 by rpki-client