$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0681f05c-090c-38dc-9477-722f78a4183b.roa File: 0681f05c-090c-38dc-9477-722f78a4183b.roa (raw, json) Hash identifier: jA3xw/XGZ6y/MxBhP0r+WsUz1jT8bL+rrsjQgjsRFj4= Subject key identifier: 49:43:80:36:E5:C7:82:D8:3A:9F:67:90:77:5F:15:FA:EC:E2:FE:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B48F0662459628BAC702FAC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0681f05c-090c-38dc-9477-722f78a4183b.roa Signing time: Tue 23 Sep 2025 01:30:17 +0000 ROA not before: Tue 23 Sep 2025 01:30:17 +0000 ROA not after: Mon 22 Dec 2025 02:30:17 +0000 asID: 45557 IP address blocks: 2001:470:10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:f0:66:24:59:62:8b:ac:70:2f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 23 01:30:17 2025 GMT Not After : Dec 22 02:30:17 2025 GMT Subject: CN=031f6091-576f-4ba6-93d5-b960ccda48c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e4:ea:b7:88:88:d9:4d:cb:91:56:cf:48:98: 25:05:f1:b7:c6:e6:8e:6b:93:76:26:63:96:48:04: bf:a8:46:78:0c:93:9b:e6:c8:fa:cc:b4:a2:25:3d: d7:8a:b4:68:0c:df:71:21:a3:0f:7e:bd:9e:82:1f: 93:68:f0:6d:0b:19:d1:b9:52:43:bc:47:e6:8f:fb: e3:a0:05:39:95:34:96:9f:45:60:a0:37:d1:d7:3b: 45:fc:8f:87:9d:a2:aa:a3:30:45:30:20:e9:ad:e8: 3f:7b:cb:01:b4:e5:cc:0c:6d:ef:4b:c5:aa:b2:dd: ad:5d:39:14:32:31:83:7e:6e:29:12:54:19:11:35: c1:27:e0:7a:ef:bd:be:a4:0d:a3:48:74:1c:ae:35: 56:e7:7c:6e:79:ba:c7:51:2f:2d:4a:fd:ba:cd:0c: 03:e3:6f:51:b2:53:7a:fb:af:5b:e6:19:fb:3b:53: 99:83:8b:4a:9f:8e:ce:15:6e:9d:79:69:dd:fa:74: ec:26:86:31:28:07:6d:5a:da:a7:f1:95:45:c6:6a: f0:04:83:74:18:95:13:70:86:7f:ec:dc:dc:8f:60: 4d:ab:6c:41:d7:1c:21:95:b5:5e:ed:97:af:b2:e3: 23:98:89:e8:10:62:7a:36:0c:16:cf:9a:b7:cd:52: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:43:80:36:E5:C7:82:D8:3A:9F:67:90:77:5F:15:FA:EC:E2:FE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0681f05c-090c-38dc-9477-722f78a4183b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:10e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:89:c5:e6:4f:15:42:33:a1:8e:77:e0:d6:62:1a:4e:bf:36: 5c:10:52:57:b7:a2:6c:11:2c:22:8d:8c:1b:78:1b:41:c9:2e: 01:ec:ad:f8:2a:96:43:10:25:4d:9e:6c:03:d8:bf:9d:e7:25: 2b:f1:74:9a:8c:23:52:b5:14:24:9d:0d:2b:3b:ab:17:02:dc: 72:c2:d7:3b:8a:a3:3c:d5:71:23:af:8b:29:f4:a9:5b:73:ab: 32:57:a5:e8:42:5c:83:03:fd:17:41:0a:00:a1:70:5b:59:f6: 37:9e:46:f6:d2:a6:6c:28:3c:20:93:12:62:d1:92:8e:29:ff: 59:0b:98:12:bb:86:69:fd:a8:9a:c9:52:5a:a1:4c:3e:8c:8f: 53:59:88:5a:23:6d:c1:45:02:79:f1:02:80:ea:9f:60:74:36: ac:48:29:bd:f8:7b:55:14:d1:52:9f:5c:51:1a:a6:8b:2e:3c: 51:c7:2f:76:f0:ae:d7:96:aa:fc:2c:bf:a0:bd:68:05:30:28: 7d:b8:2a:dd:8f:8e:ac:53:bf:1c:ab:c7:11:0c:39:33:f5:45: ec:af:86:62:1a:47:11:14:f4:e5:17:ec:a4:93:93:95:14:38: b8:31:43:49:c7:27:c0:e1:fd:41:1d:2f:17:98:ef:45:b1:f7: 96:43:01:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI8GYkWWKLrHAvrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMzAxMzAxN1oXDTI1MTIyMjAyMzAxN1owLzEtMCsGA1UEAxMk MDMxZjYwOTEtNTc2Zi00YmE2LTkzZDUtYjk2MGNjZGE0OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OTqt4iI2U3LkVbPSJglBfG3xuaOa5N2JmOW SAS/qEZ4DJOb5sj6zLSiJT3XirRoDN9xIaMPfr2egh+TaPBtCxnRuVJDvEfmj/vj oAU5lTSWn0VgoDfR1ztF/I+HnaKqozBFMCDpreg/e8sBtOXMDG3vS8Wqst2tXTkU MjGDfm4pElQZETXBJ+B6772+pA2jSHQcrjVW53xuebrHUS8tSv26zQwD429RslN6 +69b5hn7O1OZg4tKn47OFW6deWnd+nTsJoYxKAdtWtqn8ZVFxmrwBIN0GJUTcIZ/ 7Nzcj2BNq2xB1xwhlbVe7ZevsuMjmInoEGJ6NgwWz5q3zVLhrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElDgDblx4LYOp9nkHdfFfrs4v5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDY4MWYwNWMtMDkwYy0z OGRjLTk0NzctNzIyZjc4YTQxODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMKJxeZPFUIzoY534NZiGk6/NlwQUle3omwRLCKNjBt4G0HJLgHs rfgqlkMQJU2ebAPYv53nJSvxdJqMI1K1FCSdDSs7qxcC3HLC1zuKozzVcSOviyn0 qVtzqzJXpehCXIMD/RdBCgChcFtZ9jeeRvbSpmwoPCCTEmLRko4p/1kLmBK7hmn9 qJrJUlqhTD6Mj1NZiFojbcFFAnnxAoDqn2B0NqxIKb34e1UU0VKfXFEaposuPFHH L3bwrteWqvwsv6C9aAUwKH24Kt2PjqxTvxyrxxEMOTP1ReyvhmIaRxEU9OUX7KST k5UUOLgxQ0nHJ8Dh/UEdLxeY70Wx95ZDAWM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:03 2025 by rpki-client