$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f6e7a0-b222-3454-be9b-389b09e37296.roa File: 09f6e7a0-b222-3454-be9b-389b09e37296.roa (raw, json) Hash identifier: y3zEJbm0lpNIaedYnD2W2XlOsdI+njiB8szGHl73abc= Subject key identifier: 1F:98:DE:FB:18:53:69:24:13:18:37:79:99:F5:06:76:E2:81:5D:8C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B67A5E082D07017500B7ECB20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f6e7a0-b222-3454-be9b-389b09e37296.roa Signing time: Sat 04 Oct 2025 01:30:11 +0000 ROA not before: Sat 04 Oct 2025 01:30:11 +0000 ROA not after: Fri 02 Jan 2026 02:30:11 +0000 asID: 12025 IP address blocks: 2001:470:3a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:a5:e0:82:d0:70:17:50:0b:7e:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 4 01:30:11 2025 GMT Not After : Jan 2 02:30:11 2026 GMT Subject: CN=cb48eb94-ef61-4b06-b29b-baf0af35c730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7a:24:2e:d3:be:62:26:3a:05:15:0e:a7:5c: 0a:d5:9a:07:18:f9:ef:29:42:3f:c4:9e:e6:93:af: f3:a5:4d:31:96:98:f7:3f:03:5c:28:bb:f1:62:e8: d4:cd:89:22:da:01:8a:e5:8d:4b:c3:fd:e5:07:0e: af:21:30:93:4c:4f:93:34:fe:e6:e3:8d:3a:eb:15: 31:80:bf:db:16:93:e8:82:ff:b8:91:f8:91:18:e7: bf:04:dc:59:cb:2f:a8:e6:87:fb:67:20:ad:80:c4: a2:81:aa:8b:8b:04:b3:5f:94:ce:b5:1e:72:73:29: 67:17:b2:cb:eb:d0:a4:29:42:57:6a:fe:61:c0:b6: d7:da:3a:34:4b:5d:c7:40:45:25:ee:f2:6a:4b:25: 18:27:35:42:07:ff:35:eb:6e:c2:c3:a4:c8:01:69: a7:d1:2a:d7:e1:05:27:79:ed:94:36:ff:aa:ae:8a: de:7a:98:32:d5:ba:47:4e:9c:8b:f7:55:18:b9:7a: ed:db:16:25:78:3f:b8:97:b6:2e:01:aa:11:fe:4b: ff:94:47:cf:a9:6a:ae:84:97:3a:60:95:5a:22:1c: b1:06:1b:14:a3:03:d0:f8:3a:94:5f:4d:e6:70:97: dc:75:45:12:67:cc:af:d6:65:ed:45:cc:47:1f:03: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:98:DE:FB:18:53:69:24:13:18:37:79:99:F5:06:76:E2:81:5D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f6e7a0-b222-3454-be9b-389b09e37296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3b:1c:55:16:7d:19:85:92:a7:16:73:71:eb:b2:de:bb:bf: 57:7b:c8:36:32:98:ab:d2:9d:e2:11:8a:4e:f5:c5:25:7a:67: fb:90:94:92:33:b6:9a:32:36:6f:8f:79:ab:21:c9:76:2a:c6: a6:af:db:4f:30:8a:f9:b4:7c:1a:23:7c:d7:b9:21:e9:f0:23: f0:e5:eb:14:54:35:0e:2d:cb:08:a1:9f:f8:22:56:79:f7:2a: b2:68:78:1b:fd:cb:96:56:8e:51:60:bf:62:cd:57:5b:f4:61: 07:1f:a1:db:51:92:9f:c0:27:44:a8:e3:9d:0f:7c:fd:75:c8: 83:85:31:e7:e6:dd:9b:a9:6e:1f:f3:d6:b5:57:2d:7b:24:d0: 79:5b:8c:29:dc:81:a1:7b:0c:7e:10:37:ab:e5:16:12:73:96: 8c:00:e5:c1:e4:28:21:40:dd:ca:3b:23:41:b6:d2:45:dc:2b: 17:6b:7f:71:ff:e6:ae:9b:6d:d4:eb:a5:79:c7:0a:d0:87:9e: 54:7c:74:00:b9:43:5b:9d:18:5e:6d:16:99:74:0b:b3:d6:4a: d3:95:f1:2f:10:3f:52:b4:67:07:a3:8f:a4:04:b1:0a:fe:f9: 49:c5:3c:8f:97:87:fd:5e:62:20:8c:d4:00:f1:2d:e6:3d:83: dc:68:3a:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnpeCC0HAXUAt+yyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNDAxMzAxMVoXDTI2MDEwMjAyMzAxMVowLzEtMCsGA1UEAxMk Y2I0OGViOTQtZWY2MS00YjA2LWIyOWItYmFmMGFmMzVjNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinokLtO+YiY6BRUOp1wK1ZoHGPnvKUI/xJ7m k6/zpU0xlpj3PwNcKLvxYujUzYki2gGK5Y1Lw/3lBw6vITCTTE+TNP7m44066xUx gL/bFpPogv+4kfiRGOe/BNxZyy+o5of7ZyCtgMSigaqLiwSzX5TOtR5ycylnF7LL 69CkKUJXav5hwLbX2jo0S13HQEUl7vJqSyUYJzVCB/81627Cw6TIAWmn0SrX4QUn ee2UNv+qroreepgy1bpHTpyL91UYuXrt2xYleD+4l7YuAaoR/kv/lEfPqWquhJc6 YJVaIhyxBhsUowPQ+DqUX03mcJfcdUUSZ8yv1mXtRcxHHwObZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+Y3vsYU2kkExg3eZn1BnbigV2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlmNmU3YTAtYjIyMi0z NDU0LWJlOWItMzg5YjA5ZTM3Mjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACA7HFUWfRmFkqcWc3Hrst67v1d7yDYymKvSneIRik71xSV6Z/uQ lJIztpoyNm+PeashyXYqxqav208wivm0fBojfNe5IenwI/Dl6xRUNQ4tywihn/gi Vnn3KrJoeBv9y5ZWjlFgv2LNV1v0YQcfodtRkp/AJ0So450PfP11yIOFMefm3Zup bh/z1rVXLXsk0HlbjCncgaF7DH4QN6vlFhJzlowA5cHkKCFA3co7I0G20kXcKxdr f3H/5q6bbdTrpXnHCtCHnlR8dAC5Q1udGF5tFpl0C7PWStOV8S8QP1K0Zwejj6QE sQr++UnFPI+Xh/1eYiCM1ADxLeY9g9xoOv4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:24 2025 by rpki-client