$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a42f422-3e04-33c5-945b-32f672815515.roa File: 0a42f422-3e04-33c5-945b-32f672815515.roa (raw, json) Hash identifier: qaw0nsNjxvdWHtvMxFK90gimexy6Hyf7/MSXkRuelhE= Subject key identifier: 9B:39:C5:A0:8D:C4:67:F6:C0:19:47:0B:86:7A:28:9A:00:87:B3:14 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B48F05A901A29B5C3E069B700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a42f422-3e04-33c5-945b-32f672815515.roa Signing time: Tue 23 Sep 2025 01:30:11 +0000 ROA not before: Tue 23 Sep 2025 01:30:11 +0000 ROA not after: Mon 22 Dec 2025 02:30:11 +0000 asID: 12025 IP address blocks: 2001:470:44a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:f0:5a:90:1a:29:b5:c3:e0:69:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 23 01:30:11 2025 GMT Not After : Dec 22 02:30:11 2025 GMT Subject: CN=9a4ad672-0563-4164-96e4-6e8296a22126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:c5:cd:4c:e6:03:82:1d:75:2f:79:20:21: b5:3e:23:3b:50:4c:05:77:dd:5e:89:85:df:66:7f: c6:9f:78:22:d0:dc:2a:7c:f0:1f:97:7f:8d:d3:16: 3f:2f:b3:a7:45:e6:e9:39:c2:6b:77:04:cb:58:b6: 79:08:b4:4d:cf:d8:03:ae:b6:12:e9:25:3f:73:32: 06:e6:de:03:01:75:40:6f:08:6f:7f:96:52:17:1c: d8:73:19:29:22:31:85:56:29:c2:66:0c:f9:b2:f6: 53:19:40:02:05:46:eb:8c:b8:a1:e9:5c:12:9d:11: 16:33:d3:83:66:00:4e:5d:fa:ad:d9:c5:a0:3f:c1: 05:3e:8a:a4:56:33:2f:e1:3c:0d:1f:bb:42:28:35: dd:e2:f9:d7:71:bb:88:95:bf:14:6b:33:7f:55:79: a9:30:78:d4:92:fe:aa:20:b5:36:49:d4:75:78:fb: c6:6b:82:e6:fe:45:cd:82:56:46:d0:92:9c:e9:a9: 55:b6:15:f6:dc:1e:a8:c4:be:b8:bb:7b:86:6b:72: bf:24:c1:ca:36:fa:3b:48:83:20:87:af:27:68:33: e6:1a:cf:ae:4e:9f:c1:a1:89:5e:3a:ed:b2:d9:ff: 7b:06:7f:62:e4:74:e2:de:1e:a8:06:98:f5:5a:3f: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:C5:A0:8D:C4:67:F6:C0:19:47:0B:86:7A:28:9A:00:87:B3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a42f422-3e04-33c5-945b-32f672815515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:69:b5:33:c2:60:67:09:85:a1:8a:5d:86:51:11:67:71:11: 81:60:da:10:c6:e4:14:02:a9:89:c8:08:53:43:ef:e8:d2:d0: cc:d5:ad:df:e8:23:97:1c:c2:b9:71:a9:6b:79:b3:2f:04:09: 9d:60:be:d1:aa:51:3e:fa:0a:ae:4d:b2:af:61:f8:30:38:45: d1:51:fe:cd:35:d0:ae:95:90:06:0d:97:79:56:d6:53:29:46: d7:7b:35:72:da:03:3f:1c:0d:a0:80:37:0a:82:25:c8:0e:a0: 91:e8:45:30:79:ed:f3:3d:6a:76:13:64:f0:ef:53:3e:2c:79: d1:a7:2e:89:fa:53:c6:24:0e:b0:67:b3:5e:0d:19:fe:06:41: d0:01:f9:59:da:23:db:12:7d:68:ff:e2:7c:eb:7c:67:f6:42: b5:63:a6:df:e4:f0:e9:d7:51:fe:f5:5a:88:d9:d1:34:27:a9: 8b:c5:dd:8e:4a:07:c0:44:b7:64:a4:c0:eb:74:87:c1:ab:3c: 1a:b7:24:be:ed:a6:5c:f2:3c:33:06:85:e4:4d:f0:53:1c:ca: c0:79:14:36:33:f5:44:18:4c:8e:d4:b8:2f:69:15:83:97:2d: f3:a5:25:8f:a7:27:78:f6:28:eb:b8:34:21:c1:86:bb:b6:b5: 0c:a4:46:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI8FqQGim1w+BptwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMzAxMzAxMVoXDTI1MTIyMjAyMzAxMVowLzEtMCsGA1UEAxMk OWE0YWQ2NzItMDU2My00MTY0LTk2ZTQtNmU4Mjk2YTIyMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17zFzUzmA4IddS95ICG1PiM7UEwFd91eiYXf Zn/Gn3gi0NwqfPAfl3+N0xY/L7OnRebpOcJrdwTLWLZ5CLRNz9gDrrYS6SU/czIG 5t4DAXVAbwhvf5ZSFxzYcxkpIjGFVinCZgz5svZTGUACBUbrjLih6VwSnREWM9OD ZgBOXfqt2cWgP8EFPoqkVjMv4TwNH7tCKDXd4vnXcbuIlb8UazN/VXmpMHjUkv6q ILU2SdR1ePvGa4Lm/kXNglZG0JKc6alVthX23B6oxL64u3uGa3K/JMHKNvo7SIMg h68naDPmGs+uTp/BoYleOu2y2f97Bn9i5HTi3h6oBpj1Wj+4swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJs5xaCNxGf2wBlHC4Z6KJoAh7MUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGE0MmY0MjItM2UwNC0z M2M1LTk0NWItMzJmNjcyODE1NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMBptTPCYGcJhaGKXYZREWdxEYFg2hDG5BQCqYnICFND7+jS0MzV rd/oI5ccwrlxqWt5sy8ECZ1gvtGqUT76Cq5Nsq9h+DA4RdFR/s010K6VkAYNl3lW 1lMpRtd7NXLaAz8cDaCANwqCJcgOoJHoRTB57fM9anYTZPDvUz4sedGnLon6U8Yk DrBns14NGf4GQdAB+VnaI9sSfWj/4nzrfGf2QrVjpt/k8OnXUf71WojZ0TQnqYvF 3Y5KB8BEt2SkwOt0h8GrPBq3JL7tplzyPDMGheRN8FMcysB5FDYz9UQYTI7UuC9p FYOXLfOlJY+nJ3j2KOu4NCHBhru2tQykRu4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:17 2025 by rpki-client