$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa File: 21ea31d9-b9be-380d-b1cf-59bfae553d93.roa (raw, json) Hash identifier: /pk5vlXCCg+5ApLnZBEd/X0oWtjvjEe+do4+wYoem64= Subject key identifier: 4C:D1:D3:BC:16:A0:B7:8E:AA:4B:BD:91:25:51:A9:8E:A6:17:74:FB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B5141EEBF3D705E7419721DA5 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 55655 IP address blocks: 2001:470:3c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ee:bf:3d:70:5e:74:19:72:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=1436aeb0-50ee-4b10-93a8-a9feedd52809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:d7:cd:98:9f:af:ba:d7:aa:59:a6:f2:a0: 22:11:a8:51:e6:cb:d9:ab:b1:d3:5f:4d:18:97:ef: 37:72:09:be:45:5d:39:c4:17:b1:88:c6:f2:6a:92: f3:8f:0e:eb:39:a4:0c:77:28:9a:02:23:6f:b5:69: 38:bf:cf:8e:86:8a:eb:18:1f:fa:45:9a:3f:e0:85: 2e:ad:a1:7f:38:e1:bc:16:b3:cd:37:21:20:b9:98: c8:cf:cb:b8:ba:61:40:25:52:4b:25:37:4c:2e:63: f3:2f:40:04:b2:7e:35:a9:58:e5:01:67:cc:58:bc: 01:b5:c3:96:2c:7b:8c:06:f2:54:30:81:b7:8d:e2: 0e:f3:95:bc:7c:98:f1:fe:14:dc:0d:66:e7:42:5f: cc:8e:fc:59:e9:cb:26:8b:cc:cb:1f:d5:b4:68:4a: af:a3:31:6a:63:3b:d8:b6:0d:8c:77:89:63:97:b8: 5d:a1:ad:24:20:26:64:05:86:61:3b:ff:a0:53:2a: 9f:e6:fe:63:c0:0e:47:c6:3c:8b:b0:05:47:4f:39: 92:20:0e:8b:f5:fb:c0:cc:73:50:94:27:62:7e:d4: c2:42:aa:75:3d:f0:51:8b:1e:b8:73:6d:a4:88:25: 18:f8:a6:a1:d8:9e:b2:ef:28:37:c4:2f:ab:e3:d1: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D1:D3:BC:16:A0:B7:8E:AA:4B:BD:91:25:51:A9:8E:A6:17:74:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:25:61:00:4e:d4:34:34:02:08:9e:82:46:f8:8c:3d:46:f9: 5b:d3:0d:9e:56:0d:b0:91:64:b0:db:c0:e5:46:6d:b0:a1:da: 1f:60:65:20:88:71:2c:e6:70:ef:8e:3a:a4:b9:71:12:fe:a6: 2c:6c:e8:0a:81:d2:df:1b:be:11:c2:b7:16:80:0d:af:44:0e: 47:6f:cd:91:22:35:c4:40:14:21:20:70:65:b1:2e:ab:71:36: 74:7b:31:df:b0:0d:fa:1b:78:f6:37:38:c1:6c:f4:f0:bf:f0: a0:ae:3a:04:ff:19:fa:2a:c5:09:fe:75:b1:2d:9f:41:39:f8: 2c:3a:d5:e5:75:ef:00:fc:f4:d9:a0:d3:35:56:b4:5d:ce:30: d5:09:4e:91:45:fb:a0:a9:1f:f9:e6:62:ff:64:92:f2:24:85: cf:c8:8b:67:bf:fe:39:d5:1c:b3:a3:b2:99:ab:35:88:77:bd: 4f:bc:69:88:4c:0a:c8:e4:1f:9c:7a:b5:93:ab:78:46:44:7f: 24:44:f5:52:d5:27:a3:03:15:e8:16:c8:52:df:9a:33:7a:a7: 5b:f1:da:f9:cb:b9:1d:d0:78:e9:ec:fe:21:e3:ad:86:c5:9a: 96:ec:ff:d4:e2:67:d1:43:bf:38:22:8e:0b:7a:a3:69:e5:ce: 8d:ad:31:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQe6/PXBedBlyHaUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MTQzNmFlYjAtNTBlZS00YjEwLTkzYTgtYTlmZWVkZDUyODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKTXzZifr7rXqlmm8qAiEahR5svZq7HTX00Y l+83cgm+RV05xBexiMbyapLzjw7rOaQMdyiaAiNvtWk4v8+OhorrGB/6RZo/4IUu raF/OOG8FrPNNyEguZjIz8u4umFAJVJLJTdMLmPzL0AEsn41qVjlAWfMWLwBtcOW LHuMBvJUMIG3jeIO85W8fJjx/hTcDWbnQl/MjvxZ6csmi8zLH9W0aEqvozFqYzvY tg2Md4ljl7hdoa0kICZkBYZhO/+gUyqf5v5jwA5HxjyLsAVHTzmSIA6L9fvAzHNQ lCdiftTCQqp1PfBRix64c22kiCUY+Kah2J6y7yg3xC+r49FmLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzR07wWoLeOqku9kSVRqY6mF3T7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFlYTMxZDktYjliZS0z ODBkLWIxY2YtNTliZmFlNTUzZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ8lYQBO1DQ0Agiegkb4jD1G+VvTDZ5WDbCRZLDbwOVGbbCh2h9g ZSCIcSzmcO+OOqS5cRL+pixs6AqB0t8bvhHCtxaADa9EDkdvzZEiNcRAFCEgcGWx LqtxNnR7Md+wDfobePY3OMFs9PC/8KCuOgT/GfoqxQn+dbEtn0E5+Cw61eV17wD8 9Nmg0zVWtF3OMNUJTpFF+6CpH/nmYv9kkvIkhc/Ii2e//jnVHLOjspmrNYh3vU+8 aYhMCsjkH5x6tZOreEZEfyRE9VLVJ6MDFegWyFLfmjN6p1vx2vnLuR3QeOns/iHj rYbFmpbs/9TiZ9FDvzgijgt6o2nlzo2tMWs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:35 2025 by rpki-client