$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa File: 2599686e-5956-3d32-94e2-2e0c93563c44.roa (raw, json) Hash identifier: FqkVVKRV1PonFVsuiSN79ZM+EA1c9yG6qgGxEv0NgTA= Subject key identifier: DD:14:E4:D1:8E:B5:6C:54:24:2C:AF:2C:FA:F2:C2:DA:7E:83:7E:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B196C064F024734E534C47C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 3245 IP address blocks: 2001:470:431::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:06:4f:02:47:34:e5:34:c4:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=41c4e115-e4c9-4fec-aebd-ea2cc4213bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:7d:79:95:07:c2:f6:13:c5:9e:5c:a9:48: f8:e4:a7:cc:75:11:a4:be:44:ce:f1:49:99:73:96: 93:b2:db:7a:95:c3:3c:9b:c0:39:0a:48:a7:b4:10: c6:94:c0:ce:5c:02:19:c8:91:40:cc:90:a8:b4:ce: 89:7c:ef:83:85:95:88:d8:1f:08:67:40:5c:de:32: 99:24:36:9b:41:4f:ec:e6:35:66:7b:c6:2f:d6:dc: 14:30:ca:1c:36:12:e5:ec:ea:52:54:cf:c7:2c:57: 4e:6e:70:9e:2d:21:45:a8:19:06:70:c7:ee:be:e6: 8f:f5:09:e0:5b:9a:0a:55:33:3f:36:f8:c9:08:96: df:aa:ae:d2:34:c6:1d:03:00:91:dc:15:56:76:0a: 59:db:26:c0:69:fd:13:27:2b:87:ea:7f:80:83:73: 4f:e6:35:f5:d3:cd:87:85:bf:97:7a:85:09:af:3d: 5c:a5:6e:43:6f:28:3c:a4:df:bb:d2:a5:61:54:a3: 76:f5:e5:7c:72:b4:86:20:52:f6:49:ff:b9:56:e4: a0:3d:82:aa:4e:4c:87:6d:b4:8d:41:a5:29:e2:56: e5:aa:57:c9:eb:c8:4d:b4:f6:d9:cb:c1:0b:7d:cb: a7:72:d7:9e:74:2c:43:e6:38:b3:28:bf:65:35:0c: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:E4:D1:8E:B5:6C:54:24:2C:AF:2C:FA:F2:C2:DA:7E:83:7E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:431::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:08:ae:82:f0:25:4a:26:8d:88:1d:a0:3c:18:e3:bc:fa:51: 88:38:07:64:49:8c:2e:c1:5c:a9:cc:76:45:ad:27:c7:28:cf: f1:b0:23:e8:90:65:6d:dc:17:c7:e8:f0:22:2d:cc:dd:75:0d: 60:02:3b:91:d4:d9:5f:8a:d9:c8:ee:56:d5:8e:60:a5:c0:f2: 85:85:95:c0:f9:57:c2:cc:43:1d:09:a3:7f:97:f0:28:71:cd: 5e:1e:1d:3b:ef:d8:d8:91:33:e6:f9:eb:7e:1d:d0:ee:47:72: 91:b6:57:ef:8c:55:ca:07:94:72:76:50:0e:be:b6:0c:17:dd: b0:8e:8e:76:99:3a:1e:27:1e:cf:f1:16:53:e3:0d:8c:19:d9: 54:a9:75:c7:dd:f2:c1:2d:99:bf:45:df:5a:56:18:65:cc:4d: 82:96:d8:72:5b:6c:83:a0:2e:16:ef:6f:ea:3a:c4:4d:40:11: c9:3d:0c:5d:11:91:4a:2a:4a:5c:d5:a9:76:80:27:e4:50:fb: 17:40:67:89:ba:4a:96:27:51:4c:f3:4c:91:a7:eb:90:3d:ab: 3b:19:9b:b8:ac:4c:31:0a:ad:e3:dc:a9:43:46:5f:d3:00:46: c3:4e:4f:bf:fa:4d:7f:d6:67:b1:cf:ce:88:38:ec:c8:f5:50: a8:89:4d:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsZbAZPAkc05TTEfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NDFjNGUxMTUtZTRjOS00ZmVjLWFlYmQtZWEyY2M0MjEzYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkt9eZUHwvYTxZ5cqUj45KfMdRGkvkTO8UmZ c5aTstt6lcM8m8A5CkintBDGlMDOXAIZyJFAzJCotM6JfO+DhZWI2B8IZ0Bc3jKZ JDabQU/s5jVme8Yv1twUMMocNhLl7OpSVM/HLFdObnCeLSFFqBkGcMfuvuaP9Qng W5oKVTM/NvjJCJbfqq7SNMYdAwCR3BVWdgpZ2ybAaf0TJyuH6n+Ag3NP5jX1082H hb+XeoUJrz1cpW5Dbyg8pN+70qVhVKN29eV8crSGIFL2Sf+5VuSgPYKqTkyHbbSN QaUp4lblqlfJ68hNtPbZy8ELfcuncteedCxD5jizKL9lNQwwCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0U5NGOtWxUJCyvLPrywtp+g34qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjU5OTY4NmUtNTk1Ni0z ZDMyLTk0ZTItMmUwYzkzNTYzYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUIroLwJUomjYgdoDwY47z6UYg4B2RJjC7BXKnMdkWtJ8coz/Gw I+iQZW3cF8fo8CItzN11DWACO5HU2V+K2cjuVtWOYKXA8oWFlcD5V8LMQx0Jo3+X 8ChxzV4eHTvv2NiRM+b5634d0O5HcpG2V++MVcoHlHJ2UA6+tgwX3bCOjnaZOh4n Hs/xFlPjDYwZ2VSpdcfd8sEtmb9F31pWGGXMTYKW2HJbbIOgLhbvb+o6xE1AEck9 DF0RkUoqSlzVqXaAJ+RQ+xdAZ4m6SpYnUUzzTJGn65A9qzsZm7isTDEKrePcqUNG X9MARsNOT7/6TX/WZ7HPzog47Mj1UKiJTZc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:51 2025 by rpki-client