$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2733169e-aa93-3a63-a8d2-d0b904ad033c.roa File: 2733169e-aa93-3a63-a8d2-d0b904ad033c.roa (raw, json) Hash identifier: p+ekt9ail7yCWTNXOmHXMT3F0LvgmzfRE9yIlRgfqY8= Subject key identifier: A2:1B:28:68:41:34:7E:F3:F7:39:18:EF:D9:04:42:B3:06:A6:D1:F3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B48E21116E9FD950BC36B5BC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2733169e-aa93-3a63-a8d2-d0b904ad033c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 38235 IP address blocks: 2001:470:3fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:16:e9:fd:95:0b:c3:6b:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8a41ca87-e7e3-4d9b-bee0-610734d173f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:66:8d:38:af:92:7f:1d:c4:0c:fa:81:57: ca:ef:b4:99:3c:4c:70:60:b5:23:31:db:01:21:dd: f3:84:dd:41:99:e0:b6:fc:30:e7:02:f8:1a:a9:de: e0:6d:14:4f:de:e2:e3:0e:c2:90:53:b4:72:8e:95: af:c8:b8:30:1b:24:8e:d2:ba:b6:ea:43:e7:3e:19: eb:78:7e:b9:4f:59:33:35:04:5c:e2:09:15:83:64: 2a:f1:8a:16:1c:ce:7a:5e:6b:9b:1d:6e:a2:d7:dd: b7:26:12:6d:cb:ff:51:5b:fa:c0:fb:60:6e:c8:72: b3:88:f5:a1:40:89:bf:99:a8:99:a1:e7:d6:19:87: 7f:17:cd:23:a7:de:dd:3b:ab:ba:09:8b:ad:15:28: b8:bf:75:47:7e:7f:ab:9d:ea:6a:a2:1f:62:07:fb: 1d:10:97:fa:2c:fb:48:89:20:04:05:d8:a4:7c:fe: 4e:8a:ad:af:f4:ac:54:f7:95:91:09:2f:7f:75:2c: 78:1a:62:50:3b:1e:c6:ca:e6:72:bd:aa:b1:bf:00: 45:0d:35:f5:5d:b0:c3:7d:ca:3b:62:34:a3:d2:68: 7e:3a:e7:83:bb:49:c4:f7:d8:b5:6f:d2:db:46:a9: 98:f8:6e:b8:ff:52:0d:ad:99:d3:c9:dc:41:cd:19: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:28:68:41:34:7E:F3:F7:39:18:EF:D9:04:42:B3:06:A6:D1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2733169e-aa93-3a63-a8d2-d0b904ad033c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:78:36:89:8d:8d:f1:72:fd:90:98:3d:40:75:e4:83:6f:82: 83:09:44:05:af:6e:44:e3:e3:86:e0:ce:b0:38:b9:52:d2:b2: 7d:6c:5c:9c:49:fb:fc:e1:9e:48:00:02:cd:9a:e6:96:a0:dd: a1:6e:bd:5b:dc:e7:9b:ca:ca:4b:12:54:2e:c8:a8:f6:b9:bc: 48:56:a7:03:ea:50:e1:94:63:85:a6:4c:1d:9c:33:25:87:99: 50:cb:33:6c:5d:e8:3e:59:6a:0f:de:80:b2:32:74:ff:f5:f0: 87:20:16:75:b1:7c:9b:e8:28:55:d1:f7:a7:a5:e4:3d:5f:10: a2:53:cf:f5:e4:ce:f8:6a:dd:0e:97:c4:15:ad:be:b4:2d:b8: 40:50:f8:ad:2c:bf:a4:90:17:2c:22:45:47:99:da:ea:10:d8: 9c:cc:6b:aa:a2:8b:90:ab:80:64:86:1d:2e:1e:1c:e1:57:8b: f4:67:e2:0d:3e:1c:88:ee:32:2c:ae:52:68:c4:c3:27:2d:da: 39:c8:48:6e:d0:28:7a:c3:22:19:c5:26:bd:8d:70:f0:fb:a8: a8:78:41:02:a9:3a:80:17:fd:5a:9e:78:b9:42:96:65:56:f5: 25:1f:d2:30:39:7c:fa:a6:75:ba:ee:69:5c:56:c9:b0:5d:41: f3:ad:a4:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hEW6f2VC8NrW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGE0MWNhODctZTdlMy00ZDliLWJlZTAtNjEwNzM0ZDE3M2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmFmjTivkn8dxAz6gVfK77SZPExwYLUjMdsB Id3zhN1BmeC2/DDnAvgaqd7gbRRP3uLjDsKQU7RyjpWvyLgwGySO0rq26kPnPhnr eH65T1kzNQRc4gkVg2Qq8YoWHM56XmubHW6i1923JhJty/9RW/rA+2BuyHKziPWh QIm/maiZoefWGYd/F80jp97dO6u6CYutFSi4v3VHfn+rnepqoh9iB/sdEJf6LPtI iSAEBdikfP5Oiq2v9KxU95WRCS9/dSx4GmJQOx7GyuZyvaqxvwBFDTX1XbDDfco7 YjSj0mh+OueDu0nE99i1b9LbRqmY+G64/1INrZnTydxBzRmLSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIbKGhBNH7z9zkY79kEQrMGptHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjczMzE2OWUtYWE5My0z YTYzLWE4ZDItZDBiOTA0YWQwMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL14NomNjfFy/ZCYPUB15INvgoMJRAWvbkTj44bgzrA4uVLSsn1s XJxJ+/zhnkgAAs2a5pag3aFuvVvc55vKyksSVC7IqPa5vEhWpwPqUOGUY4WmTB2c MyWHmVDLM2xd6D5Zag/egLIydP/18IcgFnWxfJvoKFXR96el5D1fEKJTz/Xkzvhq 3Q6XxBWtvrQtuEBQ+K0sv6SQFywiRUeZ2uoQ2JzMa6qii5CrgGSGHS4eHOFXi/Rn 4g0+HIjuMiyuUmjEwyct2jnISG7QKHrDIhnFJr2NcPD7qKh4QQKpOoAX/VqeeLlC lmVW9SUf0jA5fPqmdbruaVxWybBdQfOtpNo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:02 2025 by rpki-client