$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30f8a173-9f4b-3695-a670-418c50ebb965.roa File: 30f8a173-9f4b-3695-a670-418c50ebb965.roa (raw, json) Hash identifier: c4AJw20WVvT2aOHbPsYQUs8ss1qDCpWIXbJZX3UJnCs= Subject key identifier: 68:24:2F:95:95:00:87:90:45:26:AD:A2:1A:9B:71:98:C9:EA:B9:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7005F4865EDE12DAD719CC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30f8a173-9f4b-3695-a670-418c50ebb965.roa Signing time: Tue 07 Oct 2025 01:30:14 +0000 ROA not before: Tue 07 Oct 2025 01:30:14 +0000 ROA not after: Mon 05 Jan 2026 02:30:14 +0000 asID: 393474 IP address blocks: 2001:470:31a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:05:f4:86:5e:de:12:da:d7:19:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 01:30:14 2025 GMT Not After : Jan 5 02:30:14 2026 GMT Subject: CN=b6061ab2-5cf3-4e0f-9f70-cda15bd2af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:7f:24:2f:28:db:d8:24:e6:c4:39:4a:f1: cc:b6:3b:cb:9e:67:92:ca:e6:a6:cd:de:f0:8d:36: 66:af:a0:3d:31:7c:19:fd:2f:f5:95:8e:55:b9:c8: 59:d9:cc:fe:de:57:95:ea:64:9a:f5:c7:9c:52:aa: d1:98:c3:f0:1d:fc:68:c3:b9:46:17:af:88:0e:0b: 28:9a:cf:cb:0c:e9:4c:4a:d1:cb:28:9b:56:08:81: b2:35:f2:78:74:68:5e:93:5f:0e:f7:5b:8b:d0:78: fd:74:0e:56:f1:0e:39:dc:b8:a4:32:fa:5e:94:76: 64:b7:42:20:b6:7b:a3:e4:bd:32:6b:b0:a7:f1:4c: 33:21:d2:4e:c3:ca:72:a0:1b:d8:74:85:bd:fa:03: 1b:62:07:72:7a:54:5f:85:45:62:e7:3d:ae:9e:97: 40:e2:cd:32:66:35:dc:fb:91:e8:99:e1:b6:a6:ba: 64:70:72:2f:bf:94:3b:41:d2:ad:ca:d0:d5:4f:f5: 09:7f:51:30:23:51:0c:51:c6:50:69:63:23:38:0c: 3e:d2:99:ec:ca:ee:18:34:50:80:b7:99:69:85:63: b3:da:16:f8:16:8b:35:5b:8e:ef:01:9a:21:0c:37: 88:9d:8c:9c:4e:66:ce:d4:78:fe:b4:e5:d8:05:45: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:24:2F:95:95:00:87:90:45:26:AD:A2:1A:9B:71:98:C9:EA:B9:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30f8a173-9f4b-3695-a670-418c50ebb965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:c1:f4:c9:b0:c1:70:30:97:d6:8c:95:7e:3f:b8:58:97:f5: 86:3e:c0:a4:c1:e3:56:c4:24:00:f5:f8:6c:ab:5d:11:fd:fe: a2:0f:8c:59:31:87:b7:c9:ad:bf:75:f2:40:ad:90:00:89:e0: 3d:62:bd:06:16:73:21:fe:cd:fe:83:50:4e:f8:29:69:6b:a5: ef:e6:e9:15:2c:82:79:cc:6a:41:bb:eb:14:26:f5:d6:fb:07: 8e:2d:e4:c1:3d:8b:e0:82:be:82:6b:20:89:ab:63:05:5c:a6: 88:97:d4:54:fe:c2:d3:94:68:6b:d0:23:09:09:e0:ee:9d:cb: be:92:90:de:e8:15:f3:05:4c:be:13:19:f9:6c:b0:4f:e2:df: 6b:3f:f4:43:9a:17:80:8b:e4:d8:af:7f:81:e9:e6:2c:66:32: ea:b8:a8:96:30:77:cc:36:e8:01:b6:f1:0d:db:09:da:e4:47: 7a:4b:42:06:f3:04:8c:ee:5f:e8:40:49:a9:a0:ad:7a:5b:86: ac:f3:72:e6:d5:16:c1:55:97:8a:72:4e:ab:e0:76:7c:43:f6: a4:8a:3c:90:7f:6e:ff:46:d6:46:fd:37:ac:ba:68:97:74:19: 9a:d2:40:f2:fb:55:69:1e:3a:1d:b4:cf:b2:51:10:be:14:9e: 33:35:9a:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtwBfSGXt4S2tcZzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzAxMzAxNFoXDTI2MDEwNTAyMzAxNFowLzEtMCsGA1UEAxMk YjYwNjFhYjItNWNmMy00ZTBmLTlmNzAtY2RhMTViZDJhZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLl/JC8o29gk5sQ5SvHMtjvLnmeSyuamzd7w jTZmr6A9MXwZ/S/1lY5VuchZ2cz+3leV6mSa9cecUqrRmMPwHfxow7lGF6+IDgso ms/LDOlMStHLKJtWCIGyNfJ4dGhek18O91uL0Hj9dA5W8Q453LikMvpelHZkt0Ig tnuj5L0ya7Cn8UwzIdJOw8pyoBvYdIW9+gMbYgdyelRfhUVi5z2unpdA4s0yZjXc +5HomeG2prpkcHIvv5Q7QdKtytDVT/UJf1EwI1EMUcZQaWMjOAw+0pnsyu4YNFCA t5lphWOz2hb4Fos1W47vAZohDDeInYycTmbO1Hj+tOXYBUUqOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgkL5WVAIeQRSatohqbcZjJ6rmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzBmOGExNzMtOWY0Yi0z Njk1LWE2NzAtNDE4YzUwZWJiOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK3B9MmwwXAwl9aMlX4/uFiX9YY+wKTB41bEJAD1+GyrXRH9/qIP jFkxh7fJrb918kCtkACJ4D1ivQYWcyH+zf6DUE74KWlrpe/m6RUsgnnMakG76xQm 9db7B44t5ME9i+CCvoJrIImrYwVcpoiX1FT+wtOUaGvQIwkJ4O6dy76SkN7oFfMF TL4TGflssE/i32s/9EOaF4CL5Nivf4Hp5ixmMuq4qJYwd8w26AG28Q3bCdrkR3pL QgbzBIzuX+hASamgrXpbhqzzcubVFsFVl4pyTqvgdnxD9qSKPJB/bv9G1kb9N6y6 aJd0GZrSQPL7VWkeOh20z7JREL4UnjM1mnA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:46 2025 by rpki-client