$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa File: 33289b88-fa83-3536-a945-62a5541157ad.roa (raw, json) Hash identifier: 2hSL42+JzMo/LGb4fMMzhNxEfp3i0kpeWxnuYitB0dc= Subject key identifier: EB:E4:58:8C:29:C9:02:E6:44:E7:2A:D9:D2:93:76:34:B8:E2:EC:F2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B40819B0A3DE5D05F115D5520 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 22168 IP address blocks: 2001:470:3f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:9b:0a:3d:e5:d0:5f:11:5d:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=c055780f-d902-48bb-ad7f-fc04183e734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:9f:1b:51:ca:fb:ca:02:e7:88:87:fa:5f: aa:e2:57:7a:68:5d:38:26:c2:6c:f8:b3:98:2f:cc: 9f:61:af:f2:a8:44:20:fa:d8:6d:9e:2b:be:d2:39: 57:99:8b:06:5b:2a:0c:b1:83:ff:61:ba:75:9c:7b: 3d:fd:51:b5:a1:ca:e6:d7:04:16:9b:86:cb:6a:ec: ae:53:43:97:fe:dd:f4:c5:e1:ed:a4:9a:fe:6c:a7: 3e:91:8b:c0:75:c7:53:63:56:7d:95:34:1b:7d:42: e7:a8:a9:9f:71:b1:02:0d:60:54:9d:6b:59:78:d0: eb:03:67:f2:d9:87:fd:de:f9:42:8d:19:13:d7:77: cc:c7:82:6f:da:dc:d5:26:34:7c:f3:48:81:15:18: d3:97:0d:ff:43:bf:cb:ef:a9:ec:e0:29:46:92:d3: fd:62:69:a8:76:8d:0a:0d:ac:94:51:77:d8:67:f6: 85:2a:e5:91:a1:21:5c:f9:c8:f1:93:13:7b:e3:24: 93:ce:48:2f:9d:18:42:fc:ae:a6:df:7d:bd:05:ea: 90:63:fa:1d:5c:20:8d:15:2d:6d:c4:e2:91:8c:e9: eb:78:56:db:bf:d0:27:ef:dd:fe:b0:e3:2b:48:d1: 79:68:a8:ed:27:94:a4:e6:92:2e:30:aa:26:f4:7e: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E4:58:8C:29:C9:02:E6:44:E7:2A:D9:D2:93:76:34:B8:E2:EC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33289b88-fa83-3536-a945-62a5541157ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:68:7c:85:bb:1b:26:c5:98:d0:e8:99:c1:c8:4e:7b:80:a2: 2e:b2:3a:7c:cd:d6:e1:76:3c:16:b9:5c:d9:59:0f:31:49:65: 09:0b:2f:dc:51:d1:b1:61:9a:aa:6a:ea:ac:34:c4:ce:93:ab: 3f:97:12:4b:3e:5f:37:c7:bb:db:66:af:71:c4:26:39:a5:bf: db:a9:80:9f:c8:f6:51:83:5f:46:b4:15:04:9e:19:4c:81:2e: d5:a9:8a:1e:03:99:53:ba:ac:db:5f:77:8e:04:e3:7b:e1:0d: 0b:a7:5d:1f:b1:72:3f:d6:1e:d6:0e:27:53:96:83:87:eb:58: aa:b6:d0:0b:3b:a1:e5:53:5b:9f:38:b1:44:fc:93:8e:5e:34: 38:3d:f7:d4:83:ff:08:9e:2d:0a:a0:88:f2:6c:e3:48:4d:49: c8:8e:03:fc:eb:1b:d1:5e:65:0a:d8:a8:89:e0:0c:e4:60:f2: a9:b8:d1:b3:40:47:66:4b:a9:bb:81:86:41:51:7d:7b:b7:81: fd:1f:a9:78:e6:6e:0a:bb:6f:03:4e:3b:e5:78:7c:3e:d3:77: a9:83:d1:72:fa:18:46:06:91:3d:aa:8b:f2:9a:7f:d3:3c:0c: 00:a5:f5:bc:d7:3f:90:40:37:16:82:75:78:64:2a:cf:21:0e: a6:a4:eb:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgZsKPeXQXxFdVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YzA1NTc4MGYtZDkwMi00OGJiLWFkN2YtZmMwNDE4M2U3MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg26fG1HK+8oC54iH+l+q4ld6aF04JsJs+LOY L8yfYa/yqEQg+thtniu+0jlXmYsGWyoMsYP/Ybp1nHs9/VG1ocrm1wQWm4bLauyu U0OX/t30xeHtpJr+bKc+kYvAdcdTY1Z9lTQbfULnqKmfcbECDWBUnWtZeNDrA2fy 2Yf93vlCjRkT13fMx4Jv2tzVJjR880iBFRjTlw3/Q7/L76ns4ClGktP9Ymmodo0K DayUUXfYZ/aFKuWRoSFc+cjxkxN74ySTzkgvnRhC/K6m3329BeqQY/odXCCNFS1t xOKRjOnreFbbv9An793+sOMrSNF5aKjtJ5Sk5pIuMKom9H6yQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOvkWIwpyQLmROcq2dKTdjS44uzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzMyODliODgtZmE4My0z NTM2LWE5NDUtNjJhNTU0MTE1N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9ofIW7GybFmNDomcHITnuAoi6yOnzN1uF2PBa5XNlZDzFJZQkL L9xR0bFhmqpq6qw0xM6Tqz+XEks+XzfHu9tmr3HEJjmlv9upgJ/I9lGDX0a0FQSe GUyBLtWpih4DmVO6rNtfd44E43vhDQunXR+xcj/WHtYOJ1OWg4frWKq20As7oeVT W584sUT8k45eNDg999SD/wieLQqgiPJs40hNSciOA/zrG9FeZQrYqIngDORg8qm4 0bNAR2ZLqbuBhkFRfXu3gf0fqXjmbgq7bwNOO+V4fD7Td6mD0XL6GEYGkT2qi/Ka f9M8DACl9bzXP5BANxaCdXhkKs8hDqak65M= -----END CERTIFICATE-----Generated at Mon Oct 20 05:35:36 2025 by rpki-client