$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa File: 3553375a-143d-3f50-8c5c-c42f0ee96511.roa (raw, json) Hash identifier: bFBH7uUpvAFH16ElLWStXU63rAM0FqtgxtdnY7T1jhE= Subject key identifier: 0A:36:CB:91:B0:B2:E0:4E:21:7D:C0:4C:61:3D:96:E1:10:4D:EF:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B4BAC67AE419528F6AB99CD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 135300 IP address blocks: 2001:470:230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:67:ae:41:95:28:f6:ab:99:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=dbbe4019-a6b9-4a39-9d0c-d38aef1b42db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:ff:9f:64:55:0d:d0:af:c4:13:20:c9:db: 53:7a:fb:05:13:05:cd:94:8f:22:cf:97:6a:28:26: 30:7d:f0:11:c6:7a:2b:d8:5f:2d:a5:fa:39:e6:b0: c7:92:a9:6f:7d:e8:8b:0f:71:43:ed:c9:79:5a:0c: 59:c2:d4:52:63:83:b8:52:e6:85:93:f8:17:35:fd: 72:8c:d5:b6:f4:b4:4e:87:ce:86:86:79:e3:96:07: ed:e2:9b:61:9e:46:b7:84:70:b1:46:4b:10:dc:ab: 13:9d:90:25:47:e9:94:22:13:78:b6:b6:bc:5e:93: f1:55:7b:13:5c:da:03:d6:45:5c:ee:ab:8d:ff:fa: bc:bf:58:d1:c2:5a:31:8e:c1:d1:24:08:0e:8e:fa: a4:87:8c:80:42:e9:a1:75:1a:77:d7:2a:aa:a3:04: e8:a6:51:ab:04:b9:38:a9:bb:e9:1b:a9:9f:44:34: d1:14:88:02:37:68:31:b4:55:44:12:61:05:fc:72: d2:19:19:68:98:c5:e0:ac:0f:60:4f:04:b9:05:8f: 65:20:5d:0b:46:c1:49:e8:56:d4:16:ac:ae:c7:a2: 01:ed:44:93:78:24:6a:40:fa:55:37:da:b6:7d:d2: 57:72:5a:fc:b7:60:20:42:13:ba:24:59:5f:d3:15: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:36:CB:91:B0:B2:E0:4E:21:7D:C0:4C:61:3D:96:E1:10:4D:EF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3553375a-143d-3f50-8c5c-c42f0ee96511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:230::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:04:1c:0d:4c:c8:e4:52:1d:94:99:1c:93:72:1c:a9:d2:25: 4c:e1:6f:10:12:11:79:cd:4c:63:46:a4:1d:24:9e:a1:1e:75: dd:f7:e6:ab:5d:48:00:d6:9c:ff:df:5e:bd:e0:a3:5b:59:4f: 72:d8:5a:b8:ef:b9:ce:0f:b6:60:b5:c1:e2:23:8f:1c:35:46: e5:08:b9:c7:e4:c8:81:c9:1b:59:a5:5c:10:44:cf:94:be:c6: af:73:64:82:21:c7:c9:32:7a:54:fe:88:54:16:2b:dc:1e:c2: 8c:ea:f5:95:e7:2d:1c:9c:13:5e:57:28:db:f4:1d:69:c6:d6: d0:e2:5d:06:33:8f:3b:ac:1e:04:a7:61:12:77:d1:98:b4:23: 12:d5:68:5c:59:ef:88:9e:47:a7:d3:eb:bf:b7:bc:ec:0c:b7: b3:4c:2f:8d:97:1c:df:ca:19:42:65:3a:66:d7:47:16:d5:3c: 37:33:07:d7:ae:c5:61:1a:f8:ac:75:93:3b:d2:19:06:09:14: 30:6f:76:10:bf:14:a2:46:cc:03:e4:df:f5:e3:8d:fc:c1:9d: d4:fe:0a:d4:6a:cc:6a:eb:36:ac:16:a1:cd:32:52:c0:17:d9: 74:86:03:20:69:6a:40:5d:41:fe:48:e7:7f:20:08:07:69:e8: 2d:9e:9e:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGeuQZUo9quZzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGJiZTQwMTktYTZiOS00YTM5LTlkMGMtZDM4YWVmMWI0MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/P/n2RVDdCvxBMgydtTevsFEwXNlI8iz5dq KCYwffARxnor2F8tpfo55rDHkqlvfeiLD3FD7cl5WgxZwtRSY4O4UuaFk/gXNf1y jNW29LROh86Ghnnjlgft4pthnka3hHCxRksQ3KsTnZAlR+mUIhN4tra8XpPxVXsT XNoD1kVc7quN//q8v1jRwloxjsHRJAgOjvqkh4yAQumhdRp31yqqowToplGrBLk4 qbvpG6mfRDTRFIgCN2gxtFVEEmEF/HLSGRlomMXgrA9gTwS5BY9lIF0LRsFJ6FbU Fqyux6IB7USTeCRqQPpVN9q2fdJXclr8t2AgQhO6JFlf0xUN9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAo2y5GwsuBOIX3ATGE9luEQTe8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzU1MzM3NWEtMTQzZC0z ZjUwLThjNWMtYzQyZjBlZTk2NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAEHA1MyORSHZSZHJNyHKnSJUzhbxASEXnNTGNGpB0knqEedd33 5qtdSADWnP/fXr3go1tZT3LYWrjvuc4PtmC1weIjjxw1RuUIucfkyIHJG1mlXBBE z5S+xq9zZIIhx8kyelT+iFQWK9wewozq9ZXnLRycE15XKNv0HWnG1tDiXQYzjzus HgSnYRJ30Zi0IxLVaFxZ74ieR6fT67+3vOwMt7NML42XHN/KGUJlOmbXRxbVPDcz B9euxWEa+Kx1kzvSGQYJFDBvdhC/FKJGzAPk3/XjjfzBndT+CtRqzGrrNqwWoc0y UsAX2XSGAyBpakBdQf5I538gCAdp6C2enhE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:30:12 2025 by rpki-client