$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa File: 4806d9a4-dceb-3143-9904-9beadf5a65b4.roa (raw, json) Hash identifier: f788AT3rGevoXxQmE9R+53baG52Ae3XIuahVonfxDPw= Subject key identifier: 24:1F:0B:A5:2B:98:08:42:64:3E:56:AF:4A:0B:90:36:6A:D5:D1:AF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B6202139A4591D71501CB2710 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 46432 IP address blocks: 2001:470:371::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:13:9a:45:91:d7:15:01:cb:27:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4346bf71-ad46-44b6-a629-22d741c08657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:a7:35:26:83:3d:77:18:1a:8c:37:6a:5f: ee:2f:c4:0c:42:5a:20:a4:c9:ea:19:45:02:90:6b: 76:48:70:12:ba:e3:74:e4:9e:88:d6:8e:8c:c3:92: 23:a0:19:c9:09:fe:36:59:13:7b:59:bc:62:15:4e: 24:af:c8:7e:fe:c7:1c:d5:8f:d3:e7:b3:dc:a4:eb: 6d:c5:64:2f:61:e4:6c:80:09:6d:0b:47:9d:a4:61: 7e:ed:4c:61:51:5f:98:04:ae:30:55:f8:1b:ae:5e: 94:49:81:af:d3:80:38:f4:ad:ff:8a:26:cf:2c:72: d1:57:e5:31:0b:5f:eb:ea:72:85:32:d5:65:b3:65: 12:4f:72:28:3c:82:61:d5:31:79:bb:ba:e9:29:a9: 7c:3e:a0:bb:5d:f6:79:2b:8b:99:60:0a:17:94:2c: 61:94:c2:4c:2a:cf:04:80:9b:1c:e5:cb:f8:64:17: 9b:56:e0:91:92:5a:0c:30:5e:65:76:2f:bb:07:49: d2:e5:ab:56:cd:43:99:51:33:c0:66:4c:aa:1e:a6: 83:e4:5e:f6:36:ee:ef:bb:c8:64:d5:7e:d8:1e:fd: 4d:ba:e3:21:78:89:b3:ee:68:80:b5:c3:96:3c:c9: 03:86:98:03:cf:00:16:be:71:4e:86:88:f5:54:e8: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:0B:A5:2B:98:08:42:64:3E:56:AF:4A:0B:90:36:6A:D5:D1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4806d9a4-dceb-3143-9904-9beadf5a65b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:371::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a0:e9:d8:0d:c0:ab:da:4c:e0:f9:1f:52:54:f3:1e:66:7e: 46:ce:a5:38:8c:09:e1:db:a1:1f:64:f2:7b:24:c9:6f:e2:a8: 63:3f:e9:d4:08:55:58:ea:40:21:f2:e7:5b:14:de:28:d6:ee: 1a:49:bf:f0:03:3c:fc:da:a6:d7:bd:48:26:00:ad:57:e1:65: 00:d9:c0:c6:1f:33:48:ac:08:3e:7d:e5:e3:c5:d4:be:03:cf: e3:80:bd:a0:af:5f:a8:d0:80:6f:41:c2:93:06:71:0f:ed:eb: 56:63:d5:be:04:38:97:59:64:62:0f:f9:4e:e3:fb:ce:a8:7a: 4b:63:93:de:28:25:68:97:02:eb:08:a3:7a:9a:97:54:38:0c: 99:19:78:ab:09:22:8d:ed:71:74:17:08:f3:44:d0:26:65:b9: eb:e4:5a:d7:a6:a9:a8:47:a0:01:1e:32:8e:95:2a:4a:d8:85: 37:58:55:13:44:14:7f:42:37:01:8b:00:4d:d4:62:c9:b5:a4: 88:9b:64:8c:de:f2:f0:f9:a9:07:c3:f9:8d:4f:bd:ca:df:be: 11:64:0c:83:1e:6e:99:aa:42:b1:f1:07:db:94:c1:1f:5a:b7: 20:a5:e5:04:45:04:62:4d:54:df:7c:64:c0:bd:be:4f:1c:75: 55:38:05:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAhOaRZHXFQHLJxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDM0NmJmNzEtYWQ0Ni00NGI2LWE2MjktMjJkNzQxYzA4NjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ynNSaDPXcYGow3al/uL8QMQlogpMnqGUUC kGt2SHASuuN05J6I1o6Mw5IjoBnJCf42WRN7WbxiFU4kr8h+/scc1Y/T57PcpOtt xWQvYeRsgAltC0edpGF+7UxhUV+YBK4wVfgbrl6USYGv04A49K3/iibPLHLRV+Ux C1/r6nKFMtVls2UST3IoPIJh1TF5u7rpKal8PqC7XfZ5K4uZYAoXlCxhlMJMKs8E gJsc5cv4ZBebVuCRkloMMF5ldi+7B0nS5atWzUOZUTPAZkyqHqaD5F72Nu7vu8hk 1X7YHv1NuuMheImz7miAtcOWPMkDhpgDzwAWvnFOhoj1VOgtPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQfC6UrmAhCZD5Wr0oLkDZq1dGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDgwNmQ5YTQtZGNlYi0z MTQzLTk5MDQtOWJlYWRmNWE2NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIug6dgNwKvaTOD5H1JU8x5mfkbOpTiMCeHboR9k8nskyW/iqGM/ 6dQIVVjqQCHy51sU3ijW7hpJv/ADPPzapte9SCYArVfhZQDZwMYfM0isCD595ePF 1L4Dz+OAvaCvX6jQgG9BwpMGcQ/t61Zj1b4EOJdZZGIP+U7j+86oektjk94oJWiX AusIo3qal1Q4DJkZeKsJIo3tcXQXCPNE0CZluevkWtemqahHoAEeMo6VKkrYhTdY VRNEFH9CNwGLAE3UYsm1pIibZIze8vD5qQfD+Y1PvcrfvhFkDIMebpmqQrHxB9uU wR9atyCl5QRFBGJNVN98ZMC9vk8cdVU4BQc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:21 2025 by rpki-client