$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa File: 55c20cc7-7931-3245-afa2-6d3c289c1610.roa (raw, json) Hash identifier: eg7wvqFMpLlxq6NhQaSp5gqrS7xfYAZ9itbbT8Ph6wM= Subject key identifier: D3:44:28:D7:71:08:61:B1:7F:7E:0E:0F:B6:85:50:C1:BC:7C:F1:35 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B690B394BA41B34C48D374680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa Signing time: Sat 04 Oct 2025 13:30:11 +0000 ROA not before: Sat 04 Oct 2025 13:30:11 +0000 ROA not after: Fri 02 Jan 2026 14:30:11 +0000 asID: 6698 IP address blocks: 2001:470:43a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:0b:39:4b:a4:1b:34:c4:8d:37:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 4 13:30:11 2025 GMT Not After : Jan 2 14:30:11 2026 GMT Subject: CN=3999b47a-184a-4647-b92c-ca766b6e14a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:cf:6a:1c:b3:ce:3c:6a:5c:75:99:bd:ca: 38:2c:b3:50:dc:70:19:af:8a:28:f9:ff:6f:7b:5f: 0b:1c:f4:f0:37:09:6f:32:1e:ad:aa:2d:d3:da:34: 6f:51:e8:79:d9:27:98:17:3c:16:5a:78:b4:b2:c0: a1:87:9f:c9:0f:f4:19:26:35:51:80:e8:63:b7:5c: 96:37:52:93:ef:f0:21:c8:d0:3f:d7:f8:f0:e7:88: 23:57:81:71:05:99:20:83:76:fb:28:48:d7:5c:60: 73:62:7a:a1:a9:93:06:6b:64:34:f8:91:59:eb:7f: d5:95:b3:d6:49:82:24:54:22:80:2a:8b:b5:e0:17: 8e:e1:33:51:00:eb:89:1c:35:30:38:5b:78:2c:a2: 7d:e9:a1:aa:9c:dd:05:0e:9c:9a:39:84:ad:01:94: f8:c6:a3:24:d3:d3:99:b7:a4:16:07:fd:d7:99:d5: 7e:25:33:3e:a5:e3:c5:ae:97:70:78:cd:4b:22:e8: 43:74:df:b7:fd:ab:21:13:74:88:0a:53:5e:ef:cf: 2e:76:be:10:ee:e3:84:33:bd:14:2e:c9:8b:92:2e: 0b:58:0d:42:19:0d:29:cb:c1:61:9a:8c:18:a0:e3: c4:c3:5d:02:8a:bd:55:c6:e5:26:d3:ac:9d:50:0d: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:44:28:D7:71:08:61:B1:7F:7E:0E:0F:B6:85:50:C1:BC:7C:F1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ae:eb:b4:2a:10:7e:b4:65:70:66:bb:2e:dd:43:3a:1c:3a: 3b:97:83:d5:cc:ce:c6:cd:55:32:0d:21:83:44:13:f2:f5:a1: 42:76:48:1a:1f:56:ad:4e:37:f8:01:f4:dc:a2:1a:bb:f3:3d: 1b:0b:f4:62:cb:43:38:95:69:24:eb:9c:cc:bc:84:6d:ee:fe: 7e:71:0d:48:46:db:93:da:e7:3d:16:8d:91:6c:09:f7:4d:d8: 98:19:2d:20:cf:4d:6f:20:3a:fd:b2:95:60:b0:e1:ba:83:ca: be:2c:ee:16:32:f6:4b:01:c2:8c:f1:1c:40:bf:f4:1c:84:fc: db:ce:43:d5:85:5c:bb:84:e0:1e:0a:56:d8:23:da:43:4d:d9: 97:fa:76:11:94:77:84:af:2a:ca:ae:b2:f2:82:80:fd:90:24: 17:02:52:58:32:e9:57:d5:00:b4:60:3f:bb:b3:62:29:b6:27: c3:c2:ab:8e:6f:c3:5b:00:1a:45:c5:a1:86:23:59:13:4a:68: fa:bb:f8:90:1a:8e:79:5f:f0:fa:99:d3:bc:40:4b:9d:12:ff: e9:ee:52:23:10:17:3b:52:49:66:6e:ef:6e:30:56:c7:2c:d0: 7e:7d:38:c2:41:e5:95:e1:0d:de:c3:53:4c:c5:e2:38:01:d2: 20:2d:cc:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtpCzlLpBs0xI03RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNDEzMzAxMVoXDTI2MDEwMjE0MzAxMVowLzEtMCsGA1UEAxMk Mzk5OWI0N2EtMTg0YS00NjQ3LWI5MmMtY2E3NjZiNmUxNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLPahyzzjxqXHWZvco4LLNQ3HAZr4oo+f9v e18LHPTwNwlvMh6tqi3T2jRvUeh52SeYFzwWWni0ssChh5/JD/QZJjVRgOhjt1yW N1KT7/AhyNA/1/jw54gjV4FxBZkgg3b7KEjXXGBzYnqhqZMGa2Q0+JFZ63/VlbPW SYIkVCKAKou14BeO4TNRAOuJHDUwOFt4LKJ96aGqnN0FDpyaOYStAZT4xqMk09OZ t6QWB/3XmdV+JTM+pePFrpdweM1LIuhDdN+3/ashE3SIClNe788udr4Q7uOEM70U LsmLki4LWA1CGQ0py8FhmowYoOPEw10Cir1VxuUm06ydUA2hGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNEKNdxCGGxf34OD7aFUMG8fPE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTVjMjBjYzctNzkzMS0z MjQ1LWFmYTItNmQzYzI4OWMxNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABKu67QqEH60ZXBmuy7dQzocOjuXg9XMzsbNVTINIYNEE/L1oUJ2 SBofVq1ON/gB9NyiGrvzPRsL9GLLQziVaSTrnMy8hG3u/n5xDUhG25Pa5z0WjZFs CfdN2JgZLSDPTW8gOv2ylWCw4bqDyr4s7hYy9ksBwozxHEC/9ByE/NvOQ9WFXLuE 4B4KVtgj2kNN2Zf6dhGUd4SvKsqusvKCgP2QJBcCUlgy6VfVALRgP7uzYim2J8PC q45vw1sAGkXFoYYjWRNKaPq7+JAajnlf8PqZ07xAS50S/+nuUiMQFztSSWZu724w Vscs0H59OMJB5ZXhDd7DU0zF4jgB0iAtzFM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:09 2025 by rpki-client