$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa File: 686a3bc1-b910-3fad-b45e-507aac425894.roa (raw, json) Hash identifier: i8IouerCH59q/7cVfq20reaxZ/5jE5hiJhx1i0RGBCY= Subject key identifier: E1:5C:C6:A2:DD:CC:67:06:86:88:1D:22:58:CB:92:58:0C:4C:A4:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1F0189F48B674EC8D3803880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 397376 IP address blocks: 2001:470:254::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:89:f4:8b:67:4e:c8:d3:80:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=aeb9e4d1-ee35-4016-9c0d-eb392cc9f6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:f7:2e:fe:49:6d:aa:f7:50:72:3f:77:7d: 28:89:a0:7b:d4:9d:fa:a0:74:40:ed:6b:b0:51:d4: b4:7e:76:b1:16:30:fc:b1:f3:72:ce:6f:e7:c5:e6: 0d:a0:51:c5:17:10:76:ed:f4:05:db:bf:28:cc:b9: 6d:ba:a3:8a:47:13:79:5b:72:d5:79:00:f9:7d:53: f3:02:f5:a9:19:90:6e:79:05:3e:eb:f9:fc:4b:4d: 1c:51:fc:e8:36:70:c8:5c:ff:a4:ba:fb:a6:dd:43: bc:90:8b:fd:b0:4e:50:24:77:52:29:09:86:7a:a8: c9:40:bf:7c:b0:ef:2e:67:de:07:10:14:25:48:60: f3:71:06:d5:16:b4:08:22:6d:18:1e:9b:a4:09:c2: 69:5a:b2:b1:07:ff:89:7a:17:55:82:33:e7:8f:4c: 51:94:26:c7:c9:4d:3b:30:e4:b2:0c:6c:e0:f3:8f: 9a:de:42:ec:58:26:f0:e7:c7:db:1e:ba:ba:30:5f: 93:5d:68:be:91:ba:3b:1d:6b:9c:40:19:42:92:a2: 36:7d:21:32:6c:8a:5f:73:1c:8a:30:2e:14:60:44: 4a:71:4d:61:c1:99:eb:55:8e:95:2b:3f:26:b9:2f: 4c:7d:29:af:ee:a5:99:4c:db:19:48:95:bf:ec:81: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5C:C6:A2:DD:CC:67:06:86:88:1D:22:58:CB:92:58:0C:4C:A4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:254::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a5:72:0d:b0:7d:6f:5f:47:9a:53:7b:b4:48:fc:98:70:9d: 0e:65:0b:b8:f7:94:77:1e:ee:03:82:32:e6:de:e2:ef:95:bd: d3:f4:c5:9f:18:3f:a2:f8:bc:45:f6:35:dc:a8:b5:08:04:d7: 2b:66:59:30:05:17:a3:ff:6e:32:9f:c5:22:d0:86:9b:11:5a: b4:fe:bf:c4:9b:ae:b9:d9:73:6a:70:61:0f:bf:86:2e:61:d0: dc:06:72:7b:5d:2b:82:3a:2e:a6:c3:b9:56:c3:47:e3:c8:85: 4c:7a:9a:08:1b:86:0d:bf:a4:d1:f0:cd:2c:d7:90:16:c1:52: 85:70:d7:17:da:88:82:f7:7b:1f:af:b2:f9:fd:4b:79:97:cd: d1:b0:87:5d:c7:b9:7d:a0:56:ea:29:5c:bd:78:a9:f1:d9:9f: dc:8f:7d:7f:bd:91:f8:22:0c:bf:03:37:8c:86:e4:85:a3:4c: 52:72:38:dd:71:18:07:19:98:51:69:81:92:10:b8:29:84:15: e6:60:df:c0:93:35:c4:2c:9e:59:ee:44:e7:cd:10:5e:76:9c: 61:79:3d:1a:f2:15:fa:d6:62:0d:71:9c:19:1f:13:a7:3e:d8: 0e:9e:1a:a1:5e:2d:2e:02:1e:11:4a:37:ab:d0:1b:0b:45:bc: 9f:85:00:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAYn0i2dOyNOAOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWViOWU0ZDEtZWUzNS00MDE2LTljMGQtZWIzOTJjYzlmNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaX3Lv5Jbar3UHI/d30oiaB71J36oHRA7Wuw UdS0fnaxFjD8sfNyzm/nxeYNoFHFFxB27fQF278ozLltuqOKRxN5W3LVeQD5fVPz AvWpGZBueQU+6/n8S00cUfzoNnDIXP+kuvum3UO8kIv9sE5QJHdSKQmGeqjJQL98 sO8uZ94HEBQlSGDzcQbVFrQIIm0YHpukCcJpWrKxB/+JehdVgjPnj0xRlCbHyU07 MOSyDGzg84+a3kLsWCbw58fbHrq6MF+TXWi+kbo7HWucQBlCkqI2fSEybIpfcxyK MC4UYERKcU1hwZnrVY6VKz8muS9MfSmv7qWZTNsZSJW/7IEbxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFcxqLdzGcGhogdIljLklgMTKTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg2YTNiYzEtYjkxMC0z ZmFkLWI0NWUtNTA3YWFjNDI1ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKlcg2wfW9fR5pTe7RI/JhwnQ5lC7j3lHce7gOCMube4u+VvdP0 xZ8YP6L4vEX2NdyotQgE1ytmWTAFF6P/bjKfxSLQhpsRWrT+v8SbrrnZc2pwYQ+/ hi5h0NwGcntdK4I6LqbDuVbDR+PIhUx6mggbhg2/pNHwzSzXkBbBUoVw1xfaiIL3 ex+vsvn9S3mXzdGwh13HuX2gVuopXL14qfHZn9yPfX+9kfgiDL8DN4yG5IWjTFJy ON1xGAcZmFFpgZIQuCmEFeZg38CTNcQsnlnuROfNEF52nGF5PRryFfrWYg1xnBkf E6c+2A6eGqFeLS4CHhFKN6vQGwtFvJ+FAE8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:07 2025 by rpki-client