$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa File: 6aa02105-780d-32a3-90d6-5b3599928828.roa (raw, json) Hash identifier: 3XOuQ7jQmHIIotFDRGyyLHc6k/IVNtn5SeNMLt+BdZk= Subject key identifier: 80:E2:C9:B1:4C:AA:20:5A:53:35:78:EA:C8:7A:39:76:3E:3A:58:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B6D2CAAE8EAFD924789F55200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 153183 IP address blocks: 2001:470:3c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:aa:e8:ea:fd:92:47:89:f5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=230e118d-d28c-48e9-9470-38aca4a4a868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:36:19:b6:b4:45:70:fd:eb:7a:46:b6:ce: a0:83:28:21:0b:7b:ba:ee:c0:92:52:f2:6a:30:1f: 27:f5:fe:ff:8a:41:ea:03:3b:98:2c:ab:c0:3a:82: 77:4c:cc:06:c7:a2:48:bd:25:05:a8:58:b1:c5:13: 19:cd:a2:f6:96:f9:3f:95:68:56:fd:1b:0f:cb:66: 35:3a:d8:e3:5a:66:f9:b5:d0:32:9c:aa:6e:5e:76: f9:d9:63:3d:3e:91:f8:e6:d3:6d:88:ae:2a:77:50: ef:83:f2:5c:14:52:b2:3e:30:cd:68:6e:e8:e0:ce: 0b:0f:b1:09:43:ae:5a:da:f6:55:b6:c3:a5:aa:a4: 06:af:1a:29:ad:0f:7d:2c:8e:d6:e9:81:e8:a0:ab: 81:d9:34:38:a0:00:2d:b6:0e:cf:2e:65:31:03:f2: 53:e0:c3:08:b4:8f:44:86:8b:bb:a9:da:c9:1b:fc: 15:dd:87:9f:c2:ae:d6:1e:af:bb:0c:5e:80:27:27: f7:e7:d6:bb:10:fd:c5:64:0c:33:02:7d:2b:f6:71: 24:d7:12:fa:a1:79:ec:41:f3:41:8a:6e:c8:63:39: 5c:ba:53:ed:82:7f:94:9e:94:4e:7a:10:cf:7b:8c: 06:0a:22:13:91:54:4e:e1:b0:d6:c4:56:16:8b:8a: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:C9:B1:4C:AA:20:5A:53:35:78:EA:C8:7A:39:76:3E:3A:58:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8a:ab:f6:02:fb:0b:e9:3d:ca:31:47:9d:11:87:2b:59:96: 35:c3:05:8e:b8:d4:f6:91:44:a3:83:55:d1:65:b6:f0:fa:09: 86:fa:02:99:dd:cb:87:0b:11:31:4f:90:c3:43:05:c2:46:76: f8:b2:df:f4:52:b7:55:02:f3:06:44:f1:72:a0:88:1e:20:e4: 13:cb:3b:5e:82:a4:6c:f7:1b:0f:e3:02:6e:95:b2:c9:45:8c: 25:cd:dc:a5:58:0d:62:2c:59:bf:71:19:24:a1:bf:ae:ef:57: d3:d8:d7:3d:65:06:24:53:2e:8a:43:50:f3:13:20:7e:7e:87: f8:fb:86:cd:e0:1f:46:f4:16:00:1c:54:70:f3:8d:b9:ec:d9: 49:a9:95:00:29:e4:1a:33:67:f7:08:24:d9:28:36:07:8a:d9: c3:0f:79:63:24:60:d4:4e:fd:1a:92:4a:7c:40:a8:10:69:d2: 1e:b8:04:fc:3a:82:73:38:3e:d9:34:ae:3d:7a:e1:09:c1:29: 19:77:2b:55:32:28:52:ae:cc:83:a2:36:cf:f3:27:d6:f6:c3: ef:3d:50:a7:05:0e:16:f3:e5:2b:18:73:dd:66:ea:5f:e0:28: cd:c3:1f:e0:a2:d1:96:95:f5:1e:c9:83:77:95:f3:25:cb:9f: 60:0f:16:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEttLKro6v2SR4n1UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjMwZTExOGQtZDI4Yy00OGU5LTk0NzAtMzhhY2E0YTRhODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jU2Gba0RXD963pGts6ggyghC3u67sCSUvJq MB8n9f7/ikHqAzuYLKvAOoJ3TMwGx6JIvSUFqFixxRMZzaL2lvk/lWhW/RsPy2Y1 OtjjWmb5tdAynKpuXnb52WM9PpH45tNtiK4qd1Dvg/JcFFKyPjDNaG7o4M4LD7EJ Q65a2vZVtsOlqqQGrxoprQ99LI7W6YHooKuB2TQ4oAAttg7PLmUxA/JT4MMItI9E hou7qdrJG/wV3Yefwq7WHq+7DF6AJyf359a7EP3FZAwzAn0r9nEk1xL6oXnsQfNB im7IYzlculPtgn+UnpROehDPe4wGCiITkVRO4bDWxFYWi4oC3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDiybFMqiBaUzV46sh6OXY+OlgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmFhMDIxMDUtNzgwZC0z MmEzLTkwZDYtNWIzNTk5OTI4ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOKq/YC+wvpPcoxR50RhytZljXDBY641PaRRKODVdFltvD6CYb6 Apndy4cLETFPkMNDBcJGdviy3/RSt1UC8wZE8XKgiB4g5BPLO16CpGz3Gw/jAm6V sslFjCXN3KVYDWIsWb9xGSShv67vV9PY1z1lBiRTLopDUPMTIH5+h/j7hs3gH0b0 FgAcVHDzjbns2UmplQAp5BozZ/cIJNkoNgeK2cMPeWMkYNRO/RqSSnxAqBBp0h64 BPw6gnM4Ptk0rj164QnBKRl3K1UyKFKuzIOiNs/zJ9b2w+89UKcFDhbz5SsYc91m 6l/gKM3DH+Ci0ZaV9R7Jg3eV8yXLn2APFsA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:35:25 2025 by rpki-client