$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa File: 6f48079d-ee93-36f6-8a89-6030c6824691.roa (raw, json) Hash identifier: SJCX2tpK4jdNLOk0p6WxceNSAQ7Cdn2TcpLTf4v5Xb0= Subject key identifier: 04:2D:A3:F2:60:89:DF:C7:D1:21:A6:EE:9B:24:09:3E:09:6F:7C:71 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1AD1B034FC55CF8B18538200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 394545 IP address blocks: 2001:470:20a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:34:fc:55:cf:8b:18:53:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=5d7b4cbf-e60b-4c8e-9e70-9e27f8a22960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:58:37:ae:f9:19:49:26:7d:83:e5:70:26: 6f:8b:ce:a9:b5:93:26:1a:52:59:21:12:75:2d:39: 58:93:d6:75:18:bd:0f:26:d6:eb:11:5a:07:4c:70: 5a:fa:43:10:83:c1:f0:56:c3:a4:2d:15:4d:90:37: 00:86:c4:57:0d:90:a2:83:b8:63:bf:4d:60:ac:05: b6:88:63:f8:6a:ee:39:ed:3a:f6:98:64:be:76:8f: 58:a1:7a:a7:68:50:0b:48:da:e1:c6:97:1d:9b:51: a6:83:c8:14:17:d9:b9:53:e7:e2:05:b5:67:9a:8c: 63:f9:11:8d:40:53:be:94:5d:ea:84:68:63:f3:f8: 54:d4:d1:c1:3d:9f:51:ca:81:3c:5b:a2:c9:cd:4e: 51:d5:1b:cd:ab:cb:42:48:f7:59:de:3e:8d:3f:7c: 71:6e:ac:b9:5b:47:99:9f:61:51:ce:9d:fa:07:78: c5:9a:63:0c:e0:21:a0:24:5d:bb:c9:58:78:0d:fb: a4:9e:49:79:2a:59:ba:32:92:f8:55:d3:55:bc:5a: 7c:c0:81:55:ed:6d:b6:5d:7c:e7:25:47:09:6b:1b: 5a:ed:37:71:4c:73:5c:9e:b5:96:34:fe:5e:e5:17: 0c:ca:3f:5e:a9:df:e7:e2:4d:bc:37:59:86:2b:60: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:A3:F2:60:89:DF:C7:D1:21:A6:EE:9B:24:09:3E:09:6F:7C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:20a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:55:b0:db:d1:1a:26:87:6b:a3:85:43:0c:fa:45:2b:01: 97:4e:b2:60:0a:dc:79:03:fe:61:cd:ba:db:6f:a4:53:a9:5c: 7d:55:25:05:f0:e3:05:d1:e2:cc:5c:a1:5b:8f:af:ad:b7:67: 6c:dc:fc:85:18:35:e1:95:25:10:51:a9:e0:df:51:fd:7b:4a: 28:4b:63:3f:b0:d7:9e:37:15:bc:1e:19:cc:50:6b:56:c8:69: 31:42:01:33:a6:51:49:33:5e:a3:f3:31:db:48:94:54:d2:c2: 84:d4:00:32:ea:d0:44:c6:bc:5c:7a:f5:31:61:2c:3c:0c:a0: 16:65:35:43:8f:39:9a:79:6c:e4:f9:df:15:d2:29:be:a2:32: 48:15:66:41:35:90:ce:a1:bc:c0:95:3c:f9:b4:6e:5d:81:aa: ab:95:d0:28:90:0a:e6:b9:a0:8c:85:fe:c1:29:c4:fb:2d:0a: 14:d3:ec:89:c8:2e:20:7a:d8:4b:99:3c:4a:c1:30:41:fa:78: 82:74:c5:f3:38:e3:84:4c:2a:67:a1:49:37:8a:13:4d:2a:23: 72:a8:c6:69:34:3f:a9:c1:d3:87:7d:9e:dc:a7:c1:b4:94:6b: 35:d6:73:cb:3d:6e:9f:b1:0f:86:b9:e7:b9:f9:c0:f8:5f:df: 0b:04:6b:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bA0/FXPixhTggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NWQ3YjRjYmYtZTYwYi00YzhlLTllNzAtOWUyN2Y4YTIyOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+JYN675GUkmfYPlcCZvi86ptZMmGlJZIRJ1 LTlYk9Z1GL0PJtbrEVoHTHBa+kMQg8HwVsOkLRVNkDcAhsRXDZCig7hjv01grAW2 iGP4au457Tr2mGS+do9YoXqnaFALSNrhxpcdm1Gmg8gUF9m5U+fiBbVnmoxj+RGN QFO+lF3qhGhj8/hU1NHBPZ9RyoE8W6LJzU5R1RvNq8tCSPdZ3j6NP3xxbqy5W0eZ n2FRzp36B3jFmmMM4CGgJF27yVh4Dfuknkl5Klm6MpL4VdNVvFp8wIFV7W22XXzn JUcJaxta7TdxTHNcnrWWNP5e5RcMyj9eqd/n4k28N1mGK2ChswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAQto/Jgid/H0SGm7pskCT4Jb3xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmY0ODA3OWQtZWU5My0z NmY2LThhODktNjAzMGM2ODI0NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBoVbDb0Romh2ujhUMM+kUrAZdOsmAK3HkD/mHNuttvpFOpXH1V JQXw4wXR4sxcoVuPr623Z2zc/IUYNeGVJRBRqeDfUf17SihLYz+w1543FbweGcxQ a1bIaTFCATOmUUkzXqPzMdtIlFTSwoTUADLq0ETGvFx69TFhLDwMoBZlNUOPOZp5 bOT53xXSKb6iMkgVZkE1kM6hvMCVPPm0bl2BqquV0CiQCua5oIyF/sEpxPstChTT 7InILiB62EuZPErBMEH6eIJ0xfM444RMKmehSTeKE00qI3Koxmk0P6nB04d9ntyn wbSUazXWc8s9bp+xD4a557n5wPhf3wsEazg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:25 2025 by rpki-client