$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa File: 7efc328d-e67b-3dea-bab6-6080ae44a16c.roa (raw, json) Hash identifier: AR3cWLN+Adl11LSdSM1WobG68lui6+vSZmrI9UESwUc= Subject key identifier: 0B:F0:CF:75:1D:FD:37:F9:C5:B3:C8:30:42:0A:3C:CF:CC:0C:51:CD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B41E7287DAAFB9C7F350DC480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 45499 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:28:7d:aa:fb:9c:7f:35:0d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=233d467b-a67b-443b-93a8-58d3aa982b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:42:66:52:c6:32:8e:b4:40:cc:e9:3f:ed: 82:b5:90:4c:5f:ef:2b:b0:c1:5e:93:9b:da:80:01: 7f:2d:67:2c:75:93:aa:c4:8b:63:7d:c6:42:44:fe: e9:35:fa:08:23:ca:54:f6:90:2c:dc:e1:90:be:b2: 4f:6a:9c:f7:da:ef:25:59:97:04:b2:69:6e:19:5f: 3b:d8:62:12:96:ec:63:53:1d:b1:f9:a8:1c:dd:0a: 65:d9:28:90:a3:97:ae:c1:51:10:40:41:13:f3:90: 8a:9f:27:49:d9:90:5c:d7:d7:52:9e:a0:40:5e:82: a9:f0:49:e0:16:41:9b:99:41:a0:4e:53:56:df:38: dc:6b:1e:23:45:b9:b8:f7:33:73:1c:5a:96:53:db: f2:18:c0:ae:ec:1b:45:d4:f0:69:36:93:49:00:04: 1b:be:35:b3:c9:77:cb:7c:25:8b:59:d8:c6:9a:77: d1:d1:89:94:d7:4f:c6:ac:b6:b5:7e:f9:99:0e:90: d4:77:4b:3d:8d:47:8b:b6:ab:39:40:29:0a:ba:56: 8d:f9:8e:ea:65:e4:39:c0:a2:e3:10:10:bd:81:df: 58:b8:a3:4c:a1:59:7b:47:a6:3b:eb:8e:e9:07:38: 19:e1:42:90:6e:05:bf:49:9d:85:6c:c8:b5:d5:bf: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:CF:75:1D:FD:37:F9:C5:B3:C8:30:42:0A:3C:CF:CC:0C:51:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:eb:ae:4a:94:5f:55:cd:ae:4f:51:d2:ff:eb:5c:e6:d0:9c: d6:02:85:a8:04:1b:4b:39:84:0f:e0:e0:df:6e:08:7b:a0:8e: b0:3f:94:89:76:ea:74:7b:1a:f0:59:47:bc:3a:98:d8:be:cf: 57:e0:07:13:a4:c2:d5:94:ad:c0:ed:90:68:5c:7e:4a:3f:1f: 65:bc:33:73:b9:5f:f8:6b:e6:a4:02:37:6e:d1:23:86:2d:cd: 7d:e5:c3:fe:36:31:38:59:3f:f2:12:7b:b9:c5:93:91:34:85: 27:ab:9d:8c:51:2f:04:e7:7f:bc:d0:f6:06:e3:2f:3d:88:8a: 23:c9:51:68:f6:73:a8:91:3e:26:f9:26:02:dc:f1:50:3b:98: 74:96:80:62:02:68:1c:d8:40:08:f2:94:69:68:a5:bc:3a:f2: 92:73:c5:de:b2:6c:22:39:44:28:db:87:91:09:9d:da:c4:18: af:46:be:4b:d1:f8:1e:09:8f:8c:50:3c:19:2c:37:6b:f6:27: 97:4d:d1:d9:f3:74:8d:10:ef:28:2f:b3:b1:31:90:d0:df:07: 64:22:47:7e:a3:94:fd:f1:f1:7d:68:fa:10:1a:50:db:7d:1a: ac:bd:17:ca:d7:14:4e:ad:8f:58:86:13:99:59:da:fa:9b:fa: 8b:f1:5c:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5yh9qvucfzUNxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjMzZDQ2N2ItYTY3Yi00NDNiLTkzYTgtNThkM2FhOTgyYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwFCZlLGMo60QMzpP+2CtZBMX+8rsMFek5va gAF/LWcsdZOqxItjfcZCRP7pNfoII8pU9pAs3OGQvrJPapz32u8lWZcEsmluGV87 2GISluxjUx2x+agc3Qpl2SiQo5euwVEQQEET85CKnydJ2ZBc19dSnqBAXoKp8Eng FkGbmUGgTlNW3zjcax4jRbm49zNzHFqWU9vyGMCu7BtF1PBpNpNJAAQbvjWzyXfL fCWLWdjGmnfR0YmU10/GrLa1fvmZDpDUd0s9jUeLtqs5QCkKulaN+Y7qZeQ5wKLj EBC9gd9YuKNMoVl7R6Y7647pBzgZ4UKQbgW/SZ2FbMi11b/lGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAvwz3Ud/Tf5xbPIMEIKPM/MDFHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2VmYzMyOGQtZTY3Yi0z ZGVhLWJhYjYtNjA4MGFlNDRhMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbrrkqUX1XNrk9R0v/rXObQnNYChagEG0s5hA/g4N9uCHugjrA/ lIl26nR7GvBZR7w6mNi+z1fgBxOkwtWUrcDtkGhcfko/H2W8M3O5X/hr5qQCN27R I4YtzX3lw/42MThZP/ISe7nFk5E0hSernYxRLwTnf7zQ9gbjLz2IiiPJUWj2c6iR Pib5JgLc8VA7mHSWgGICaBzYQAjylGlopbw68pJzxd6ybCI5RCjbh5EJndrEGK9G vkvR+B4Jj4xQPBksN2v2J5dN0dnzdI0Q7ygvs7ExkNDfB2QiR36jlP3x8X1o+hAa UNt9Gqy9F8rXFE6tj1iGE5lZ2vqb+ovxXGo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:27 2025 by rpki-client