$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa File: 8411285b-a42c-345b-84ca-ee7b8d8d9335.roa (raw, json) Hash identifier: +JgRczADQ3h6jpAxp4xt2DLiVnr5qJcM8mBgjdbw5IA= Subject key identifier: 93:63:73:BF:ED:B9:4B:2E:3B:7D:28:55:DD:7A:15:3E:F9:7F:F7:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1806E818238074D9247597C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 28815 IP address blocks: 2001:470:378::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e8:18:23:80:74:d9:24:75:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b037785c-8c76-4e6c-a3d9-23f335a9e445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:a0:fc:3d:df:28:80:99:0a:b3:d5:a4:63: dd:b9:40:e8:b6:3e:f2:ee:d0:ff:cf:1b:1a:5c:0b: ac:0a:d5:a7:92:a4:bb:d4:62:48:1a:2c:a9:51:e5: 6c:70:15:ab:49:e8:ae:5b:a4:5b:b9:ad:31:28:68: 97:c7:28:36:f8:76:cf:f4:24:e1:cc:94:a6:64:f3: c8:7f:22:78:b6:f6:f6:1f:1b:56:24:32:04:73:b6: ae:29:dc:31:7a:3e:47:ae:4f:df:cf:33:a1:e9:11: 02:d1:d3:19:ab:a9:16:d6:3b:85:fa:f1:5b:d0:15: 8b:a5:1e:93:63:9b:2b:27:85:ad:25:dd:92:24:4c: 86:d8:b3:f2:33:78:91:a0:df:47:bf:69:13:ec:81: db:56:40:ff:a3:6c:89:02:73:d2:7c:45:97:4a:d7: dc:6a:99:9f:28:13:93:9a:26:cd:d5:26:bc:69:a6: 8e:64:b4:9f:5a:56:66:c5:b7:e1:52:18:c5:31:2b: d3:65:35:83:a1:98:0c:51:48:71:05:0a:2b:64:a4: bd:83:ad:8c:65:73:dd:7b:5a:47:d1:e7:e3:96:b2: 58:f0:71:57:42:1e:e3:50:a1:7f:e0:46:6e:dc:12: 56:b6:85:17:c3:cc:e5:09:44:0e:71:96:16:e8:92: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:63:73:BF:ED:B9:4B:2E:3B:7D:28:55:DD:7A:15:3E:F9:7F:F7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8411285b-a42c-345b-84ca-ee7b8d8d9335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:378::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:e1:97:0c:ad:36:62:aa:15:63:4e:de:5c:a5:22:d1:21:8b: f6:32:3b:99:2c:ba:8c:64:2e:1c:c3:08:e4:ae:59:c3:31:e7: 9a:a4:36:65:fd:12:e3:50:8c:f9:2e:c8:7b:63:8b:e2:32:74: 36:c9:7b:fd:90:47:c3:c2:cd:a5:fd:c9:ef:31:06:e0:45:19: 34:a9:47:5a:56:4b:0b:6c:0d:e7:85:fa:fe:20:e6:97:1a:1c: af:e9:f4:9f:e6:88:6d:b9:96:39:37:cc:86:a3:ad:6b:a3:c3: 2c:3c:b3:10:1d:66:8e:ba:72:01:5c:a7:09:ec:d4:36:97:38: 82:3b:25:60:73:d3:19:64:e4:85:68:75:ce:38:da:26:8c:dd: d4:a3:63:1a:51:a3:9a:05:55:64:9b:af:6e:5a:b6:da:1e:66: a8:52:70:94:26:57:90:6a:ec:59:94:9b:9b:45:d1:6c:66:0c: 0a:96:23:c8:54:5d:80:91:07:d7:41:b0:d4:be:9c:a0:25:f4: 27:92:5e:2d:98:cf:8d:90:85:8a:7d:1b:09:43:8b:66:b7:f6: 42:f4:9f:2f:3f:e1:aa:17:e8:f4:f7:36:ea:83:26:33:be:66: 7c:c1:24:77:a3:31:1a:e5:14:a2:80:c4:b2:56:f9:a8:90:63: fe:da:31:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBugYI4B02SR1l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjAzNzc4NWMtOGM3Ni00ZTZjLWEzZDktMjNmMzM1YTllNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNCg/D3fKICZCrPVpGPduUDotj7y7tD/zxsa XAusCtWnkqS71GJIGiypUeVscBWrSeiuW6Rbua0xKGiXxyg2+HbP9CThzJSmZPPI fyJ4tvb2HxtWJDIEc7auKdwxej5Hrk/fzzOh6REC0dMZq6kW1juF+vFb0BWLpR6T Y5srJ4WtJd2SJEyG2LPyM3iRoN9Hv2kT7IHbVkD/o2yJAnPSfEWXStfcapmfKBOT mibN1Sa8aaaOZLSfWlZmxbfhUhjFMSvTZTWDoZgMUUhxBQorZKS9g62MZXPde1pH 0efjlrJY8HFXQh7jUKF/4EZu3BJWtoUXw8zlCUQOcZYW6JJ8gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNjc7/tuUsuO30oVd16FT75f/chMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQxMTI4NWItYTQyYy0z NDViLTg0Y2EtZWU3YjhkOGQ5MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALDhlwytNmKqFWNO3lylItEhi/YyO5ksuoxkLhzDCOSuWcMx55qk NmX9EuNQjPkuyHtji+IydDbJe/2QR8PCzaX9ye8xBuBFGTSpR1pWSwtsDeeF+v4g 5pcaHK/p9J/miG25ljk3zIajrWujwyw8sxAdZo66cgFcpwns1DaXOII7JWBz0xlk 5IVodc442iaM3dSjYxpRo5oFVWSbr25attoeZqhScJQmV5Bq7FmUm5tF0WxmDAqW I8hUXYCRB9dBsNS+nKAl9CeSXi2Yz42QhYp9GwlDi2a39kL0ny8/4aoX6PT3NuqD JjO+ZnzBJHejMRrlFKKAxLJW+aiQY/7aMSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:50 2025 by rpki-client