$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8df82a30-f32d-33bf-b483-ddc5d92720f8.roa File: 8df82a30-f32d-33bf-b483-ddc5d92720f8.roa (raw, json) Hash identifier: FRdiYLFP0gwvq2vjwtP3XUU9Vrw4ooIUjoXauL7RL/o= Subject key identifier: BA:FD:F9:E8:1E:88:04:8C:0B:62:95:D8:83:D4:84:BD:DF:FF:04:BB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B4BAC71E212E0FA50D5AF2BC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8df82a30-f32d-33bf-b483-ddc5d92720f8.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 138995 IP address blocks: 2001:470:e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:71:e2:12:e0:fa:50:d5:af:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=a6c38bb1-8224-447b-addf-b87245883e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:ad:20:b6:94:e1:0e:1d:7c:d2:38:c2:5b: 4e:93:98:f9:d6:7f:cf:d3:fa:78:30:6c:08:c5:5f: f5:ee:30:c7:25:73:9e:68:61:ed:9f:ad:c7:65:80: d8:eb:80:81:1c:41:55:65:61:64:67:23:3c:49:7d: 5f:45:dc:d7:96:34:61:84:d5:af:e9:a0:7c:8d:77: 0c:3a:d7:81:f3:d1:73:17:fc:df:30:1d:46:8a:11: a3:5d:83:e6:73:57:0e:c0:24:16:0f:b5:5e:d8:6d: e7:ea:5a:df:5e:92:bd:71:b2:b5:42:9a:90:88:64: 46:15:83:05:1e:4f:cf:de:b8:86:ea:cf:91:68:0a: e0:ca:c9:5f:1f:50:cc:86:39:d7:60:ec:7d:2a:84: 38:36:60:95:4b:db:f8:14:2d:f5:2d:66:bb:96:7e: 8d:7c:f6:bb:9a:bf:77:10:b9:49:ca:23:fa:19:be: 12:e9:cf:50:10:0d:3c:4f:7d:82:b1:36:84:30:91: ff:0e:29:a3:c5:de:79:83:ab:28:a5:37:2c:9c:a6: e0:94:8b:aa:69:93:f4:d8:1a:2f:00:d2:7b:e5:33: be:db:da:64:87:1d:d9:4c:23:57:4c:68:26:81:a3: e6:e5:7d:ae:20:64:64:3a:ab:3e:b1:33:fe:f9:c1: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:F9:E8:1E:88:04:8C:0B:62:95:D8:83:D4:84:BD:DF:FF:04:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8df82a30-f32d-33bf-b483-ddc5d92720f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:44:5f:dd:c0:af:4b:f8:de:9e:82:52:80:1b:0a:21:10:3c: 57:8a:b8:ec:f4:e3:57:c5:04:ad:c4:ed:dd:66:15:f3:b3:a3: f1:9e:39:ab:6d:29:7b:20:08:94:1b:72:5a:ea:ee:24:ad:43: 88:0f:ce:cd:cc:f4:7e:f3:6f:b4:a5:ac:20:7b:c8:36:dc:6f: 0d:4e:5e:57:1a:81:c0:dd:05:b9:1f:92:35:d9:0d:44:e5:33: e7:ae:7a:d4:3c:08:52:24:1d:2f:88:f7:91:e1:6f:14:c0:17: 4b:b3:4e:28:71:d6:c0:7d:bb:17:20:3f:8d:ce:26:27:f7:6e: 8d:ee:e4:24:8a:3f:40:b2:a4:1e:a2:a6:73:39:94:09:50:02: 82:78:38:0b:b4:bb:ba:6e:28:a2:90:91:06:f8:2f:bf:f2:50: ab:94:e8:b7:57:77:81:31:25:22:7d:34:07:9d:a8:21:d2:f6: b3:9a:b3:77:21:ce:2c:68:35:49:99:da:91:8a:3f:d1:a1:27: 90:0e:ff:2e:fd:e4:f0:4b:4a:cd:3e:b5:c8:3d:16:37:ec:51: 22:8a:24:fb:9a:41:52:67:6b:54:e1:04:0f:f3:43:a4:27:30: 5b:90:46:ae:a3:72:82:6f:78:68:58:0e:e9:85:ee:3c:e5:b2: c3:3f:25:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrHHiEuD6UNWvK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YTZjMzhiYjEtODIyNC00NDdiLWFkZGYtYjg3MjQ1ODgzZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUCtILaU4Q4dfNI4wltOk5j51n/P0/p4MGwI xV/17jDHJXOeaGHtn63HZYDY64CBHEFVZWFkZyM8SX1fRdzXljRhhNWv6aB8jXcM OteB89FzF/zfMB1GihGjXYPmc1cOwCQWD7Ve2G3n6lrfXpK9cbK1QpqQiGRGFYMF Hk/P3riG6s+RaArgyslfH1DMhjnXYOx9KoQ4NmCVS9v4FC31LWa7ln6NfPa7mr93 ELlJyiP6Gb4S6c9QEA08T32CsTaEMJH/Dimjxd55g6sopTcsnKbglIuqaZP02Bov ANJ75TO+29pkhx3ZTCNXTGgmgaPm5X2uIGRkOqs+sTP++cESuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLr9+egeiASMC2KV2IPUhL3f/wS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGRmODJhMzAtZjMyZC0z M2JmLWI0ODMtZGRjNWQ5MjcyMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALFEX93Ar0v43p6CUoAbCiEQPFeKuOz041fFBK3E7d1mFfOzo/Ge OattKXsgCJQbclrq7iStQ4gPzs3M9H7zb7SlrCB7yDbcbw1OXlcagcDdBbkfkjXZ DUTlM+euetQ8CFIkHS+I95HhbxTAF0uzTihx1sB9uxcgP43OJif3bo3u5CSKP0Cy pB6ipnM5lAlQAoJ4OAu0u7puKKKQkQb4L7/yUKuU6LdXd4ExJSJ9NAedqCHS9rOa s3chzixoNUmZ2pGKP9GhJ5AO/y795PBLSs0+tcg9FjfsUSKKJPuaQVJna1ThBA/z Q6QnMFuQRq6jcoJveGhYDumF7jzlssM/Jf4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:57 2025 by rpki-client