$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa File: 902850c1-b4ee-38b0-a3b7-5265b8d23981.roa (raw, json) Hash identifier: NI3S8xsOSAWtHui6iMsZ8wXpqFs3pGlBCXCYAxe+r6M= Subject key identifier: E1:65:F6:A3:AB:AC:EB:09:8B:A3:1A:FE:97:31:6B:0C:83:E2:C9:CC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1F0189A89FFEA0396658C800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 32575 IP address blocks: 2001:470:324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:89:a8:9f:fe:a0:39:66:58:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=34ca7f01-c8c1-46ca-96d4-3758a1d44beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:63:6d:4c:1b:c8:fe:d5:a9:82:ae:b8:c3: 85:db:83:90:03:6e:41:52:01:cc:4c:85:6f:7e:ee: 0b:11:9b:e2:d4:d1:f6:25:ff:0f:a9:2b:36:ec:98: e6:0f:f4:8d:f7:47:f2:8f:84:92:43:5e:36:fd:14: 3f:f5:7b:ef:c3:b2:e6:70:48:82:8b:2e:f4:73:4f: b5:2b:f1:71:e9:c4:41:b8:d4:fa:bf:b2:94:a9:fd: a3:7d:66:6c:1b:37:1d:f8:ac:c4:4d:ce:0f:b1:96: bd:58:d5:81:7b:11:16:4f:75:9a:b8:27:1d:38:c2: 13:63:8d:df:35:a4:b6:3a:e8:2a:29:3b:06:35:03: 64:6f:7d:57:23:ad:d9:29:59:df:09:59:00:9c:59: 69:a9:51:00:86:23:b9:e6:70:6f:54:c4:ba:da:dd: af:ed:a8:3a:9d:ef:70:c4:2d:cc:9e:3b:32:3a:a6: de:eb:bf:35:2f:ca:a1:e5:65:16:ed:99:1a:d1:75: 61:3c:03:8c:32:35:cb:a1:46:c3:c5:26:d7:5e:6a: 9d:dc:20:f8:c6:96:ee:9c:af:71:9e:e1:9b:46:2f: 54:c9:b0:b8:33:60:c6:24:7a:33:2c:15:41:5f:ee: 78:61:91:75:85:2d:f4:0c:ea:1f:0f:c1:8b:54:47: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:F6:A3:AB:AC:EB:09:8B:A3:1A:FE:97:31:6B:0C:83:E2:C9:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f3:00:26:e6:bd:38:b1:1f:c4:af:94:20:08:2c:27:63:00: 21:d4:9e:c7:ed:e7:ab:8c:79:f9:16:ed:40:fb:c9:d6:af:ad: 95:29:e4:2a:e6:d8:dd:66:f7:bc:8d:79:bd:84:2e:9e:15:b4: 70:20:78:a9:2e:af:f6:10:63:de:a5:a3:79:33:c2:7c:92:d3: e1:98:31:21:de:5b:bc:57:4b:b4:82:09:9b:e7:14:f9:09:4e: 39:9a:f8:a4:38:bd:fd:63:af:f6:a6:37:3e:e2:c2:cd:f3:cf: de:f2:c5:bc:04:99:f8:67:cf:3a:ed:62:28:23:f1:7c:c1:c2: 4d:1b:3f:aa:13:4c:ce:c8:94:ec:45:f6:e6:31:19:ed:dd:dc: cf:05:de:fa:33:ae:b2:82:09:f8:78:7f:f4:ae:d2:d0:40:3c: ff:1a:41:67:93:c9:a0:72:c0:fd:f5:87:f5:02:88:e6:0c:84: d5:21:f9:0d:15:6e:59:d6:ae:df:de:ac:97:df:fd:a8:67:00: 62:ec:08:45:c4:88:cc:77:ba:20:d8:aa:06:e2:df:4f:0d:ce: 37:3e:da:34:14:39:b4:c0:57:08:1b:63:77:b3:33:98:d4:27: 61:0c:82:6e:f2:68:02:a9:19:83:37:88:f9:84:aa:03:9c:19: 90:28:40:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAYmon/6gOWZYyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzRjYTdmMDEtYzhjMS00NmNhLTk2ZDQtMzc1OGExZDQ0YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEZjbUwbyP7VqYKuuMOF24OQA25BUgHMTIVv fu4LEZvi1NH2Jf8PqSs27JjmD/SN90fyj4SSQ142/RQ/9Xvvw7LmcEiCiy70c0+1 K/Fx6cRBuNT6v7KUqf2jfWZsGzcd+KzETc4PsZa9WNWBexEWT3WauCcdOMITY43f NaS2OugqKTsGNQNkb31XI63ZKVnfCVkAnFlpqVEAhiO55nBvVMS62t2v7ag6ne9w xC3MnjsyOqbe6781L8qh5WUW7Zka0XVhPAOMMjXLoUbDxSbXXmqd3CD4xpbunK9x nuGbRi9UybC4M2DGJHozLBVBX+54YZF1hS30DOofD8GLVEfg7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFl9qOrrOsJi6Ma/pcxawyD4snMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTAyODUwYzEtYjRlZS0z OGIwLWEzYjctNTI2NWI4ZDIzOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXzACbmvTixH8SvlCAILCdjACHUnsft56uMefkW7UD7ydavrZUp 5Crm2N1m97yNeb2ELp4VtHAgeKkur/YQY96lo3kzwnyS0+GYMSHeW7xXS7SCCZvn FPkJTjma+KQ4vf1jr/amNz7iws3zz97yxbwEmfhnzzrtYigj8XzBwk0bP6oTTM7I lOxF9uYxGe3d3M8F3vozrrKCCfh4f/Su0tBAPP8aQWeTyaBywP31h/UCiOYMhNUh +Q0VblnWrt/erJff/ahnAGLsCEXEiMx3uiDYqgbi308Nzjc+2jQUObTAVwgbY3ez M5jUJ2EMgm7yaAKpGYM3iPmEqgOcGZAoQMg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:22 2025 by rpki-client