$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9248dc99-0b8e-3508-827b-f24afe01305c.roa File: 9248dc99-0b8e-3508-827b-f24afe01305c.roa (raw, json) Hash identifier: pKGf5/2DW0N/0XM71Kr0gDfYjApoS6N9+Z4tZUUYCrQ= Subject key identifier: 80:A4:4C:C0:75:EC:67:CC:CA:0C:C1:59:C4:AA:F9:3B:36:39:28:3C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7005F077B1AFF5B8A2A7BB20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9248dc99-0b8e-3508-827b-f24afe01305c.roa Signing time: Tue 07 Oct 2025 01:30:12 +0000 ROA not before: Tue 07 Oct 2025 01:30:12 +0000 ROA not after: Mon 05 Jan 2026 02:30:12 +0000 asID: 328323 IP address blocks: 2001:470:3a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:05:f0:77:b1:af:f5:b8:a2:a7:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 01:30:12 2025 GMT Not After : Jan 5 02:30:12 2026 GMT Subject: CN=4d775742-f264-4bea-8a00-b68de8abd2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:d9:3a:8e:52:79:1c:4f:47:a2:10:94:a0: 5a:1d:46:32:34:6b:4e:62:15:32:70:f0:61:4c:cd: 47:63:0c:cb:b8:8a:4c:e6:7b:d8:17:22:05:1c:02: d9:b9:df:f8:b9:e0:dc:7c:c1:1d:47:20:76:a5:21: 3e:dc:27:d3:bd:18:a3:e2:57:be:45:81:5a:52:52: 2a:4a:67:1c:a9:db:95:2d:58:59:ab:44:3d:b8:14: e1:37:ed:d7:25:1a:db:5a:88:ab:01:e9:d6:c4:4d: 8b:26:82:82:55:6d:04:78:03:62:79:b4:46:2e:d7: 00:8d:ed:cf:fb:b7:79:a4:73:e2:fc:47:99:56:13: 5f:3e:e8:99:5a:b3:20:85:af:8e:fb:0e:2f:e4:85: d2:4d:a1:69:cd:0e:58:26:29:bc:91:c5:c9:9b:24: 20:f2:d4:c3:6e:1b:cc:5b:12:d4:6f:a3:bf:3e:e8: 4c:ef:37:0d:b5:3e:32:c4:79:ed:21:15:97:5a:e8: 26:f5:69:29:fa:0a:72:58:8e:2d:9b:98:86:ba:59: 06:52:a5:93:ed:12:9d:13:51:74:c0:ac:34:28:a2: d6:1b:ba:2e:e5:c5:22:5e:ec:77:0f:ab:07:44:4b: 6b:59:c3:5e:f0:31:7a:32:61:c1:d5:cc:ee:e8:39: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:4C:C0:75:EC:67:CC:CA:0C:C1:59:C4:AA:F9:3B:36:39:28:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9248dc99-0b8e-3508-827b-f24afe01305c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:9e:36:24:62:f5:54:7e:5b:3a:8b:98:b5:b7:26:48:3e:ee: ca:19:8d:61:09:c0:ee:20:1b:50:bd:d2:9a:05:ed:13:33:e6: db:45:93:65:b7:61:d0:be:e8:7d:eb:e4:5a:37:ed:81:42:c2: 27:c1:38:81:d8:fe:7c:20:74:01:37:76:f2:4c:6f:ea:45:80: 03:ec:54:1c:a9:41:0f:29:79:13:24:ec:bc:95:a2:7e:e4:20: 60:6e:b7:d1:57:8a:d6:12:30:58:ef:7c:2f:ed:bb:08:0d:7c: 92:a7:b8:76:4f:00:ca:5f:bd:96:55:d4:8e:2b:5d:cd:11:ba: fc:43:94:f0:03:0c:b5:ca:b9:75:8f:e2:5f:5f:ce:dc:67:cd: 76:f9:5d:fd:8f:ad:5e:e2:d9:96:89:06:fb:37:6d:f8:4a:f0: c1:cc:47:6f:8a:71:60:ba:e7:5c:40:c8:b6:86:6e:20:db:a2: fe:79:09:5d:07:68:96:72:97:e4:a3:c0:07:c7:ad:db:74:da: bb:20:bf:39:50:82:2f:dc:2a:77:48:19:85:30:4c:01:a2:f7: b9:f6:51:5f:a1:55:7b:00:18:7a:81:61:a7:14:4c:cc:9d:3e: c4:5f:fc:b6:6a:35:04:46:fa:d0:d6:9b:5b:4e:4c:33:d8:99: 81:9b:eb:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtwBfB3sa/1uKKnuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzAxMzAxMloXDTI2MDEwNTAyMzAxMlowLzEtMCsGA1UEAxMk NGQ3NzU3NDItZjI2NC00YmVhLThhMDAtYjY4ZGU4YWJkMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfZOo5SeRxPR6IQlKBaHUYyNGtOYhUycPBh TM1HYwzLuIpM5nvYFyIFHALZud/4ueDcfMEdRyB2pSE+3CfTvRij4le+RYFaUlIq SmccqduVLVhZq0Q9uBThN+3XJRrbWoirAenWxE2LJoKCVW0EeANiebRGLtcAje3P +7d5pHPi/EeZVhNfPuiZWrMgha+O+w4v5IXSTaFpzQ5YJim8kcXJmyQg8tTDbhvM WxLUb6O/PuhM7zcNtT4yxHntIRWXWugm9Wkp+gpyWI4tm5iGulkGUqWT7RKdE1F0 wKw0KKLWG7ou5cUiXux3D6sHREtrWcNe8DF6MmHB1czu6DmfCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICkTMB17GfMygzBWcSq+Ts2OSg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTI0OGRjOTktMGI4ZS0z NTA4LTgyN2ItZjI0YWZlMDEzMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK+eNiRi9VR+WzqLmLW3Jkg+7soZjWEJwO4gG1C90poF7RMz5ttF k2W3YdC+6H3r5Fo37YFCwifBOIHY/nwgdAE3dvJMb+pFgAPsVBypQQ8peRMk7LyV on7kIGBut9FXitYSMFjvfC/tuwgNfJKnuHZPAMpfvZZV1I4rXc0RuvxDlPADDLXK uXWP4l9fztxnzXb5Xf2PrV7i2ZaJBvs3bfhK8MHMR2+KcWC651xAyLaGbiDbov55 CV0HaJZyl+SjwAfHrdt02rsgvzlQgi/cKndIGYUwTAGi97n2UV+hVXsAGHqBYacU TMydPsRf/LZqNQRG+tDWm1tOTDPYmYGb6zo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:40:58 2025 by rpki-client