$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa File: 950420fc-10b0-3aed-8db8-f3ebf002cb06.roa (raw, json) Hash identifier: mT+snt0K67UNLC4hGacjtjkjzo+MjkidrJ1BvJCBe3w= Subject key identifier: 47:04:10:F2:6F:D2:50:D2:DF:DE:E1:25:F5:F8:9E:0D:E7:8F:3E:AC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B5C6CB654B3EEAAEE0548BAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 210644 IP address blocks: 2001:470:276::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b6:54:b3:ee:aa:ee:05:48:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=44a80b78-234a-43ce-b618-bee86e6266ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:d1:70:64:ee:7c:3b:a6:92:23:86:3c:3f: 1d:a3:48:a8:26:fc:09:ad:7b:d7:ec:be:bc:aa:e2: b9:93:71:41:93:4a:18:5b:83:d6:ef:aa:fc:09:8c: f4:e5:49:ec:b3:d1:b3:51:ff:57:54:bb:2b:c7:b5: a2:f0:f2:de:f4:ca:76:b5:65:fb:49:d1:48:28:d8: 3a:75:28:c8:11:c2:c4:6c:eb:75:ae:96:98:42:8e: 65:aa:5b:54:0f:6b:96:bd:95:f7:3c:0b:37:98:b5: 5b:ca:ac:03:86:8b:30:a0:f6:ed:1d:1e:5a:b0:05: c1:89:3e:eb:80:62:ad:5e:62:fa:e1:2f:95:e6:55: a1:27:3e:a4:06:59:fe:3d:90:75:04:88:fc:d0:9f: ec:69:98:44:f3:44:0b:5c:88:27:85:6a:41:2f:17: d2:3b:19:ac:41:92:6e:ac:ad:1c:47:aa:78:80:de: 92:30:25:99:80:e2:84:d3:2a:3d:42:ca:3d:9f:62: 8f:0a:9f:8d:5f:0c:ed:6a:46:96:8f:16:66:cb:48: f3:56:b4:13:72:78:37:48:2d:e7:53:1e:62:cf:46: 14:08:dd:7e:c8:9f:68:8d:cb:b8:3b:21:ff:7a:c8: 70:16:95:d3:81:00:e0:85:e7:38:6d:7f:e9:c6:eb: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:10:F2:6F:D2:50:D2:DF:DE:E1:25:F5:F8:9E:0D:E7:8F:3E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:276::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c6:f2:50:42:15:76:8e:7f:33:4d:37:f5:91:ab:8d:79:f9: 72:60:7c:37:6a:3f:4f:54:d9:cb:ee:ac:63:5d:28:b5:76:6e: dd:30:f0:f2:15:2a:14:a6:3a:5b:03:7d:6c:a4:7f:fa:c3:40: 4d:f5:6f:05:56:57:0d:83:27:8a:80:b6:99:d8:17:b6:81:a6: fd:3f:bd:b7:84:1a:55:38:e5:c9:01:df:cc:d6:dc:49:29:e4: ab:86:5f:c8:b5:3d:42:65:8b:ae:a5:0f:eb:b3:f5:c0:94:e4: d5:8a:e9:b0:d4:d4:c9:71:17:98:c5:55:98:0b:12:1c:5f:2f: bb:98:8a:79:7e:74:c8:69:a7:8e:e3:1e:ef:ef:82:26:90:fe: d0:54:cc:e3:91:18:77:02:93:f8:5a:e9:b6:95:de:a8:dd:c5: ff:a2:91:a1:68:95:ba:d5:92:a4:28:c5:83:48:22:0f:cb:55: 07:50:c8:14:bf:35:5f:9d:a9:fc:84:73:f6:1a:ce:f7:37:0c: e3:ac:25:37:f1:0a:a8:77:68:88:d5:8b:82:1a:d6:38:69:a4: 32:17:c7:01:79:4a:c9:a4:d9:cd:2c:8c:81:f8:5e:a8:a6:67: be:45:96:0b:70:54:32:eb:20:fa:dc:e5:ab:e4:ff:7a:39:4b: 22:4a:66:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbLZUs+6q7gVIusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NDRhODBiNzgtMjM0YS00M2NlLWI2MTgtYmVlODZlNjI2NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpzRcGTufDumkiOGPD8do0ioJvwJrXvX7L68 quK5k3FBk0oYW4PW76r8CYz05Unss9GzUf9XVLsrx7Wi8PLe9Mp2tWX7SdFIKNg6 dSjIEcLEbOt1rpaYQo5lqltUD2uWvZX3PAs3mLVbyqwDhoswoPbtHR5asAXBiT7r gGKtXmL64S+V5lWhJz6kBln+PZB1BIj80J/saZhE80QLXIgnhWpBLxfSOxmsQZJu rK0cR6p4gN6SMCWZgOKE0yo9Qso9n2KPCp+NXwztakaWjxZmy0jzVrQTcng3SC3n Ux5iz0YUCN1+yJ9ojcu4OyH/eshwFpXTgQDghec4bX/pxutb4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcEEPJv0lDS397hJfX4ng3njz6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTUwNDIwZmMtMTBiMC0z YWVkLThkYjgtZjNlYmYwMDJjYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJ2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrG8lBCFXaOfzNNN/WRq415+XJgfDdqP09U2cvurGNdKLV2bt0w 8PIVKhSmOlsDfWykf/rDQE31bwVWVw2DJ4qAtpnYF7aBpv0/vbeEGlU45ckB38zW 3Ekp5KuGX8i1PUJli66lD+uz9cCU5NWK6bDU1MlxF5jFVZgLEhxfL7uYinl+dMhp p47jHu/vgiaQ/tBUzOORGHcCk/ha6baV3qjdxf+ikaFolbrVkqQoxYNIIg/LVQdQ yBS/NV+dqfyEc/Yazvc3DOOsJTfxCqh3aIjVi4Ia1jhppDIXxwF5Ssmk2c0sjIH4 XqimZ75FlgtwVDLrIPrc5avk/3o5SyJKZiQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:26:32 2025 by rpki-client