$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa File: a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa (raw, json) Hash identifier: /r2OJMKvd9NPimzia9XvobwPgg3j5ML7Vy2F/EABBr4= Subject key identifier: 39:02:5B:19:DE:39:8F:92:E4:D2:2E:2B:7D:18:32:33:F6:4B:C6:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B461705AD960616C0DCF67400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 23673 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:05:ad:96:06:16:c0:dc:f6:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=39be9abc-0ab6-4e33-83e7-f9ceab473fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:98:03:5c:3c:77:61:8a:93:04:3a:7a:b9: 80:96:17:f1:ea:07:6c:d8:07:b1:9e:ba:0c:d7:e7: fb:32:53:7b:92:9f:86:55:33:df:92:22:cb:58:d7: 3b:50:ab:da:f2:b3:0a:cc:f4:07:e8:1d:9d:e9:4c: 83:20:e6:9f:f7:92:84:28:7c:9e:82:cb:5a:73:a5: 8b:34:f4:a0:d7:14:12:e1:5c:89:e4:64:04:68:9f: f4:54:51:9e:76:48:b5:63:ac:16:d5:d2:8c:13:ba: ac:e0:ac:dc:4b:45:f4:4f:24:d1:8a:57:13:e3:53: f6:12:c4:6b:bf:f3:6b:b5:66:f4:83:fa:35:ce:8b: 20:ce:5f:3b:9c:cc:57:00:8d:ab:f9:a4:76:3f:86: 92:6b:19:22:f2:24:6b:81:13:8d:e6:2a:87:2f:fb: 45:8a:8f:3f:dc:55:6c:ac:de:82:82:b4:0c:48:4f: be:38:d9:c0:8d:a4:7a:24:29:40:88:66:42:3e:46: c7:4b:c5:d8:61:93:49:b6:b8:47:52:66:db:02:72: 64:66:b8:3f:1e:b4:36:ce:9b:36:f6:df:52:fa:38: 11:23:fd:eb:9a:10:f4:f1:cf:fb:10:aa:6f:35:84: d9:7b:64:a6:72:49:bd:05:ff:74:6c:cc:54:91:56: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:5B:19:DE:39:8F:92:E4:D2:2E:2B:7D:18:32:33:F6:4B:C6:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:11:7e:d5:25:41:42:4d:01:b0:a2:a1:c5:74:f8:f6:77: 19:0f:2f:73:d3:21:38:39:dc:80:b1:f4:46:c2:51:c1:a3:a4: 29:fe:da:d3:7a:c7:fb:1c:da:aa:21:e9:40:ed:e9:3d:ff:17: 2a:f2:86:cc:60:71:2b:05:ac:a6:eb:ab:92:0a:11:4b:11:48: 9f:e4:59:dd:85:b1:56:67:36:63:45:c2:e9:fa:bc:b6:c0:fd: 7d:bf:e3:b8:60:57:d4:ee:b2:8b:83:e9:6e:d0:6d:db:4b:80: eb:8c:c1:87:e3:cb:a6:f0:ab:d8:0d:4b:00:51:54:2b:5b:f1: 6a:28:4e:79:c3:42:99:c0:77:c8:d5:ae:ae:35:1c:13:25:ba: bf:5c:37:77:fe:18:88:eb:c0:c9:6d:6c:f7:1b:4e:a3:1e:e4: 64:15:78:a2:ce:a6:7a:d1:35:e9:2e:85:39:fc:7b:ed:52:32: 21:58:8f:7a:c7:b5:d3:33:26:6b:0b:e7:15:c1:c7:fa:01:ac: c0:60:d7:a6:c0:e3:3e:87:a8:a9:88:64:8b:7d:b9:4d:e8:01: b1:09:2c:49:53:fb:42:03:a1:a0:a5:c9:2c:4f:74:c6:fb:b9: 9c:d0:0e:f9:e3:fb:72:18:c7:23:73:88:44:53:27:2b:07:ee: 33:5e:0a:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtGFwWtlgYWwNz2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzliZTlhYmMtMGFiNi00ZTMzLTgzZTctZjljZWFiNDczZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzeYA1w8d2GKkwQ6ermAlhfx6gds2AexnroM 1+f7MlN7kp+GVTPfkiLLWNc7UKva8rMKzPQH6B2d6UyDIOaf95KEKHyegstac6WL NPSg1xQS4VyJ5GQEaJ/0VFGedki1Y6wW1dKME7qs4KzcS0X0TyTRilcT41P2EsRr v/NrtWb0g/o1zosgzl87nMxXAI2r+aR2P4aSaxki8iRrgRON5iqHL/tFio8/3FVs rN6CgrQMSE++ONnAjaR6JClAiGZCPkbHS8XYYZNJtrhHUmbbAnJkZrg/HrQ2zps2 9t9S+jgRI/3rmhD08c/7EKpvNYTZe2Smckm9Bf90bMxUkVbn1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkCWxneOY+S5NIuK30YMjP2S8ajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTI1NTVmYjQtOWE5MS0z YmZkLTgzODktYzI0NWEzM2VhMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABOiEX7VJUFCTQGwoqHFdPj2dxkPL3PTITg53ICx9EbCUcGjpCn+ 2tN6x/sc2qoh6UDt6T3/FyryhsxgcSsFrKbrq5IKEUsRSJ/kWd2FsVZnNmNFwun6 vLbA/X2/47hgV9TusouD6W7QbdtLgOuMwYfjy6bwq9gNSwBRVCtb8WooTnnDQpnA d8jVrq41HBMlur9cN3f+GIjrwMltbPcbTqMe5GQVeKLOpnrRNekuhTn8e+1SMiFY j3rHtdMzJmsL5xXBx/oBrMBg16bA4z6HqKmIZIt9uU3oAbEJLElT+0IDoaClySxP dMb7uZzQDvnj+3IYxyNziERTJysH7jNeCv8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:49 2025 by rpki-client