$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa File: a4625a79-a318-3fe2-8612-a6f7b327d51c.roa (raw, json) Hash identifier: YvGgjE+89i9A1z6+FVelJhOgBrHDfVpS3z+YLUodzgU= Subject key identifier: 6E:0C:CA:E4:BF:AC:18:21:A1:F8:FC:A5:1B:21:C5:95:D7:56:2B:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B3821AA9C2BB25C60BCEA05C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 51259 IP address blocks: 2001:470:398::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:aa:9c:2b:b2:5c:60:bc:ea:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=9ba558c6-1cb4-448a-b1fd-f5ee41971c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:7f:05:4a:39:30:72:98:36:18:c7:b0:98: af:2d:77:f8:af:91:fe:05:07:9e:01:c9:d0:7f:82: 65:f2:44:51:a2:3d:8e:a8:6c:0e:44:e4:0d:6d:45: f4:b6:e1:79:0a:95:47:b4:d7:ad:0f:a1:4b:30:20: 48:94:9a:1c:aa:c8:68:03:59:c7:57:be:f7:03:f6: 75:58:12:8e:a2:fb:59:6d:c6:f9:f6:5a:fc:6f:5d: c6:f0:dd:50:5e:71:fb:d8:08:18:e0:ed:4a:8e:f3: 0c:65:cb:fd:b1:0a:95:dc:4f:de:9a:d7:f0:7e:fc: 25:83:50:29:28:c5:3a:a0:38:b6:0c:14:0b:b1:c1: d6:a3:55:c8:db:4c:82:ef:74:53:33:c6:e1:93:30: 37:1e:f9:57:0f:ae:5c:c9:4a:82:b4:2e:36:2e:81: e2:d8:27:0c:75:26:1f:db:3b:46:d9:87:86:8b:94: ff:f0:f9:9b:52:16:2b:29:bd:c6:ee:b6:58:31:5e: 47:f9:dc:81:69:77:ed:c1:44:01:ba:89:1a:9b:0b: 92:3e:c9:35:ee:df:60:12:c9:5e:ab:1d:21:54:34: 5a:fc:bc:e6:4c:61:83:1b:93:41:57:f3:b6:d1:5e: e6:ea:1c:78:83:46:b0:03:ec:2e:24:c0:05:96:9e: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0C:CA:E4:BF:AC:18:21:A1:F8:FC:A5:1B:21:C5:95:D7:56:2B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4625a79-a318-3fe2-8612-a6f7b327d51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:398::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:54:b5:58:2e:9d:9a:eb:15:e9:96:9f:ed:04:06:ac:9f:b2: 35:55:45:78:e1:64:8d:ba:e8:e6:fb:f8:6d:60:2b:a2:fc:9b: 38:4f:6b:ad:f0:8a:89:8e:1a:21:e3:8d:45:b1:ef:79:49:2b: c4:02:43:60:cc:b3:4f:c4:66:a3:b1:c9:7a:f8:ac:3c:06:1f: 32:cd:56:47:3d:ab:9d:b2:0e:7b:28:c0:bb:92:da:6a:48:0d: 3f:7b:7a:e0:3a:8b:3f:30:25:a6:6a:58:74:79:05:b1:1e:08: d2:d8:ec:0c:cf:e0:91:b3:d2:77:96:60:be:cc:cb:d9:b6:7f: 5f:57:bd:1e:2b:ed:c5:56:13:64:13:33:5a:27:e1:c1:05:94: f5:51:9a:ad:88:81:85:98:52:ed:8c:2a:a0:b8:11:f0:2b:df: 76:67:bb:47:18:d7:dd:d2:e5:42:84:ba:b7:62:49:8a:fb:b1: 14:92:f8:01:2c:26:e8:51:ba:4d:78:05:26:95:d6:15:c7:34: e1:07:3e:4c:65:a2:c3:4e:df:4c:5d:3c:20:db:9b:ff:fe:c2: 21:cd:30:f9:46:90:cd:4d:3a:16:b5:be:b0:16:a8:ec:78:9f: 3b:30:c1:28:87:90:2a:83:0b:a1:01:0e:f4:b9:87:1a:dd:92: 9c:79:6a:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4IaqcK7JcYLzqBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk OWJhNTU4YzYtMWNiNC00NDhhLWIxZmQtZjVlZTQxOTcxYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz05/BUo5MHKYNhjHsJivLXf4r5H+BQeeAcnQ f4Jl8kRRoj2OqGwOROQNbUX0tuF5CpVHtNetD6FLMCBIlJocqshoA1nHV773A/Z1 WBKOovtZbcb59lr8b13G8N1QXnH72AgY4O1KjvMMZcv9sQqV3E/emtfwfvwlg1Ap KMU6oDi2DBQLscHWo1XI20yC73RTM8bhkzA3HvlXD65cyUqCtC42LoHi2CcMdSYf 2ztG2YeGi5T/8PmbUhYrKb3G7rZYMV5H+dyBaXftwUQBuokamwuSPsk17t9gEsle qx0hVDRa/LzmTGGDG5NBV/O20V7m6hx4g0awA+wuJMAFlp5RcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4MyuS/rBghofj8pRshxZXXViuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQ2MjVhNzktYTMxOC0z ZmUyLTg2MTItYTZmN2IzMjdkNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRUtVgunZrrFemWn+0EBqyfsjVVRXjhZI266Ob7+G1gK6L8mzhP a63wiomOGiHjjUWx73lJK8QCQ2DMs0/EZqOxyXr4rDwGHzLNVkc9q52yDnsowLuS 2mpIDT97euA6iz8wJaZqWHR5BbEeCNLY7AzP4JGz0neWYL7My9m2f19XvR4r7cVW E2QTM1on4cEFlPVRmq2IgYWYUu2MKqC4EfAr33Znu0cY193S5UKEurdiSYr7sRSS +AEsJuhRuk14BSaV1hXHNOEHPkxlosNO30xdPCDbm//+wiHNMPlGkM1NOha1vrAW qOx4nzswwSiHkCqDC6EBDvS5hxrdkpx5aqo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:34 2025 by rpki-client