$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa File: a60af33c-152e-390c-ad7b-28f10cb41641.roa (raw, json) Hash identifier: Qi317nwQzopRNKI3BL8xpDDkF9PJQwhpACGInvWOgvI= Subject key identifier: D2:BD:5D:44:B2:6C:0C:7D:6B:EF:2E:0C:7B:1D:82:90:51:3C:96:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0FA6C57704957E6268B47B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 36286 IP address blocks: 2001:470:472::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c5:77:04:95:7e:62:68:b4:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=c8afe2b0-b85f-4604-8cf9-6de4179122f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:7f:7e:47:f9:db:18:c5:7c:24:57:47:da: f3:14:29:6d:ba:fb:a9:fd:ad:01:eb:60:e3:9e:fa: b0:bb:5a:82:28:4d:fe:60:49:f5:48:1c:6d:5d:a8: 16:e2:9a:81:d6:c4:05:81:4f:5e:b1:18:29:98:99: d6:e6:e7:88:f0:f5:2d:f4:87:81:bc:67:ff:46:fe: 6a:f1:55:0c:81:3d:df:82:b0:da:76:f6:98:53:4e: 48:82:41:94:08:2a:4d:f2:ec:68:81:3b:ac:09:a4: 35:5b:7a:e6:17:6f:cb:44:61:87:a7:c0:51:71:ca: 41:5f:b2:80:c5:a5:5e:d2:ce:8b:e3:cd:2a:fa:e3: 4b:de:9e:06:32:92:2f:0f:f7:c9:33:b0:33:10:95: 37:4d:8c:79:eb:94:84:6a:40:82:c6:29:e5:a1:80: 63:4a:2e:e4:5a:68:48:bf:49:96:33:3c:c3:ba:b0: 6b:bb:6b:70:82:6c:0b:88:19:c7:83:c3:96:7f:d6: e9:9b:eb:7a:c1:b3:ea:ff:04:f3:bf:eb:e9:f7:7c: 28:04:b3:e4:6c:1d:5c:06:dc:8d:ea:75:0a:02:d9: d2:3e:3a:20:70:ef:e6:9a:3a:4f:fa:b6:ef:03:ab: b1:52:80:13:84:18:be:b4:a1:7c:d9:43:d8:2c:58: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:5D:44:B2:6C:0C:7D:6B:EF:2E:0C:7B:1D:82:90:51:3C:96:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:472::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:65:20:d8:21:89:a0:f6:d6:e4:c3:8e:2f:0d:fc:3f:da:a7: ce:2c:4a:33:a4:3a:f7:25:76:7f:b6:b4:b5:95:27:b0:28:8b: c3:cf:d5:4c:d1:b1:96:cf:59:3c:62:55:56:1c:24:74:52:6a: ae:3e:9b:74:8a:81:60:be:4a:a1:0d:1e:79:f6:be:58:46:16: b3:43:9b:fb:c8:e2:8a:cd:61:f5:63:3f:d3:ba:80:ff:85:0e: 89:d3:ec:69:5d:b1:c0:79:46:3a:e0:75:3f:c5:b4:5d:ba:64: 18:a7:1a:aa:9d:8d:ec:92:8f:98:94:a9:8e:29:5a:01:54:4d: 84:a0:0c:dd:59:3b:7a:cd:3c:58:9d:7a:bb:35:83:2f:f2:64: da:f5:af:1f:32:ea:ff:4a:12:6e:a3:08:be:f1:14:84:34:07: 63:b0:c6:ee:67:5d:76:e8:54:77:98:f3:b5:67:b1:a4:1f:aa: 3b:08:ea:2b:83:4c:d1:60:a5:42:44:46:7a:1f:bf:4b:bc:ed: fc:1d:fc:0d:06:17:a4:02:00:83:94:5d:f2:56:2a:ad:c7:ab: d6:40:c9:03:aa:91:3b:6b:4c:b7:4a:e9:21:30:02:91:b1:58: 12:57:de:72:02:45:e3:a6:92:20:fb:32:b9:7a:2e:c3:28:7c: 17:1d:79:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsPpsV3BJV+Ymi0e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YzhhZmUyYjAtYjg1Zi00NjA0LThjZjktNmRlNDE3OTEyMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzd/fkf52xjFfCRXR9rzFCltuvup/a0B62Dj nvqwu1qCKE3+YEn1SBxtXagW4pqB1sQFgU9esRgpmJnW5ueI8PUt9IeBvGf/Rv5q 8VUMgT3fgrDadvaYU05IgkGUCCpN8uxogTusCaQ1W3rmF2/LRGGHp8BRccpBX7KA xaVe0s6L480q+uNL3p4GMpIvD/fJM7AzEJU3TYx565SEakCCxinloYBjSi7kWmhI v0mWMzzDurBru2twgmwLiBnHg8OWf9bpm+t6wbPq/wTzv+vp93woBLPkbB1cBtyN 6nUKAtnSPjogcO/mmjpP+rbvA6uxUoAThBi+tKF82UPYLFgqnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNK9XUSybAx9a+8uDHsdgpBRPJZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTYwYWYzM2MtMTUyZS0z OTBjLWFkN2ItMjhmMTBjYjQxNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMFlINghiaD21uTDji8N/D/ap84sSjOkOvcldn+2tLWVJ7Aoi8PP 1UzRsZbPWTxiVVYcJHRSaq4+m3SKgWC+SqENHnn2vlhGFrNDm/vI4orNYfVjP9O6 gP+FDonT7GldscB5RjrgdT/FtF26ZBinGqqdjeySj5iUqY4pWgFUTYSgDN1ZO3rN PFiders1gy/yZNr1rx8y6v9KEm6jCL7xFIQ0B2Owxu5nXXboVHeY87VnsaQfqjsI 6iuDTNFgpUJERnofv0u87fwd/A0GF6QCAIOUXfJWKq3Hq9ZAyQOqkTtrTLdK6SEw ApGxWBJX3nICReOmkiD7Mrl6LsMofBcdeQo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:27:31 2025 by rpki-client