$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa File: aafa7218-9f55-3fdd-b76a-aefa27a87775.roa (raw, json) Hash identifier: bEGdqWJZ+bsX619WaPT/fMdKb0ejO/J0rwQNmcQGoKg= Subject key identifier: B8:B8:D7:C3:D0:50:FF:25:42:DF:EE:57:AF:1A:02:A0:D6:67:C4:F3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1F01807900DF47368FA58400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 40300 IP address blocks: 2001:470:266::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:80:79:00:df:47:36:8f:a5:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=84a4b37e-b6d9-4742-bd67-cc763b3987ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:1d:e2:cf:0c:13:e4:c8:e4:75:54:bb:bd: 5c:72:a5:dc:6f:e1:73:8c:ec:3a:13:7e:82:3e:d1: cc:9f:eb:23:4e:3a:6e:68:e0:fa:fc:06:10:b7:c6: fe:ef:0b:50:33:e3:00:02:50:b7:1e:91:b5:76:dd: 27:67:78:82:46:43:c3:d4:d3:ce:61:ef:86:8a:67: 23:87:67:2e:b4:7a:51:aa:5b:e9:a9:52:c0:b2:35: 57:a9:4d:a3:6b:a0:62:89:1d:df:d6:a1:56:c2:49: fa:f4:2b:e2:9b:6a:53:ac:7b:c2:ff:57:62:8a:8a: 3e:9d:ae:17:50:78:9f:5d:30:be:ba:14:d6:97:14: 3d:c0:d0:49:3d:cf:36:c1:6f:20:aa:a7:88:27:cd: 66:a1:5a:17:61:33:54:96:c1:17:8f:43:e5:39:c1: 6b:4e:d2:06:67:fc:29:a6:df:c5:b8:21:10:14:f0: eb:cd:f5:b1:9a:6e:3f:29:32:1e:ed:75:54:09:c8: 53:33:2c:04:5d:e3:41:c2:f6:3b:d6:ad:61:83:62: eb:0e:ab:c0:38:a2:0b:75:65:96:c8:30:e9:20:ba: 6f:42:81:8c:1b:f2:a6:9e:8b:d4:a3:02:b1:da:f7: 05:f7:72:bf:98:69:81:ac:4e:45:3e:f5:12:55:48: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:D7:C3:D0:50:FF:25:42:DF:EE:57:AF:1A:02:A0:D6:67:C4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:266::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:00:db:ef:e5:6b:28:dd:cd:a9:d8:f8:e8:5a:fa:47:d5:7b: 7f:8b:70:f7:a0:64:a3:ea:e7:be:bf:44:3f:37:d0:39:a2:ea: 12:66:1c:d7:94:0d:0a:5b:ed:78:5c:8b:ea:cb:bb:46:1e:f3: 2d:fd:34:d8:e6:3d:f0:1b:4c:1b:45:1b:c8:b6:89:c3:e3:63: 74:d0:85:5d:5e:bd:19:5f:62:1d:b2:ed:c6:e8:0b:42:20:7a: 3e:d7:f2:6d:42:c9:87:13:a7:f5:9c:9f:05:3e:52:c7:0d:5a: a8:c7:49:93:17:70:72:92:5d:36:65:80:25:99:df:00:66:bb: 3b:0c:a8:8d:d1:66:bd:33:d2:0d:ec:7a:d7:45:9b:a9:90:7e: 81:72:9c:4f:b5:a4:36:c1:ce:7f:3b:1a:91:15:48:48:ac:84: 9a:b8:c5:a6:3a:f8:dc:82:04:d8:9d:3a:b1:ce:59:a8:de:d5: ef:23:c5:f7:da:27:20:56:d7:40:f7:2d:21:1a:93:a1:82:06: a2:5f:c0:ee:03:69:5b:ff:5b:e1:63:1c:fd:b3:cc:15:6e:61: 5a:30:c6:91:d1:c3:fd:fb:eb:ec:5b:1c:64:26:96:54:94:bd: 88:dc:5e:b6:81:01:de:06:dd:bc:b1:3f:ce:0f:02:3c:7f:4a: 15:a4:7c:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAYB5AN9HNo+lhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODRhNGIzN2UtYjZkOS00NzQyLWJkNjctY2M3NjNiMzk4N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3kd4s8ME+TI5HVUu71ccqXcb+FzjOw6E36C PtHMn+sjTjpuaOD6/AYQt8b+7wtQM+MAAlC3HpG1dt0nZ3iCRkPD1NPOYe+Gimcj h2cutHpRqlvpqVLAsjVXqU2ja6BiiR3f1qFWwkn69Cvim2pTrHvC/1diioo+na4X UHifXTC+uhTWlxQ9wNBJPc82wW8gqqeIJ81moVoXYTNUlsEXj0PlOcFrTtIGZ/wp pt/FuCEQFPDrzfWxmm4/KTIe7XVUCchTMywEXeNBwvY71q1hg2LrDqvAOKILdWWW yDDpILpvQoGMG/KmnovUowKx2vcF93K/mGmBrE5FPvUSVUhD9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLi418PQUP8lQt/uV68aAqDWZ8TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWFmYTcyMTgtOWY1NS0z ZmRkLWI3NmEtYWVmYTI3YTg3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcA2+/layjdzanY+Oha+kfVe3+LcPegZKPq576/RD830Dmi6hJm HNeUDQpb7Xhci+rLu0Ye8y39NNjmPfAbTBtFG8i2icPjY3TQhV1evRlfYh2y7cbo C0Igej7X8m1CyYcTp/WcnwU+UscNWqjHSZMXcHKSXTZlgCWZ3wBmuzsMqI3RZr0z 0g3setdFm6mQfoFynE+1pDbBzn87GpEVSEishJq4xaY6+NyCBNidOrHOWaje1e8j xffaJyBW10D3LSEak6GCBqJfwO4DaVv/W+FjHP2zzBVuYVowxpHRw/376+xbHGQm llSUvYjcXraBAd4G3byxP84PAjx/ShWkfOs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:50 2025 by rpki-client