$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae47f2b5-6b67-309c-95a1-243bbd349ad8.roa File: ae47f2b5-6b67-309c-95a1-243bbd349ad8.roa (raw, json) Hash identifier: oOL5v58NSej+w68JqFYY0UTopvLUB5ZJHLiESY2VntM= Subject key identifier: 39:65:2F:7F:51:90:5C:A6:0E:63:4D:EF:85:50:6F:CB:15:70:32:8C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1AD1B04651D3EFEF211D6740 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae47f2b5-6b67-309c-95a1-243bbd349ad8.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 44065 IP address blocks: 2001:470:474::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:46:51:d3:ef:ef:21:1d:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=96a4288f-47db-4b0c-908a-dd822a14a42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:b5:d0:b5:6c:17:4b:34:64:31:60:74:23: 66:83:fb:28:b9:a8:06:08:b8:c1:bb:8c:ae:60:1f: 33:5f:7b:30:1e:d3:4b:dc:cf:f4:3f:06:a1:0d:3e: 3b:69:03:f7:a8:32:5e:4a:ec:96:06:74:d8:79:da: 58:1c:99:8f:90:dc:46:93:ce:df:5f:d2:4b:a8:7a: 71:0d:d6:00:65:74:e2:9e:9f:9c:2f:1b:5f:54:91: a0:5d:db:6f:e5:e8:cd:37:51:44:8b:3a:e9:0e:48: 8c:de:6c:52:b1:46:c6:a9:0d:b7:7b:bc:56:53:f2: 84:85:61:95:a8:24:5c:50:eb:e4:c8:3a:56:a9:df: 21:fa:71:f6:6d:9f:cd:30:c1:e1:c7:80:71:c8:bf: bc:19:e7:4e:ca:94:5e:34:c3:39:41:a0:62:d2:03: c1:13:89:1d:d4:24:06:f7:be:6f:b4:7e:f1:1b:13: 8f:46:a2:c3:f2:cc:69:f0:e9:5a:4f:62:d3:e0:b4: 9a:d3:55:db:76:da:a1:f1:8a:db:85:5f:b6:f7:a1: 1d:bb:c1:76:8d:d9:95:7f:67:b4:ce:3a:55:26:8e: 12:f4:14:a8:9e:3c:bb:75:f8:5c:3b:c6:a8:6d:2c: 24:c9:98:47:af:1b:78:17:cc:6a:5e:f6:24:12:21: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:2F:7F:51:90:5C:A6:0E:63:4D:EF:85:50:6F:CB:15:70:32:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae47f2b5-6b67-309c-95a1-243bbd349ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:474::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7b:36:30:56:5e:32:5c:c6:1f:6d:f7:e3:a7:06:b2:c8:ec: 7a:81:63:39:44:45:6e:22:08:9b:d4:6a:8c:d3:29:65:e5:94: ad:6c:35:81:3f:7d:65:3b:83:dd:a3:70:35:59:e1:43:0a:0c: d2:57:fa:d2:e5:1d:57:2c:32:03:dc:f4:7d:7a:e8:d0:42:08: b8:00:b5:44:0d:c2:f8:22:7f:ba:c3:40:12:36:f2:a2:eb:35: 35:62:74:49:fc:52:a0:d1:5d:3d:21:cf:81:6b:a4:72:ba:17: f5:8b:7b:a0:a3:f0:99:51:19:e7:5c:bb:a3:1a:d4:e8:70:36: 4b:e9:7c:1d:fb:c1:a5:08:1e:e0:92:f4:b9:52:2b:02:09:c9: 8d:f8:26:2b:7c:05:54:0a:c4:b1:23:18:22:b9:af:3e:4e:c7: a7:ea:00:a7:7c:4f:0a:41:db:6d:28:98:12:82:83:72:97:6b: fa:f9:22:62:f5:20:04:7e:2e:96:57:79:de:37:79:38:41:d4: 01:ce:ee:ab:e2:22:78:aa:a6:e8:da:77:a0:7a:4d:a9:dc:cd: c2:bc:c2:bd:07:1d:0f:04:b8:cd:ab:8f:0a:92:4c:f7:46:20: 63:e3:22:ed:14:1f:53:9e:11:97:ef:61:01:92:f4:3b:ba:33: a3:a1:98:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bBGUdPv7yEdZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OTZhNDI4OGYtNDdkYi00YjBjLTkwOGEtZGQ4MjJhMTRhNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWS10LVsF0s0ZDFgdCNmg/souagGCLjBu4yu YB8zX3swHtNL3M/0PwahDT47aQP3qDJeSuyWBnTYedpYHJmPkNxGk87fX9JLqHpx DdYAZXTinp+cLxtfVJGgXdtv5ejNN1FEizrpDkiM3mxSsUbGqQ23e7xWU/KEhWGV qCRcUOvkyDpWqd8h+nH2bZ/NMMHhx4BxyL+8GedOypReNMM5QaBi0gPBE4kd1CQG 975vtH7xGxOPRqLD8sxp8OlaT2LT4LSa01Xbdtqh8YrbhV+296Edu8F2jdmVf2e0 zjpVJo4S9BSonjy7dfhcO8aobSwkyZhHrxt4F8xqXvYkEiGMHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDllL39RkFymDmNN74VQb8sVcDKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWU0N2YyYjUtNmI2Ny0z MDljLTk1YTEtMjQzYmJkMzQ5YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAR0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABt7NjBWXjJcxh9t9+OnBrLI7HqBYzlERW4iCJvUaozTKWXllK1s NYE/fWU7g92jcDVZ4UMKDNJX+tLlHVcsMgPc9H166NBCCLgAtUQNwvgif7rDQBI2 8qLrNTVidEn8UqDRXT0hz4FrpHK6F/WLe6Cj8JlRGedcu6Ma1OhwNkvpfB37waUI HuCS9LlSKwIJyY34Jit8BVQKxLEjGCK5rz5Ox6fqAKd8TwpB220omBKCg3KXa/r5 ImL1IAR+LpZXed43eThB1AHO7qviIniqpujad6B6TanczcK8wr0HHQ8EuM2rjwqS TPdGIGPjIu0UH1OeEZfvYQGS9Du6M6OhmM4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:08 2025 by rpki-client