$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1faf3a5-ae22-3898-aab0-9b33167f5f2b.roa File: b1faf3a5-ae22-3898-aab0-9b33167f5f2b.roa (raw, json) Hash identifier: 7VqZvy4H07X/phlWxRcgndVNZfvlf1tj+9yw3KrrvgM= Subject key identifier: 23:4B:0E:0E:F5:68:FB:4B:E9:07:3D:25:38:D3:D7:E6:76:D6:E4:1C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B67A5E728769A0C3489A5B7E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1faf3a5-ae22-3898-aab0-9b33167f5f2b.roa Signing time: Sat 04 Oct 2025 01:30:14 +0000 ROA not before: Sat 04 Oct 2025 01:30:14 +0000 ROA not after: Fri 02 Jan 2026 02:30:14 +0000 asID: 57455 IP address blocks: 2001:470:3a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:a5:e7:28:76:9a:0c:34:89:a5:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 4 01:30:14 2025 GMT Not After : Jan 2 02:30:14 2026 GMT Subject: CN=816686a1-6cd5-4cd9-a2ef-3ca77f8f9b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8b:91:e6:50:0d:be:bb:09:b7:03:49:c8:af: 39:ed:fa:b6:6c:64:d4:5b:51:a3:23:0f:2e:0b:0d: c1:56:04:93:01:92:f8:4b:35:e4:8b:48:1d:63:77: fd:24:ef:f0:cc:b4:25:36:e7:cf:64:c4:b9:87:63: 7f:5f:cc:8c:e2:e4:94:84:bf:af:5e:10:b4:09:c5: 34:df:4b:ef:ad:f7:cc:e2:22:a9:bf:ea:9d:fb:6c: 9d:de:73:7a:07:44:a2:88:b6:f7:ce:30:eb:96:70: d3:1c:f2:a8:a7:f2:d4:8e:9a:46:18:19:b4:bc:bd: b1:2f:e2:b4:4a:3e:46:04:74:e0:b3:11:2e:7f:08: 4b:a0:12:55:47:b3:be:8e:02:72:87:7d:87:cb:cc: 07:6e:29:7b:99:96:83:4e:06:23:91:a8:94:6f:66: 8b:50:f4:96:88:1f:88:44:19:8f:a2:1d:d5:2f:ca: 17:98:84:0e:f8:de:3e:0d:5c:ba:50:c1:69:0b:7d: 04:ed:94:5a:81:7c:e0:9b:54:a9:68:b5:9c:ca:14: 71:c2:bb:4f:22:50:31:30:14:03:82:19:35:26:40: b3:42:04:4b:6c:65:7d:2c:c2:be:06:a7:a0:7f:1c: 03:a4:c3:47:c5:7f:41:ec:d1:2f:69:3f:d0:a3:a2: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4B:0E:0E:F5:68:FB:4B:E9:07:3D:25:38:D3:D7:E6:76:D6:E4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1faf3a5-ae22-3898-aab0-9b33167f5f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0e:0b:97:c8:b6:b4:a0:9c:e4:b5:3f:78:d2:35:78:0d:9e: 3d:63:9b:81:49:d7:65:73:95:8e:a6:62:d0:b0:e6:b1:89:d8: c4:b4:76:89:6b:d3:fa:c8:ba:80:95:cc:5a:33:36:94:3d:f4: 31:e6:91:8c:bc:7f:b6:6a:fd:4f:95:72:6d:2e:98:e5:ca:b6: 82:8b:19:d1:41:87:64:1a:da:95:43:7a:fb:46:4c:7b:26:7f: 79:af:da:74:55:51:e9:e4:9d:9b:45:2d:1e:1a:06:9d:79:d5: 34:4b:99:2f:e1:8f:ae:7c:e0:56:62:ec:3a:e5:5b:f4:67:13: 35:bb:e7:9b:41:61:f5:91:e2:8e:92:1f:62:0c:86:3e:8c:da: 02:8d:54:f7:bc:a0:5b:f9:82:1f:95:68:e9:76:03:46:68:50: b6:bd:62:a0:ca:4c:eb:39:66:2a:2d:3c:94:30:95:f9:f5:ab: eb:3d:93:a7:eb:24:fb:c3:ca:10:31:47:5c:ad:b5:c0:9f:29: c7:67:08:7a:d3:f8:6a:74:13:59:28:08:42:a1:5f:8e:30:b0: f3:9b:bf:93:c6:97:b1:ba:67:15:9c:bb:2e:d1:c3:f8:9d:c2: 55:44:6c:f9:3a:c9:9e:c3:92:66:91:8f:fa:92:3f:b3:55:39: e1:a4:44:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtnpecodpoMNImlt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNDAxMzAxNFoXDTI2MDEwMjAyMzAxNFowLzEtMCsGA1UEAxMk ODE2Njg2YTEtNmNkNS00Y2Q5LWEyZWYtM2NhNzdmOGY5YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYuR5lANvrsJtwNJyK857fq2bGTUW1GjIw8u Cw3BVgSTAZL4SzXki0gdY3f9JO/wzLQlNufPZMS5h2N/X8yM4uSUhL+vXhC0CcU0 30vvrffM4iKpv+qd+2yd3nN6B0SiiLb3zjDrlnDTHPKop/LUjppGGBm0vL2xL+K0 Sj5GBHTgsxEufwhLoBJVR7O+jgJyh32Hy8wHbil7mZaDTgYjkaiUb2aLUPSWiB+I RBmPoh3VL8oXmIQO+N4+DVy6UMFpC30E7ZRagXzgm1SpaLWcyhRxwrtPIlAxMBQD ghk1JkCzQgRLbGV9LMK+BqegfxwDpMNHxX9B7NEvaT/Qo6KXVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNLDg71aPtL6Qc9JTjT1+Z21uQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjFmYWYzYTUtYWUyMi0z ODk4LWFhYjAtOWIzMzE2N2Y1ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAOC5fItrSgnOS1P3jSNXgNnj1jm4FJ12VzlY6mYtCw5rGJ2MS0 dolr0/rIuoCVzFozNpQ99DHmkYy8f7Zq/U+Vcm0umOXKtoKLGdFBh2Qa2pVDevtG THsmf3mv2nRVUenknZtFLR4aBp151TRLmS/hj6584FZi7DrlW/RnEzW755tBYfWR 4o6SH2IMhj6M2gKNVPe8oFv5gh+VaOl2A0ZoULa9YqDKTOs5ZiotPJQwlfn1q+s9 k6frJPvDyhAxR1yttcCfKcdnCHrT+Gp0E1koCEKhX44wsPObv5PGl7G6ZxWcuy7R w/idwlVEbPk6yZ7DkmaRj/qSP7NVOeGkRP0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:04 2025 by rpki-client