$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa File: b8b253f2-c560-33b2-a373-229484b70e43.roa (raw, json) Hash identifier: o+MaUwXIEu+LxqNLF5RMuY+PiUf5A2ihNR/vG9q4Y/Y= Subject key identifier: AF:8D:92:C4:08:F6:A2:11:EC:07:8F:06:98:D2:DD:F8:68:C0:9F:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B60AB2DCE0DD4C806B60F9580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa Signing time: Wed 01 Oct 2025 13:30:12 +0000 ROA not before: Wed 01 Oct 2025 13:30:12 +0000 ROA not after: Tue 30 Dec 2025 14:30:12 +0000 asID: 14713 IP address blocks: 2001:470:4e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:ab:2d:ce:0d:d4:c8:06:b6:0f:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 1 13:30:12 2025 GMT Not After : Dec 30 14:30:12 2025 GMT Subject: CN=d89382ab-2fbf-44a0-aec9-a9b9daf9ffc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:7d:3e:da:a9:81:30:4d:a5:30:c8:6a:2c: f0:9b:64:95:2a:3d:f9:7e:9d:ab:b2:31:54:60:ba: 3d:43:47:af:fd:b1:19:d5:14:8e:ec:ec:04:5e:cd: b8:9c:b5:1d:c7:8c:44:43:24:ff:65:57:66:da:ff: 9c:10:69:12:82:2d:d1:23:c1:3f:9b:88:e4:76:3f: 46:a4:cb:7a:36:bc:00:0c:bf:71:f0:3a:4c:b8:cb: 74:68:89:5b:4f:cf:b1:96:aa:5f:5d:65:1f:97:de: 1c:7a:b3:44:b2:75:c0:ba:4c:24:c4:96:dc:3b:d2: a2:a1:ca:4d:87:0a:17:da:0f:67:76:60:e7:6d:27: f4:25:c8:48:ff:6e:92:9e:c1:82:84:a5:d4:b4:6e: da:f4:58:7c:58:07:6c:da:b4:53:e4:db:03:7c:3d: 7a:50:59:83:02:ca:a3:5d:df:2f:44:dd:d4:77:a0: 55:20:39:ef:81:ea:cd:61:8a:84:8f:90:76:c0:36: 8f:ef:4c:48:fe:0e:4a:75:af:92:5a:73:fc:2d:b7: 81:fb:76:1b:db:32:50:9e:49:85:99:7a:2c:22:83: d7:c5:97:c4:5c:45:66:59:e6:8b:df:8b:d9:a6:92: 07:4c:63:62:ce:ce:3b:04:6a:7e:94:70:ff:ee:84: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:92:C4:08:F6:A2:11:EC:07:8F:06:98:D2:DD:F8:68:C0:9F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a9:ed:43:3b:79:24:8d:da:53:81:4f:bb:4d:49:17:06:d8: 1c:42:14:19:9e:95:dc:c3:a7:1e:71:a1:dc:16:59:64:d2:00: 62:96:89:da:b8:9d:d8:95:37:69:03:4a:51:90:ea:3d:38:f5: 80:11:97:ff:db:d9:7a:b6:6f:bd:9f:69:5a:08:54:4f:a5:ed: ae:b6:70:06:a6:90:55:ac:26:4c:3e:c0:b8:60:e5:8d:77:1c: e1:82:c1:78:f3:2e:a2:f5:93:9c:1e:b1:7c:02:04:08:ae:ab: 2d:e6:1c:0a:cf:8c:c4:c5:c6:e5:db:d9:03:93:62:52:5a:93: 4a:df:71:fc:b8:17:f4:83:db:12:10:81:5d:9a:db:31:14:ac: 00:8f:ee:73:61:92:be:12:06:dd:57:39:10:f7:2d:bc:d8:02: aa:17:e4:61:9a:be:86:e6:37:3f:7d:c6:54:ee:0e:46:84:1d: 6d:42:6f:36:00:2e:1b:04:30:e1:83:5f:83:fe:68:ef:20:95: 94:f4:16:fd:b7:2d:0b:54:c9:61:0b:30:c6:ba:fc:a1:26:87: 94:f4:9f:c3:99:1e:e1:0f:70:b8:ae:b3:ad:76:83:8b:83:b2: af:81:9a:77:f9:4c:01:87:b8:44:8f:1a:67:b1:a5:8b:18:e3: f0:80:9d:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtgqy3ODdTIBrYPlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwMTEzMzAxMloXDTI1MTIzMDE0MzAxMlowLzEtMCsGA1UEAxMk ZDg5MzgyYWItMmZiZi00NGEwLWFlYzktYTliOWRhZjlmZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC59PtqpgTBNpTDIaizwm2SVKj35fp2rsjFU YLo9Q0ev/bEZ1RSO7OwEXs24nLUdx4xEQyT/ZVdm2v+cEGkSgi3RI8E/m4jkdj9G pMt6NrwADL9x8DpMuMt0aIlbT8+xlqpfXWUfl94cerNEsnXAukwkxJbcO9KiocpN hwoX2g9ndmDnbSf0JchI/26SnsGChKXUtG7a9Fh8WAds2rRT5NsDfD16UFmDAsqj Xd8vRN3Ud6BVIDnvgerNYYqEj5B2wDaP70xI/g5Kda+SWnP8LbeB+3Yb2zJQnkmF mXosIoPXxZfEXEVmWeaL34vZppIHTGNizs47BGp+lHD/7oTCUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+NksQI9qIR7AePBpjS3fhowJ+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjhiMjUzZjItYzU2MC0z M2IyLWEzNzMtMjI5NDg0YjcwZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCp7UM7eSSN2lOBT7tNSRcG2BxCFBmeldzDpx5xodwWWWTSAGKW idq4ndiVN2kDSlGQ6j049YARl//b2Xq2b72faVoIVE+l7a62cAamkFWsJkw+wLhg 5Y13HOGCwXjzLqL1k5wesXwCBAiuqy3mHArPjMTFxuXb2QOTYlJak0rfcfy4F/SD 2xIQgV2a2zEUrACP7nNhkr4SBt1XORD3LbzYAqoX5GGavobmNz99xlTuDkaEHW1C bzYALhsEMOGDX4P+aO8glZT0Fv23LQtUyWELMMa6/KEmh5T0n8OZHuEPcLius612 g4uDsq+Bmnf5TAGHuESPGmexpYsY4/CAnYs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:40:43 2025 by rpki-client