$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa File: bd0b562d-963b-3005-9a83-1a14e6529986.roa (raw, json) Hash identifier: ChoWX//m5xFxDAEksQ02KltiEAbVtxxBViSRF+wUjzE= Subject key identifier: 20:6F:A0:D3:D0:01:1D:9E:9B:68:A4:1F:FC:1C:B8:C7:93:FD:7B:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B2761820F3545137093C6E580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 54798 IP address blocks: 2001:470:3b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:82:0f:35:45:13:70:93:c6:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=9452eaf6-45ae-477a-b944-82e1161ac4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6f:13:81:78:96:bd:a5:4c:b1:ba:8e:1a:94: 20:5a:8d:32:4d:36:c3:b5:b8:2c:8e:66:e7:82:63: f7:a0:cd:e2:4b:b9:e1:fd:a1:3c:ba:44:68:ae:6b: 5c:5b:4a:60:67:2e:dc:38:3f:d2:33:f4:b2:4e:6b: 15:51:49:4d:6f:7a:be:1d:c5:a8:b5:5e:f7:d7:e6: f7:de:22:68:72:51:a4:79:38:17:10:2a:e4:66:16: ed:a8:28:4c:05:f9:41:53:ef:d7:d5:98:b8:5d:49: 2d:75:1e:22:4f:34:20:7f:1d:d6:1a:83:7a:e8:22: 89:d6:1f:26:df:c0:cc:8e:3b:5f:28:2b:ab:95:7c: e9:30:f4:ff:a5:e6:54:0d:26:ad:11:30:66:12:49: fd:bb:15:57:6e:a4:a8:9f:30:29:b1:5f:2f:69:3b: dd:54:ed:0c:5b:2a:74:f1:c6:2b:64:bd:3f:ec:93: db:59:47:c5:e6:86:b7:2c:5d:5d:e6:25:82:b7:eb: c5:ac:64:1e:49:e6:a9:08:08:f8:1a:db:09:e3:00: 70:a8:63:fa:57:2d:8a:5e:25:f7:42:49:4e:0b:c5: ad:29:07:2a:b0:c7:56:48:77:b7:51:6d:50:b6:c8: 0b:50:41:dd:e1:ac:20:0d:5b:4b:0d:1b:c1:3c:e2: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:A0:D3:D0:01:1D:9E:9B:68:A4:1F:FC:1C:B8:C7:93:FD:7B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bd:57:95:8f:68:b1:1d:34:25:fe:7f:a6:5e:37:59:db:af: da:e6:74:1c:ac:64:c6:08:92:d8:d9:45:24:c7:b1:12:dd:54: 6f:f3:76:fc:2f:42:6f:75:bf:98:56:51:1d:b1:a8:5c:7a:a8: 8d:b1:eb:b0:b3:0c:32:67:a2:a1:2c:0e:48:13:d5:e6:9c:07: d1:58:3d:4b:84:b9:a7:92:4e:5a:c0:1e:c3:97:f8:94:7a:c9: b3:54:3d:f7:85:ca:1b:98:8c:2d:3b:61:bd:34:b7:5c:88:88: 0a:52:22:bc:31:d6:9d:df:e7:ed:fb:89:d1:b9:c0:6f:e2:6d: 61:ca:3f:23:82:6f:50:b8:80:7f:77:db:5c:d8:35:54:2b:d4: 80:34:36:fd:ca:a1:16:d6:9c:ca:ca:e1:92:f5:75:73:ad:17: bf:09:35:ec:c0:fa:73:2b:4e:01:33:a4:37:a4:4e:71:c5:6c: 6a:72:48:5a:b4:18:c5:75:56:3a:b9:fb:73:59:3d:6b:20:2a: dd:4c:ac:f1:27:1c:42:32:92:51:02:6a:21:b6:13:4a:b5:d7: f4:be:15:1d:41:56:56:d0:80:5c:ab:47:f2:b4:c2:2f:7e:d6: 81:04:b3:73:07:25:34:49:54:2d:7a:4d:c5:f9:3d:0c:46:b6: 5b:04:e6:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsnYYIPNUUTcJPG5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OTQ1MmVhZjYtNDVhZS00NzdhLWI5NDQtODJlMTE2MWFjNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W8TgXiWvaVMsbqOGpQgWo0yTTbDtbgsjmbn gmP3oM3iS7nh/aE8ukRormtcW0pgZy7cOD/SM/SyTmsVUUlNb3q+HcWotV731+b3 3iJoclGkeTgXECrkZhbtqChMBflBU+/X1Zi4XUktdR4iTzQgfx3WGoN66CKJ1h8m 38DMjjtfKCurlXzpMPT/peZUDSatETBmEkn9uxVXbqSonzApsV8vaTvdVO0MWyp0 8cYrZL0/7JPbWUfF5oa3LF1d5iWCt+vFrGQeSeapCAj4GtsJ4wBwqGP6Vy2KXiX3 QklOC8WtKQcqsMdWSHe3UW1QtsgLUEHd4awgDVtLDRvBPOJ6rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBvoNPQAR2em2ikH/wcuMeT/XtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmQwYjU2MmQtOTYzYi0z MDA1LTlhODMtMWExNGU2NTI5OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFK9V5WPaLEdNCX+f6ZeN1nbr9rmdBysZMYIktjZRSTHsRLdVG/z dvwvQm91v5hWUR2xqFx6qI2x67CzDDJnoqEsDkgT1eacB9FYPUuEuaeSTlrAHsOX +JR6ybNUPfeFyhuYjC07Yb00t1yIiApSIrwx1p3f5+37idG5wG/ibWHKPyOCb1C4 gH9321zYNVQr1IA0Nv3KoRbWnMrK4ZL1dXOtF78JNezA+nMrTgEzpDekTnHFbGpy SFq0GMV1Vjq5+3NZPWsgKt1MrPEnHEIyklECaiG2E0q11/S+FR1BVlbQgFyrR/K0 wi9+1oEEs3MHJTRJVC16TcX5PQxGtlsE5tw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:19 2025 by rpki-client