$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa File: c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa (raw, json) Hash identifier: 99QxhnS7DZ3mB0P8sI75v+4GKAs/XnBmsGbFiktes2Q= Subject key identifier: B9:C6:AA:10:82:1F:9E:85:F1:71:06:78:60:FA:C0:B4:66:9B:B3:AD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B16A1563ED319A483AF18F400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 22332 IP address blocks: 2001:470:42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:56:3e:d3:19:a4:83:af:18:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=aa8958e2-e2a3-4b1d-b388-d5bd2a30f7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:a0:94:38:13:5d:74:af:5a:42:35:0b:54: c8:f4:e4:82:14:51:dd:40:fe:60:d7:a4:47:58:85: 35:c0:c6:bf:b1:aa:af:83:e4:2e:d2:7e:27:79:75: 73:ce:1c:c9:59:f9:1e:68:f2:ab:36:26:99:9e:95: fb:b9:7c:4b:6f:3a:b4:4f:b1:68:c0:82:a5:92:87: 55:df:06:cf:3f:6d:3f:4d:86:94:65:b0:6e:2b:57: 46:90:ae:41:70:d8:ba:ce:5b:2c:57:f6:2a:02:c4: 5b:9e:4e:ff:1c:57:90:a4:2d:fb:2e:33:ea:1a:7b: 66:de:04:28:6e:3f:6b:46:c2:2b:85:9b:1c:60:19: cf:69:f7:99:ce:a5:b5:d6:78:5c:99:8d:54:00:a5: e4:88:91:ae:72:7d:ab:70:ec:e3:35:97:4d:75:97: 23:50:44:e7:fe:43:de:6c:db:a2:70:af:55:c1:02: ea:ff:c7:7e:d7:b3:f6:b4:ab:30:0d:d1:45:ac:1e: ea:ba:d4:98:0e:f7:06:c8:e9:2f:7c:79:ac:89:d1: 44:9d:f8:df:33:42:77:b0:9f:a2:f1:ee:a9:f8:17: 60:28:61:89:35:1d:04:8b:03:4b:ef:d0:52:b0:ae: ee:42:4a:b6:93:6a:06:f3:97:6c:7b:25:81:27:65: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C6:AA:10:82:1F:9E:85:F1:71:06:78:60:FA:C0:B4:66:9B:B3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b9:10:70:4b:14:51:5d:f2:c8:fc:7c:22:a7:24:53:18:aa: 5b:eb:e0:7a:9f:f4:b7:04:11:17:96:72:19:4c:fb:92:fd:85: f9:cd:1d:50:04:f0:88:85:4d:2c:0a:5f:e2:8a:6c:1a:2a:f7: d4:2e:fa:d2:2b:f8:29:cf:7b:a3:93:13:cd:a4:96:09:26:52: 40:8a:be:2b:71:5b:38:ee:7e:b2:b8:ed:ea:83:50:8b:69:18: e4:06:99:e6:c0:0d:7a:99:d3:81:7b:5f:45:13:5c:2f:5a:80: e1:62:41:aa:1c:85:26:1b:c7:0f:30:2e:b5:b8:28:ae:c1:39: 7c:63:ef:5d:ce:98:ad:7a:75:a1:fe:ed:33:b0:e8:19:4c:8a: f2:c0:ed:ea:03:16:44:f8:bc:fe:ed:e7:40:7d:55:7d:7d:f6: 78:6a:fc:15:8a:06:51:91:ae:fc:b6:2d:8a:8c:8d:58:d9:a2: 98:37:a8:44:7b:64:c7:c0:66:7c:22:f7:91:ee:0e:e6:74:84: 00:ed:05:75:e4:2f:b1:51:19:f2:d9:2f:6a:de:6d:df:4b:d4: d2:bd:fd:fe:19:45:cd:5f:b2:f6:4e:31:9b:55:e7:ae:34:0e: 77:7b:3f:c5:4e:cc:da:69:44:e0:87:cd:88:15:51:8c:99:62: 28:3d:de:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsWoVY+0xmkg68Y9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWE4OTU4ZTItZTJhMy00YjFkLWIzODgtZDViZDJhMzBmN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPOglDgTXXSvWkI1C1TI9OSCFFHdQP5g16RH WIU1wMa/saqvg+Qu0n4neXVzzhzJWfkeaPKrNiaZnpX7uXxLbzq0T7FowIKlkodV 3wbPP20/TYaUZbBuK1dGkK5BcNi6zlssV/YqAsRbnk7/HFeQpC37LjPqGntm3gQo bj9rRsIrhZscYBnPafeZzqW11nhcmY1UAKXkiJGucn2rcOzjNZdNdZcjUETn/kPe bNuicK9VwQLq/8d+17P2tKswDdFFrB7qutSYDvcGyOkvfHmsidFEnfjfM0J3sJ+i 8e6p+BdgKGGJNR0EiwNL79BSsK7uQkq2k2oG85dseyWBJ2XYgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLnGqhCCH56F8XEGeGD6wLRmm7OtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzhmNmViNjktMjhmMy0z Nzc0LWI4NzYtMDJlN2QxYTJmNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI65EHBLFFFd8sj8fCKnJFMYqlvr4Hqf9LcEEReWchlM+5L9hfnN HVAE8IiFTSwKX+KKbBoq99Qu+tIr+CnPe6OTE82klgkmUkCKvitxWzjufrK47eqD UItpGOQGmebADXqZ04F7X0UTXC9agOFiQaochSYbxw8wLrW4KK7BOXxj713OmK16 daH+7TOw6BlMivLA7eoDFkT4vP7t50B9VX199nhq/BWKBlGRrvy2LYqMjVjZopg3 qER7ZMfAZnwi95HuDuZ0hADtBXXkL7FRGfLZL2rebd9L1NK9/f4ZRc1fsvZOMZtV 5640Dnd7P8VOzNppROCHzYgVUYyZYig93ig= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:35 2025 by rpki-client