$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa File: d189f356-fc80-36a2-a374-23df4af2446f.roa (raw, json) Hash identifier: wr8ivA2RicCvBZiimtkX2rCbSF7DwYJhvAq2VbKA3yY= Subject key identifier: 2E:99:4B:B1:69:BD:8B:51:AD:CA:D2:6F:15:D6:6F:76:62:69:F4:89 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B52A77E7033EFFD3A8E39F840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 212054 IP address blocks: 2001:470:486::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7e:70:33:ef:fd:3a:8e:39:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=9ca68d6a-c61f-49f9-9cd8-92afb429292a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:ee:1a:86:9e:17:fa:41:03:7d:f7:27:71: 8f:1f:3e:54:ae:10:7a:b0:55:70:09:56:4e:b6:00: 3f:46:d1:91:9c:a0:d6:cd:8f:06:14:87:68:8c:79: 1d:6c:ff:6c:64:49:ae:9e:e9:5f:d9:7c:90:68:d6: 61:1d:88:c0:70:08:61:c9:4a:ab:81:67:a7:45:30: 85:15:c5:de:21:35:26:f5:8e:98:4c:d4:18:2b:b1: aa:f4:8a:63:ee:95:af:ba:61:06:b0:91:eb:72:5d: 6d:7c:77:7a:af:ab:ba:2e:99:20:06:8a:f6:f1:b9: af:60:75:75:48:a4:62:69:ee:9d:f7:6e:70:2a:f0: 47:0d:b0:95:36:ac:d3:c0:be:c3:14:a7:28:58:50: 62:f3:57:b4:9c:64:ca:54:51:97:a1:b0:ba:6b:9a: c6:4b:92:ee:5a:c6:01:01:fe:d1:98:77:5d:94:c2: be:14:b8:24:21:e6:75:4e:68:86:0a:5d:a3:c5:96: 66:d6:9a:36:c7:f8:65:b8:28:58:37:8d:5e:35:44: 2e:95:ce:01:7e:7c:7b:a2:d6:38:70:7a:69:a1:87: a5:7e:d8:fc:4a:d3:5f:1d:f5:9a:39:59:9e:cf:78: 5d:fa:4f:8a:5e:6f:6c:33:08:61:1f:a8:f4:25:d6: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:4B:B1:69:BD:8B:51:AD:CA:D2:6F:15:D6:6F:76:62:69:F4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:486::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:45:ab:bd:6a:c6:1c:14:65:23:19:d5:34:e4:df:bc:df:ec: 49:cb:84:85:37:66:5d:dc:de:13:4e:7a:4c:e2:99:16:ef:91: da:c5:9f:cb:83:b8:cc:aa:6a:b4:1e:3a:0a:65:34:60:a3:34: bc:11:78:77:23:9e:ca:29:cb:a0:a5:05:6d:a6:7f:11:3d:0d: 0d:83:3b:65:21:f5:f9:0f:fc:04:59:b5:10:ab:38:f8:99:1f: 9e:20:ce:4a:6f:d1:d4:e7:94:0e:0e:53:4f:a4:d6:f8:9b:d1: b4:65:3b:f3:1c:95:6a:c0:d1:8a:9f:a9:ef:69:91:10:20:66: e2:68:32:df:1d:86:d3:89:a0:8c:75:8a:d5:64:2d:7e:93:2a: 5e:6e:15:d8:ad:b2:e1:3c:c5:36:e0:e9:39:75:52:69:fa:11: 12:6d:e8:cb:97:6c:a4:20:b4:c2:10:6d:09:ea:4e:da:5c:bd: c1:21:42:3d:cc:2a:19:6b:c6:4c:98:e3:d4:fc:02:d1:79:29: 54:31:81:e2:21:85:35:5c:ce:dd:51:c5:66:29:4e:91:25:96: 9e:90:52:ff:8c:0f:16:46:6d:14:a0:65:e0:01:48:9f:43:90: 1a:69:3a:5d:24:fd:d6:a8:43:7b:9e:fc:da:0c:e6:d6:32:d3: 8d:26:c8:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp35wM+/9Oo45+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OWNhNjhkNmEtYzYxZi00OWY5LTljZDgtOTJhZmI0MjkyOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn33uGoaeF/pBA333J3GPHz5UrhB6sFVwCVZO tgA/RtGRnKDWzY8GFIdojHkdbP9sZEmunulf2XyQaNZhHYjAcAhhyUqrgWenRTCF FcXeITUm9Y6YTNQYK7Gq9Ipj7pWvumEGsJHrcl1tfHd6r6u6LpkgBor28bmvYHV1 SKRiae6d925wKvBHDbCVNqzTwL7DFKcoWFBi81e0nGTKVFGXobC6a5rGS5LuWsYB Af7RmHddlMK+FLgkIeZ1TmiGCl2jxZZm1po2x/hluChYN41eNUQulc4Bfnx7otY4 cHppoYelftj8StNfHfWaOVmez3hd+k+KXm9sMwhhH6j0JdaHcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6ZS7FpvYtRrcrSbxXWb3ZiafSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDE4OWYzNTYtZmM4MC0z NmEyLWEzNzQtMjNkZjRhZjI0NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL9Fq71qxhwUZSMZ1TTk37zf7EnLhIU3Zl3c3hNOekzimRbvkdrF n8uDuMyqarQeOgplNGCjNLwReHcjnsopy6ClBW2mfxE9DQ2DO2Uh9fkP/ARZtRCr OPiZH54gzkpv0dTnlA4OU0+k1vib0bRlO/MclWrA0Yqfqe9pkRAgZuJoMt8dhtOJ oIx1itVkLX6TKl5uFditsuE8xTbg6Tl1Umn6ERJt6MuXbKQgtMIQbQnqTtpcvcEh Qj3MKhlrxkyY49T8AtF5KVQxgeIhhTVczt1RxWYpTpEllp6QUv+MDxZGbRSgZeAB SJ9DkBppOl0k/daoQ3ue/NoM5tYy040myFw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:22 2025 by rpki-client