$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e397ddeb-6eef-3e7d-a75b-cfa900cd41d7.roa File: e397ddeb-6eef-3e7d-a75b-cfa900cd41d7.roa (raw, json) Hash identifier: FLRbZRTQcHOyD9rk2T77Z3BdZdEkjpCIn1wehYzyZmQ= Subject key identifier: BE:98:80:73:91:F9:8B:FD:31:74:1A:DA:84:EC:B7:27:96:10:2F:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B64CE37F6DDF0A1A2D2C5A980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e397ddeb-6eef-3e7d-a75b-cfa900cd41d7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 31788 IP address blocks: 2001:470:372::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:37:f6:dd:f0:a1:a2:d2:c5:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cd56ef69-a315-4535-93bd-763d49d08c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:14:22:fd:c0:07:de:7e:95:07:e0:7a:89: 3a:c3:f8:db:5c:9f:ac:51:af:d9:70:97:e9:e2:65: b5:56:bd:73:09:89:f8:3b:2c:26:83:ba:d6:90:4a: 9a:bf:5f:bd:e0:2e:23:66:f6:9b:20:d3:a5:2b:7a: 74:69:37:34:f3:9b:47:df:1c:d3:8e:c3:a9:fa:70: d5:99:fb:c3:b4:8c:ee:d7:24:d3:30:41:4c:ea:9c: 45:52:88:ac:c9:0d:20:5d:1b:d8:dc:25:97:33:68: b1:1a:c0:4d:7a:39:c5:ae:97:5e:54:93:b4:d6:6d: 99:af:fb:03:00:af:ca:30:69:ad:11:6f:2f:0a:ef: 60:39:f1:06:32:82:03:b9:e2:b0:fb:f2:99:0e:48: 17:f1:84:26:c5:2b:60:31:10:a4:b0:bc:18:42:01: 07:86:75:c2:80:e9:dc:ba:4e:60:9f:86:f8:62:2e: 2d:7a:f6:75:8d:b0:d8:5f:3a:16:12:bf:54:44:9b: 0d:d1:2f:20:a7:0d:8f:5f:b0:fd:be:84:c1:fc:6b: 43:49:f1:99:02:8a:6e:60:22:c8:cd:ba:89:cc:3e: 15:89:28:5c:8d:ef:18:8a:28:34:1c:d7:66:c7:93: a0:f3:bd:ce:9f:eb:e0:a9:0f:e5:48:65:1a:29:06: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:98:80:73:91:F9:8B:FD:31:74:1A:DA:84:EC:B7:27:96:10:2F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e397ddeb-6eef-3e7d-a75b-cfa900cd41d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:372::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:5d:39:86:01:f9:b9:b0:f2:c0:85:45:25:82:e6:2c:3a: 9b:5a:50:e9:5d:e4:0a:19:fd:68:26:66:99:70:e2:ae:a9:d6: a7:8a:5b:02:46:8e:79:ac:0c:21:50:55:03:3f:39:af:13:da: bc:9d:9e:36:97:6f:86:d0:5d:63:55:79:d9:c6:99:26:3d:bb: 74:d8:8f:2c:03:e8:9b:0b:2b:61:e9:98:dc:e6:4d:fb:84:b1: 4d:8c:8d:e1:42:c1:98:58:60:30:21:b6:8c:cd:8c:9d:f1:e5: 4e:a1:62:29:25:ce:5b:cd:5f:b1:cb:90:81:91:36:60:08:a4: 06:59:ef:15:d5:b8:48:28:28:3c:74:8b:82:63:25:cc:92:c3: b1:dd:64:1a:5e:0b:5c:d2:0d:fb:28:f5:14:6a:95:05:f3:5e: cc:f0:21:b0:07:2a:c8:16:a6:ce:79:7b:bd:dd:3c:45:31:d5: 93:f3:a7:60:bb:ff:ed:6a:fe:4e:1b:c8:2a:f9:fe:37:85:f5: c4:73:1e:6d:89:a4:18:56:48:38:44:35:35:52:de:ce:3f:68: de:1e:2a:88:9a:d0:6e:0b:07:45:c4:f8:50:43:ca:d1:e6:fc: 0e:76:bb:bf:60:ea:2e:d9:41:02:1c:dc:23:49:41:b8:68:70: 41:41:f9:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjf23fChotLFqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2Q1NmVmNjktYTMxNS00NTM1LTkzYmQtNzYzZDQ5ZDA4YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCAUIv3AB95+lQfgeok6w/jbXJ+sUa/ZcJfp 4mW1Vr1zCYn4Oywmg7rWkEqav1+94C4jZvabINOlK3p0aTc085tH3xzTjsOp+nDV mfvDtIzu1yTTMEFM6pxFUoisyQ0gXRvY3CWXM2ixGsBNejnFrpdeVJO01m2Zr/sD AK/KMGmtEW8vCu9gOfEGMoIDueKw+/KZDkgX8YQmxStgMRCksLwYQgEHhnXCgOnc uk5gn4b4Yi4tevZ1jbDYXzoWEr9URJsN0S8gpw2PX7D9voTB/GtDSfGZAopuYCLI zbqJzD4ViShcje8Yiig0HNdmx5Og873On+vgqQ/lSGUaKQZWfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6YgHOR+Yv9MXQa2oTstyeWEC9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTM5N2RkZWItNmVlZi0z ZTdkLWE3NWItY2ZhOTAwY2Q0MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbpXTmGAfm5sPLAhUUlguYsOptaUOld5AoZ/WgmZplw4q6p1qeK WwJGjnmsDCFQVQM/Oa8T2rydnjaXb4bQXWNVednGmSY9u3TYjywD6JsLK2HpmNzm TfuEsU2MjeFCwZhYYDAhtozNjJ3x5U6hYiklzlvNX7HLkIGRNmAIpAZZ7xXVuEgo KDx0i4JjJcySw7HdZBpeC1zSDfso9RRqlQXzXszwIbAHKsgWps55e73dPEUx1ZPz p2C7/+1q/k4byCr5/jeF9cRzHm2JpBhWSDhENTVS3s4/aN4eKoia0G4LB0XE+FBD ytHm/A52u79g6i7ZQQIc3CNJQbhocEFB+RQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:28:13 2025 by rpki-client