$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa File: e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa (raw, json) Hash identifier: zSXh1sAk0+ZcsahFKS6O5rm3ygKAqPDuWmto8AdhkvY= Subject key identifier: 4D:21:29:E7:11:9F:A8:B0:AF:91:71:08:2B:7D:1E:50:E9:06:8C:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B4BAC52ADB0F54828E669B400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 45557 IP address blocks: 2001:470:43c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:52:ad:b0:f5:48:28:e6:69:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=8444cc2d-a5e1-4f46-ad1b-4c31942fc7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:43:fc:b6:ff:31:5c:0a:de:66:64:83:5f:ed: 46:a2:2a:70:41:34:60:91:64:13:89:e1:e8:7f:0e: c5:6e:82:6b:f2:b5:63:9c:d4:4d:ca:fb:71:09:ad: 2e:88:40:e5:25:0f:24:1d:ba:d1:6c:1b:ea:d0:8b: c1:79:c2:b8:20:99:ef:ae:01:d5:89:0c:09:9e:4b: a8:11:55:18:f4:44:de:38:9b:fd:35:68:22:ff:24: 1e:6a:fe:a7:0c:df:47:20:bf:72:7e:8d:bc:a6:1c: 2c:5a:f6:40:e4:c5:60:4f:65:e2:2b:5e:5b:29:e3: c6:5c:88:8d:b3:6d:85:7e:3f:61:06:af:56:e6:c6: 65:6b:8a:e2:c0:70:37:e7:84:8c:9e:17:d0:bf:ff: 34:56:5a:e9:15:72:99:46:e9:f2:5f:26:70:59:2f: 42:55:56:8e:b4:23:42:12:b1:6a:95:92:af:d5:83: e0:55:3f:66:6f:61:c9:b8:8e:0a:ba:5f:40:b3:80: 8b:82:60:f9:e6:9b:19:3e:5f:91:b2:01:76:5b:46: ec:e7:87:c3:76:b9:b9:a3:b2:85:e6:a8:e7:8d:4d: 17:51:bf:64:01:93:78:f3:e6:41:13:e9:99:ec:8c: 5f:7a:3c:78:a7:6c:47:06:c6:ba:93:df:23:b6:07: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:21:29:E7:11:9F:A8:B0:AF:91:71:08:2B:7D:1E:50:E9:06:8C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:be:30:16:bc:68:7f:44:e9:6d:56:65:88:f5:e1:80:05:79: 93:d3:da:30:65:66:ea:c4:5a:0b:4c:6c:7d:2a:80:82:6e:d4: 01:d3:80:88:1f:24:7f:f1:83:9c:0e:9b:e5:b2:8d:5a:1c:b5: d7:74:96:30:a8:33:67:e9:fb:b9:4c:62:a6:68:f2:b0:bd:b8: ef:85:bb:b8:b7:2a:cf:68:7d:35:9b:b0:fc:a2:98:e2:1f:b3: bc:0b:11:92:4b:f5:84:5e:20:04:8b:7b:b8:67:30:c2:57:e4: 41:7d:59:ab:89:8f:27:43:4a:98:0c:d9:e6:1c:da:30:43:57: 6d:15:30:9d:2f:b9:c1:fe:78:df:a9:8b:db:c4:f7:48:69:cf: ae:6d:a6:30:14:fe:2c:d4:c5:99:7d:81:bd:f8:22:aa:59:5b: c1:b9:a3:53:ed:16:db:a0:57:26:6d:3f:17:1a:85:9e:42:d1: 4e:dc:d0:b3:3c:6f:48:71:c5:5d:f7:ef:b0:59:0b:98:aa:50: 24:0f:50:2b:ea:77:be:7d:b0:a0:2c:fe:c3:42:42:d8:cd:cd: 49:d2:e1:ec:17:5f:24:d9:0d:7e:9d:fb:41:a8:72:98:01:b1: 8f:5b:fe:aa:1c:7c:2f:2f:60:0e:db:70:09:b7:7c:c7:81:c1: 57:33:61:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrFKtsPVIKOZptAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ODQ0NGNjMmQtYTVlMS00ZjQ2LWFkMWItNGMzMTk0MmZjN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UP8tv8xXAreZmSDX+1GoipwQTRgkWQTieHo fw7FboJr8rVjnNRNyvtxCa0uiEDlJQ8kHbrRbBvq0IvBecK4IJnvrgHViQwJnkuo EVUY9ETeOJv9NWgi/yQeav6nDN9HIL9yfo28phwsWvZA5MVgT2XiK15bKePGXIiN s22Ffj9hBq9W5sZla4riwHA354SMnhfQv/80VlrpFXKZRunyXyZwWS9CVVaOtCNC ErFqlZKv1YPgVT9mb2HJuI4Kul9As4CLgmD55psZPl+RsgF2W0bs54fDdrm5o7KF 5qjnjU0XUb9kAZN48+ZBE+mZ7Ixfejx4p2xHBsa6k98jtgfsBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0hKecRn6iwr5FxCCt9HlDpBoyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTlhM2U0ZmItYmJlNy0z MDBhLWIzZjgtNmVjMWNiZmU0ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACq+MBa8aH9E6W1WZYj14YAFeZPT2jBlZurEWgtMbH0qgIJu1AHT gIgfJH/xg5wOm+WyjVoctdd0ljCoM2fp+7lMYqZo8rC9uO+Fu7i3Ks9ofTWbsPyi mOIfs7wLEZJL9YReIASLe7hnMMJX5EF9WauJjydDSpgM2eYc2jBDV20VMJ0vucH+ eN+pi9vE90hpz65tpjAU/izUxZl9gb34IqpZW8G5o1PtFtugVyZtPxcahZ5C0U7c 0LM8b0hxxV3377BZC5iqUCQPUCvqd759sKAs/sNCQtjNzUnS4ewXXyTZDX6d+0Go cpgBsY9b/qocfC8vYA7bcAm3fMeBwVczYR0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:27:30 2025 by rpki-client