$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6d24351-ad78-38ae-87ef-4a9c71220a6a.roa File: f6d24351-ad78-38ae-87ef-4a9c71220a6a.roa (raw, json) Hash identifier: h32PLG4J9KdN4mmrKBpWe3B3XRUj8GU45B8ObIB+YbQ= Subject key identifier: 52:CE:03:3F:BF:D9:79:11:A9:81:CB:0F:BA:A6:F1:96:3F:E1:26:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B2066E152257B60D06F002580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6d24351-ad78-38ae-87ef-4a9c71220a6a.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 61189 IP address blocks: 2001:470:475::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e1:52:25:7b:60:d0:6f:00:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=28217472-a7fa-41a1-8633-00d7cdf05cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:16:e1:c2:4a:76:70:e7:cb:d5:37:df:59: 3a:79:ce:c2:b5:6c:f7:53:24:77:22:da:3d:4b:07: fb:4f:09:95:0f:45:78:8e:e4:b7:8d:f6:c6:2c:56: 76:a7:3c:f5:8a:54:87:7d:13:2f:ff:b4:a8:26:c1: db:f5:2c:79:93:59:42:90:6c:2f:71:bf:a9:4f:9f: d8:64:6c:ed:bc:1a:71:75:fd:40:c5:86:f1:f3:9e: 89:bd:2e:b1:de:ad:97:88:67:38:7f:21:df:2a:cd: a2:67:85:b0:58:7a:8a:8b:c7:75:21:0b:ae:1e:6b: 48:13:d7:c8:02:12:56:98:4f:b0:c3:f6:88:dc:a9: 61:d4:16:ed:e6:53:8d:8d:39:d8:e3:fc:45:25:12: 24:d1:53:6a:58:07:de:2c:57:19:00:28:96:27:ad: 4c:0d:97:37:1a:1d:bd:3f:87:58:e9:03:1e:3b:1f: 25:c3:04:cd:9d:0b:53:36:52:41:6f:36:97:c1:ed: 2c:e5:8c:21:e2:4b:c2:89:51:0b:64:c3:e9:bd:7f: 17:95:d4:8c:b5:ff:59:24:7b:e3:5d:a6:06:71:c9: 16:fc:38:03:bd:68:9f:9a:b5:c2:3e:c0:dc:04:f6: a9:01:8b:95:34:5f:74:ab:53:03:4c:17:d6:6d:6c: da:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:03:3F:BF:D9:79:11:A9:81:CB:0F:BA:A6:F1:96:3F:E1:26:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6d24351-ad78-38ae-87ef-4a9c71220a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:475::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:34:71:99:47:63:98:4a:4b:9b:f0:d6:94:78:94:62:db:49: cd:47:90:88:8f:e8:d1:35:2a:36:a0:6c:fe:61:02:b8:c8:c6: 0c:2c:db:e5:3c:79:14:06:87:3b:e6:dd:38:26:82:d7:ce:77: f5:7e:66:c6:af:53:40:3d:e4:b6:3a:e1:e1:dc:a3:80:8c:05: 7d:de:7c:c0:8a:86:0d:5c:27:a7:42:8d:4e:1a:bf:8c:4a:34: 8a:e1:48:16:dd:6b:f0:0d:82:f4:47:d2:b0:7f:49:84:a5:0b: 74:34:ce:4b:0c:da:29:2c:58:77:b9:24:f0:4a:be:fb:6d:87: 3e:e4:45:1e:2f:8c:d3:7d:e7:89:3e:61:c8:04:54:58:26:49: f7:7e:cd:3a:07:41:d9:15:2a:13:66:cc:95:ff:ef:ac:d1:f8: c4:1e:f1:0f:89:95:b1:2d:b6:3f:8d:c1:84:2e:90:ee:cb:e9: 03:ce:cb:82:fa:b4:78:26:fc:42:bf:a2:6f:bc:31:90:e4:93: fa:02:42:e6:e5:0e:a4:2a:96:39:e6:21:5d:93:90:86:76:9f: 6d:0c:c0:ce:ea:ce:af:f2:a5:85:8d:fc:0c:27:14:5c:ad:97: 64:fb:e8:4e:66:1a:58:6c:21:69:67:8f:f1:a7:f8:64:8a:6d: 51:b5:b3:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsgZuFSJXtg0G8AJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjgyMTc0NzItYTdmYS00MWExLTg2MzMtMDBkN2NkZjA1Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUMW4cJKdnDny9U331k6ec7CtWz3UyR3Ito9 Swf7TwmVD0V4juS3jfbGLFZ2pzz1ilSHfRMv/7SoJsHb9Sx5k1lCkGwvcb+pT5/Y ZGztvBpxdf1AxYbx856JvS6x3q2XiGc4fyHfKs2iZ4WwWHqKi8d1IQuuHmtIE9fI AhJWmE+ww/aI3Klh1Bbt5lONjTnY4/xFJRIk0VNqWAfeLFcZACiWJ61MDZc3Gh29 P4dY6QMeOx8lwwTNnQtTNlJBbzaXwe0s5Ywh4kvCiVELZMPpvX8XldSMtf9ZJHvj XaYGcckW/DgDvWifmrXCPsDcBPapAYuVNF90q1MDTBfWbWzarwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLOAz+/2XkRqYHLD7qm8ZY/4SZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjZkMjQzNTEtYWQ3OC0z OGFlLTg3ZWYtNGE5YzcxMjIwYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAR1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC40cZlHY5hKS5vw1pR4lGLbSc1HkIiP6NE1KjagbP5hArjIxgws 2+U8eRQGhzvm3TgmgtfOd/V+ZsavU0A95LY64eHco4CMBX3efMCKhg1cJ6dCjU4a v4xKNIrhSBbda/ANgvRH0rB/SYSlC3Q0zksM2iksWHe5JPBKvvtthz7kRR4vjNN9 54k+YcgEVFgmSfd+zToHQdkVKhNmzJX/76zR+MQe8Q+JlbEttj+NwYQukO7L6QPO y4L6tHgm/EK/om+8MZDkk/oCQublDqQqljnmIV2TkIZ2n20MwM7qzq/ypYWN/Awn FFytl2T76E5mGlhsIWlnj/Gn+GSKbVG1swc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:12 2025 by rpki-client