$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb0a4e8f-b51d-3c76-af84-51c8b4d09d61.roa File: fb0a4e8f-b51d-3c76-af84-51c8b4d09d61.roa (raw, json) Hash identifier: sY3ToI3AefAHQKxSJc+1dvbwfDdmPKnVZJNbYUyc7Y8= Subject key identifier: 01:33:06:92:45:9F:E3:C8:FB:2E:DB:DA:10:DF:51:3F:E0:66:8A:9A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B2FC1B3065C2D399C3073F680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb0a4e8f-b51d-3c76-af84-51c8b4d09d61.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 11640 IP address blocks: 2001:470:357::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b3:06:5c:2d:39:9c:30:73:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=818e50ac-dad4-4616-b076-6da98b202d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:98:3e:dd:f0:00:16:be:dd:fc:8b:77:da: aa:85:81:ab:9c:21:34:b3:a1:f3:17:01:2b:8b:65: 57:3f:14:41:59:23:6d:3b:2d:6f:a8:62:85:23:9e: 07:0c:4b:50:ed:e7:4c:26:dd:a0:1d:f9:fe:a2:e1: e4:7c:ec:8f:3c:01:ae:80:83:fb:33:64:42:bf:31: 5b:77:52:90:7d:5c:32:3e:23:d3:b9:10:6b:62:1c: f0:0c:ed:41:6d:41:4b:02:dc:bd:e4:62:be:1d:f9: 44:96:ca:07:ad:b7:05:20:84:4d:43:4b:66:81:9d: 1a:53:06:67:3c:13:05:17:bd:3b:0d:f5:90:84:66: 9f:c8:f4:f9:87:ef:20:51:18:45:52:82:b4:7b:f2: ed:04:da:3c:e8:68:70:e4:f6:8e:8c:a2:55:6e:9e: d8:37:58:8e:37:7f:ce:e1:ee:a3:0d:86:10:23:35: b1:55:d6:f1:00:77:99:09:d3:0c:9b:e4:35:b4:bb: 34:ad:41:2c:ec:26:ea:da:34:0c:04:2b:fb:b8:4d: 1d:df:d3:de:57:da:1d:d0:1c:71:35:0a:e3:d2:de: 18:25:53:8d:6e:ed:80:72:13:c8:f3:22:ce:4b:6a: ea:98:81:2c:9a:26:f3:a8:b2:9a:92:4e:8c:98:da: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:06:92:45:9F:E3:C8:FB:2E:DB:DA:10:DF:51:3F:E0:66:8A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb0a4e8f-b51d-3c76-af84-51c8b4d09d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:357::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d8:79:2e:c7:c4:04:81:6b:81:07:5f:9f:a7:d0:ff:35:b3: a0:ab:54:82:dd:3c:43:8f:ec:14:eb:68:91:d1:81:a1:2c:88: aa:90:38:92:a3:ef:26:bf:7c:e3:82:a5:c8:4b:dd:fd:79:b8: 75:b6:bf:b5:a5:a1:46:ff:79:d0:f9:23:2d:be:7a:25:06:0f: 83:69:6a:56:c2:3f:84:f7:df:ee:7a:35:31:3b:01:24:34:e7: 9d:5c:ce:71:3e:7d:49:3e:bb:9c:b2:ae:5a:11:99:8f:c6:db: 35:e9:15:9c:69:e1:f2:46:ea:59:58:74:ca:98:91:d3:8d:6d: 19:dd:b7:0b:ef:3d:a6:ed:60:66:71:a6:bf:5d:ab:65:56:13: 03:f2:89:3d:8a:b1:b6:19:69:61:06:ba:b9:dc:30:25:2a:f8: 7a:6e:16:fb:50:c6:72:a1:fc:3e:81:51:3f:85:da:41:29:be: 26:60:6d:5d:a9:d2:6a:0e:55:8c:b6:ab:12:7f:da:8d:68:c3: b1:5a:3b:40:5d:b1:7a:a1:74:e5:23:94:96:62:cf:65:dd:5c: d2:7e:16:5f:71:3a:c2:fc:d3:63:74:c1:f9:c6:28:36:29:ea: b3:f4:85:c5:09:06:8c:b1:19:43:e3:4a:ab:ef:6d:f6:57:21: 23:32:57:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsvwbMGXC05nDBz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ODE4ZTUwYWMtZGFkNC00NjE2LWIwNzYtNmRhOThiMjAyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2qYPt3wABa+3fyLd9qqhYGrnCE0s6HzFwEr i2VXPxRBWSNtOy1vqGKFI54HDEtQ7edMJt2gHfn+ouHkfOyPPAGugIP7M2RCvzFb d1KQfVwyPiPTuRBrYhzwDO1BbUFLAty95GK+HflElsoHrbcFIIRNQ0tmgZ0aUwZn PBMFF707DfWQhGafyPT5h+8gURhFUoK0e/LtBNo86Ghw5PaOjKJVbp7YN1iON3/O 4e6jDYYQIzWxVdbxAHeZCdMMm+Q1tLs0rUEs7Cbq2jQMBCv7uE0d39PeV9od0Bxx NQrj0t4YJVONbu2AchPI8yLOS2rqmIEsmibzqLKakk6MmNoSXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEzBpJFn+PI+y7b2hDfUT/gZoqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmIwYTRlOGYtYjUxZC0z Yzc2LWFmODQtNTFjOGI0ZDA5ZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPYeS7HxASBa4EHX5+n0P81s6CrVILdPEOP7BTraJHRgaEsiKqQ OJKj7ya/fOOCpchL3f15uHW2v7WloUb/edD5Iy2+eiUGD4NpalbCP4T33+56NTE7 ASQ0551cznE+fUk+u5yyrloRmY/G2zXpFZxp4fJG6llYdMqYkdONbRndtwvvPabt YGZxpr9dq2VWEwPyiT2KsbYZaWEGurncMCUq+HpuFvtQxnKh/D6BUT+F2kEpviZg bV2p0moOVYy2qxJ/2o1ow7FaO0BdsXqhdOUjlJZiz2XdXNJ+Fl9xOsL802N0wfnG KDYp6rP0hcUJBoyxGUPjSqvvbfZXISMyV1Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:28:02 2025 by rpki-client