$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa File: fd85ba51-3995-301c-94a0-29d6a1c65314.roa (raw, json) Hash identifier: xqYgU+dO8DMDPkQHklsNWAAQeM04/YFvfyJhrChSDL0= Subject key identifier: D2:52:9A:5C:32:E4:77:D1:4E:A7:2E:A5:15:52:06:1C:38:21:A8:53 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B16A1566C5878ABBD2A6CDD40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 34774 IP address blocks: 2001:470:42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:56:6c:58:78:ab:bd:2a:6c:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=748ea921-60e5-4005-8b51-832dd76ede57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:9b:b2:4a:e5:c4:ce:99:40:52:0a:77:5e: 46:0b:ed:a3:08:f8:a6:3f:ec:b4:31:f0:cc:98:37: 04:16:eb:9e:21:68:d4:d1:b4:7a:a0:cd:74:23:53: da:06:17:56:82:d7:d9:0d:20:33:63:a1:9f:96:3a: af:64:43:2c:ba:2c:92:ae:e1:5c:05:08:4f:41:71: e1:53:07:aa:42:3f:69:06:36:3a:75:05:c8:75:b6: fd:bc:51:36:de:8a:4b:c6:c2:b4:ab:90:1a:ff:83: 97:b9:92:35:8d:c2:66:ca:b1:75:e1:66:5b:41:aa: d2:db:e7:23:3e:23:68:a5:f2:1d:de:81:d7:59:e4: ab:7c:1f:68:45:ae:b1:56:7c:6c:fe:82:5f:03:72: 62:3e:0d:7d:5e:08:16:c4:a6:7d:99:91:2c:a9:c9: 73:23:fe:0f:09:f9:d7:ac:89:f9:d3:6f:c9:5b:9b: 7e:1f:c3:ae:2f:71:bf:af:df:55:b4:55:77:08:7e: 47:d2:60:bb:0b:8e:33:53:4b:52:8c:a4:97:77:d9: 63:9f:6f:4b:38:9a:d3:02:c7:b3:96:89:1a:26:f8: 34:c8:b6:23:6a:a0:00:82:42:64:0f:c4:13:0f:4b: 3b:f3:cf:48:95:9b:16:b0:4a:99:c5:8c:35:12:32: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:52:9A:5C:32:E4:77:D1:4E:A7:2E:A5:15:52:06:1C:38:21:A8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:42e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:86:80:e4:16:cb:ca:5b:32:48:f7:ea:ea:1c:11:d6:9f:d1: ad:be:7f:ad:12:82:12:f8:da:c5:b8:9f:48:5c:6c:75:98:b8: b8:75:53:30:c8:2a:a3:15:76:02:9a:a3:8c:90:ae:77:f4:c5: 4b:39:89:d8:59:96:da:4f:3d:7f:36:7c:7b:2d:5f:b9:c2:1a: 8b:bf:99:f9:a2:89:1c:55:ff:22:af:3d:9f:58:e4:f7:be:08: 52:b8:fa:f4:b0:08:ea:ee:65:15:68:6f:ac:7d:2b:85:02:b7: 7d:33:2b:a4:71:f8:16:a7:09:88:64:09:ab:24:ee:8a:6c:68: 5b:ea:85:dd:e2:88:82:76:07:b6:f4:08:68:19:27:1e:1a:84: b3:98:41:50:53:64:49:9b:3f:dc:ef:c8:5e:8d:18:71:c1:5d: 47:c6:fe:d3:ee:99:0a:cf:a1:2b:9a:56:d6:43:8c:9b:b9:be: 31:00:31:a3:3b:9a:fb:4c:08:3d:99:22:c3:10:1c:89:f2:1e: f4:ec:cc:cc:93:f7:6d:14:58:dc:cb:b5:3b:9e:60:2f:05:59: 27:c0:9e:fd:cb:2f:39:20:2e:3b:54:91:c8:c8:3e:a8:28:fa: c6:8b:57:33:fb:e5:1e:4c:90:bb:63:fd:2a:e6:25:7f:11:42: d1:43:90:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsWoVZsWHirvSps3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzQ4ZWE5MjEtNjBlNS00MDA1LThiNTEtODMyZGQ3NmVkZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBmbskrlxM6ZQFIKd15GC+2jCPimP+y0MfDM mDcEFuueIWjU0bR6oM10I1PaBhdWgtfZDSAzY6GfljqvZEMsuiySruFcBQhPQXHh UweqQj9pBjY6dQXIdbb9vFE23opLxsK0q5Aa/4OXuZI1jcJmyrF14WZbQarS2+cj PiNopfId3oHXWeSrfB9oRa6xVnxs/oJfA3JiPg19XggWxKZ9mZEsqclzI/4PCfnX rIn502/JW5t+H8OuL3G/r99VtFV3CH5H0mC7C44zU0tSjKSXd9ljn29LOJrTAsez lokaJvg0yLYjaqAAgkJkD8QTD0s7889IlZsWsEqZxYw1EjKFZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNJSmlwy5HfRTqcupRVSBhw4IahTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmQ4NWJhNTEtMzk5NS0z MDFjLTk0YTAtMjlkNmExYzY1MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJuGgOQWy8pbMkj36uocEdaf0a2+f60SghL42sW4n0hcbHWYuLh1 UzDIKqMVdgKao4yQrnf0xUs5idhZltpPPX82fHstX7nCGou/mfmiiRxV/yKvPZ9Y 5Pe+CFK4+vSwCOruZRVob6x9K4UCt30zK6Rx+BanCYhkCask7opsaFvqhd3iiIJ2 B7b0CGgZJx4ahLOYQVBTZEmbP9zvyF6NGHHBXUfG/tPumQrPoSuaVtZDjJu5vjEA MaM7mvtMCD2ZIsMQHInyHvTszMyT920UWNzLtTueYC8FWSfAnv3LLzkgLjtUkcjI Pqgo+saLVzP75R5MkLtj/SrmJX8RQtFDkEs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:53 2025 by rpki-client