$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa File: 0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa (raw, json) Hash identifier: bKD+TwShF27ecR3XIEyObvBpVwOmkbHysO3l/v+/6AQ= Subject key identifier: 4F:8B:96:F6:64:0C:23:99:2C:58:8E:73:ED:A4:18:69:9E:29:10:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B541B15E017928ED98BA8FA00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa Signing time: Sat 27 Sep 2025 01:30:10 +0000 ROA not before: Sat 27 Sep 2025 01:30:10 +0000 ROA not after: Fri 26 Dec 2025 02:30:10 +0000 asID: 23511 IP address blocks: 2001:470:4c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:1b:15:e0:17:92:8e:d9:8b:a8:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 27 01:30:10 2025 GMT Not After : Dec 26 02:30:10 2025 GMT Subject: CN=f1764c58-0c61-4701-95fe-75cbbd1f4870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:73:92:67:8e:37:6e:f0:27:d0:1f:e2:66: ea:b5:cf:b4:27:4b:b9:5c:fd:ec:46:7c:a7:89:f1: d8:1b:48:e3:77:02:4f:1c:74:42:a2:69:96:a3:a9: d7:e4:41:0c:73:62:4f:9b:1a:87:04:25:fa:f9:a2: f6:55:af:2a:cf:42:33:6b:08:ab:f7:97:29:c0:27: 7d:37:54:48:67:fb:e3:a2:a3:fb:11:11:59:d0:c8: 62:29:5e:64:23:f5:79:ed:7b:b9:71:94:0a:dd:83: 1f:30:52:8d:59:0f:c6:03:7f:09:ec:65:b2:2c:75: 6d:a2:10:2a:9b:25:72:1b:ca:41:db:4e:1e:cc:15: 75:85:bb:75:e9:2a:19:65:9b:96:e9:dd:31:72:45: ec:cd:38:55:ea:76:df:19:06:a2:22:ca:83:63:06: a2:2d:f2:e1:cf:20:56:9b:8d:c8:aa:78:ec:ea:df: 00:ec:fd:9a:e0:4b:2e:56:3c:93:64:79:a5:79:c0: 63:54:52:0c:67:4b:8e:4f:b7:fd:85:00:0a:2b:b9: f1:cd:15:86:c7:2a:af:79:53:6f:6c:e2:09:b2:48: dc:97:e7:04:2a:96:c6:ec:57:2a:78:9a:e9:15:c5: 10:cd:6a:32:7f:33:5f:b7:21:61:69:c4:2f:8e:c0: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:96:F6:64:0C:23:99:2C:58:8E:73:ED:A4:18:69:9E:29:10:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c0:7a:48:53:a4:07:34:96:16:99:bd:c0:04:c7:50:27:07: f3:2d:b7:36:dc:46:10:c8:65:01:ae:37:16:85:58:c2:b9:b8: f6:d3:b8:de:5a:ef:8f:ae:9b:6d:bd:ed:ee:29:ad:16:ca:ea: 20:59:f9:75:12:e7:71:af:50:bf:f9:b4:6a:28:26:ad:bc:3e: 39:d5:4b:54:07:ab:e9:a5:ae:cf:7c:9b:69:84:c5:68:96:47: ac:16:e2:85:81:e9:5b:c6:23:1a:d0:c9:e3:b2:3a:15:88:d3: c9:81:36:7b:72:c2:0d:ba:e2:c0:c3:38:a0:84:4e:51:61:bb: 91:01:7a:01:ab:b0:3c:98:d0:74:6a:ac:87:ab:4c:54:b5:07: c2:46:82:d3:60:e8:94:cb:17:f8:d8:1f:88:a4:8e:5c:b9:98: e8:c3:ac:94:46:31:cd:57:a0:87:d1:20:26:fc:d8:13:09:84: 84:bc:16:38:e8:23:11:cd:68:d2:34:4f:7a:84:2e:dd:76:c1: 4c:cc:05:1d:45:7c:4c:e6:93:83:a6:27:d9:f5:2c:f8:3b:26: 6f:15:8b:5e:ab:75:a0:ee:3b:fe:9b:e5:f4:14:50:a5:78:39: d8:b1:3a:5d:de:f5:5f:30:ec:47:8b:b0:5a:1f:f4:a7:a2:25: d0:af:d0:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtUGxXgF5KO2Yuo+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNzAxMzAxMFoXDTI1MTIyNjAyMzAxMFowLzEtMCsGA1UEAxMk ZjE3NjRjNTgtMGM2MS00NzAxLTk1ZmUtNzVjYmJkMWY0ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwFzkmeON27wJ9Af4mbqtc+0J0u5XP3sRnyn ifHYG0jjdwJPHHRCommWo6nX5EEMc2JPmxqHBCX6+aL2Va8qz0Izawir95cpwCd9 N1RIZ/vjoqP7ERFZ0MhiKV5kI/V57Xu5cZQK3YMfMFKNWQ/GA38J7GWyLHVtohAq myVyG8pB204ezBV1hbt16SoZZZuW6d0xckXszThV6nbfGQaiIsqDYwaiLfLhzyBW m43Iqnjs6t8A7P2a4EsuVjyTZHmlecBjVFIMZ0uOT7f9hQAKK7nxzRWGxyqveVNv bOIJskjcl+cEKpbG7FcqeJrpFcUQzWoyfzNftyFhacQvjsD2cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+LlvZkDCOZLFiOc+2kGGmeKRDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU0NzI2ODEtN2JjMy0z ZmQ0LWFjMjUtYzdkOTRlMjQ3MjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXAekhTpAc0lhaZvcAEx1AnB/MttzbcRhDIZQGuNxaFWMK5uPbT uN5a74+um2297e4prRbK6iBZ+XUS53GvUL/5tGooJq28PjnVS1QHq+mlrs98m2mE xWiWR6wW4oWB6VvGIxrQyeOyOhWI08mBNntywg264sDDOKCETlFhu5EBegGrsDyY 0HRqrIerTFS1B8JGgtNg6JTLF/jYH4ikjly5mOjDrJRGMc1XoIfRICb82BMJhIS8 FjjoIxHNaNI0T3qELt12wUzMBR1FfEzmk4OmJ9n1LPg7Jm8Vi16rdaDuO/6b5fQU UKV4OdixOl3e9V8w7EeLsFof9KeiJdCv0LM= -----END CERTIFICATE-----Generated at Sat Oct 11 17:46:20 2025 by rpki-client