$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa File: 0f38d040-0898-3d13-8906-989c5555da9b.roa (raw, json) Hash identifier: wZW+kmYXZEioOa0IUNqvKj9Xa0ebG6zAhtb7tpL8wu4= Subject key identifier: F2:25:0F:D5:70:C3:C1:32:66:2F:0C:FA:9B:83:6C:CE:1C:7E:A8:B4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B6A7090D380FDF330B683D680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa Signing time: Sun 05 Oct 2025 01:30:11 +0000 ROA not before: Sun 05 Oct 2025 01:30:11 +0000 ROA not after: Sat 03 Jan 2026 02:30:11 +0000 asID: 25957 IP address blocks: 2001:470:4da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:70:90:d3:80:fd:f3:30:b6:83:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 5 01:30:11 2025 GMT Not After : Jan 3 02:30:11 2026 GMT Subject: CN=75e44ac5-2d4f-4bb3-843a-a6ff939f1d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:cd:03:95:3e:8b:75:0f:0c:37:ee:32:6b: f5:cf:aa:7f:78:ab:77:bb:f4:cd:8e:4a:00:e0:7d: e2:10:08:04:aa:4f:54:93:57:58:75:d9:5f:e5:bb: d5:45:25:7e:9f:84:8e:4f:ea:11:8e:f8:af:b2:3c: d7:88:12:41:35:6f:bd:d4:3d:96:2c:71:88:43:e6: 28:c3:77:1d:03:72:a7:28:3f:8b:73:0c:50:72:0e: 29:e4:ff:2c:ea:9d:e6:aa:f3:d3:d8:43:de:82:94: 2f:cd:79:1a:5a:51:c7:16:33:08:df:2b:06:2c:95: 1c:bc:87:4a:f2:2c:4e:65:73:09:2b:6a:7c:33:e1: 6e:a5:5f:aa:91:88:c7:a2:98:00:ae:3e:24:ec:3f: 74:80:b0:92:5f:0b:f7:f6:0c:b6:8d:d7:78:69:d0: 6a:5d:b6:4b:b2:a2:bc:4d:c8:c5:39:9a:16:2e:74: 15:10:c0:d6:a4:6c:d5:7b:20:4e:66:9a:eb:a4:fa: a7:f2:b4:88:d3:b9:24:9c:2b:58:f5:7c:a4:a2:99: ce:83:a7:b0:54:d1:6b:4b:e9:e0:81:02:4f:42:e0: 73:31:a3:5c:6f:3d:0c:2c:52:8c:b3:28:63:b2:1b: fa:41:b3:70:46:77:f7:75:e7:44:54:50:57:13:b0: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:0F:D5:70:C3:C1:32:66:2F:0C:FA:9B:83:6C:CE:1C:7E:A8:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:92:9f:8c:15:f9:17:4c:8f:c2:7a:7f:9d:20:d5:8c:13:80: 23:42:38:17:1c:48:24:e4:c2:15:bc:cc:08:0d:2a:0a:df:2e: f0:61:c5:bd:73:d9:0d:00:ef:7c:f0:68:dc:af:1e:84:3a:b9: 90:0d:e8:d6:2b:a4:7b:1e:e1:60:76:f5:db:a3:c6:ef:f4:63: 46:69:af:c7:e0:50:5d:f0:f6:eb:52:1f:ef:ad:90:7f:4f:f3: 4c:59:8c:fb:fe:39:69:15:76:ce:06:8c:a7:9d:3f:30:40:a7: 21:92:81:b3:b2:f2:b6:57:13:00:ed:59:31:1d:e9:10:78:2a: ad:59:20:d1:04:89:45:81:45:9e:34:62:35:e6:79:97:28:a8: 17:74:f3:3f:f9:30:23:30:86:f5:42:01:c0:6a:2c:bc:60:21: d5:a4:4b:47:84:16:f6:45:ea:ee:fc:88:3e:7b:9f:92:f9:ec: f8:9d:bc:5d:56:40:37:23:6e:b3:ea:f5:fa:34:45:21:61:b3: 65:a2:eb:c9:c4:2d:96:75:f9:bd:70:b3:cd:b4:b8:5e:6c:38: 07:96:9c:7f:e4:fb:d5:db:c0:dc:a6:a8:0e:07:78:51:84:64: 2f:20:63:45:82:84:36:8a:10:6b:61:7f:94:41:16:ff:7d:8d: 94:4e:8a:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtqcJDTgP3zMLaD1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNTAxMzAxMVoXDTI2MDEwMzAyMzAxMVowLzEtMCsGA1UEAxMk NzVlNDRhYzUtMmQ0Zi00YmIzLTg0M2EtYTZmZjkzOWYxZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMbNA5U+i3UPDDfuMmv1z6p/eKt3u/TNjkoA 4H3iEAgEqk9Uk1dYddlf5bvVRSV+n4SOT+oRjvivsjzXiBJBNW+91D2WLHGIQ+Yo w3cdA3KnKD+LcwxQcg4p5P8s6p3mqvPT2EPegpQvzXkaWlHHFjMI3ysGLJUcvIdK 8ixOZXMJK2p8M+FupV+qkYjHopgArj4k7D90gLCSXwv39gy2jdd4adBqXbZLsqK8 TcjFOZoWLnQVEMDWpGzVeyBOZprrpPqn8rSI07kknCtY9XykopnOg6ewVNFrS+ng gQJPQuBzMaNcbz0MLFKMsyhjshv6QbNwRnf3dedEVFBXE7BTXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPIlD9Vww8EyZi8M+puDbM4cfqi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYzOGQwNDAtMDg5OC0z ZDEzLTg5MDYtOTg5YzU1NTVkYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMKSn4wV+RdMj8J6f50g1YwTgCNCOBccSCTkwhW8zAgNKgrfLvBh xb1z2Q0A73zwaNyvHoQ6uZAN6NYrpHse4WB29dujxu/0Y0Zpr8fgUF3w9utSH++t kH9P80xZjPv+OWkVds4GjKedPzBApyGSgbOy8rZXEwDtWTEd6RB4Kq1ZINEEiUWB RZ40YjXmeZcoqBd08z/5MCMwhvVCAcBqLLxgIdWkS0eEFvZF6u78iD57n5L57Pid vF1WQDcjbrPq9fo0RSFhs2Wi68nELZZ1+b1ws820uF5sOAeWnH/k+9XbwNymqA4H eFGEZC8gY0WChDaKEGthf5RBFv99jZROigA= -----END CERTIFICATE-----Generated at Sat Oct 11 04:31:59 2025 by rpki-client