$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa File: 8a14b687-8752-306a-bdfa-f859c47ad39e.roa (raw, json) Hash identifier: MZLzXNIpe8BD5Csi4C39u1GKPtG1awzty5c5LYeXPD4= Subject key identifier: 01:47:81:C3:31:15:8F:34:04:22:70:9D:FB:46:FC:79:1A:85:1F:7E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B1AD1B02429B4A527DE599A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16832 IP address blocks: 2001:470:2e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:24:29:b4:a5:27:de:59:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=dc0325e3-3e3b-4f7f-9ef3-aff44f34ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:20:74:ca:1b:26:e2:91:a6:67:80:49:ee: ab:08:0f:d9:d7:cd:dc:9a:59:62:85:6e:a7:1a:75: b0:29:b2:48:03:13:7d:ee:9e:6d:3c:e3:31:07:e9: b7:93:df:cb:22:0d:39:40:80:f3:0a:b2:95:4c:cd: ff:97:6c:4a:3a:86:0e:e8:31:3f:b2:d5:3a:0a:a1: 89:64:46:1d:d3:98:06:c5:9a:f8:ee:94:88:ad:e3: f0:27:da:cb:b8:55:2c:df:d6:95:35:47:52:aa:82: 14:e4:57:3e:09:bf:8d:6b:4d:8e:ad:ee:c9:be:1e: 69:79:a0:9c:01:7c:ae:e4:5f:18:f1:97:8c:5d:01: 5f:7b:04:33:4e:3d:5e:12:76:45:33:8a:43:8c:4f: 32:8f:35:27:e4:93:22:e7:35:97:50:38:61:f7:d5: 0e:19:0e:16:73:24:d4:93:08:99:91:f2:ef:6f:e1: 6d:09:6c:98:ef:7a:86:95:b5:e9:58:9b:41:40:db: c0:3c:6b:cd:bf:2d:0a:74:e3:75:e1:20:6c:e0:e5: fd:e4:e3:be:fc:f4:38:d3:58:93:cb:9d:ff:bd:f5: 4e:81:a6:59:24:76:2e:de:19:50:7a:a0:9f:88:f7: c4:79:78:bf:88:c7:19:81:e1:7b:0e:f5:a1:9c:81: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:81:C3:31:15:8F:34:04:22:70:9D:FB:46:FC:79:1A:85:1F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b4:2e:73:cb:9d:a9:cf:b9:f5:df:1c:49:6c:c0:d8:01:73: a2:05:5a:b8:ad:35:df:f7:47:32:cd:15:45:18:a2:e7:56:74: d7:73:4a:c5:ab:f2:23:f2:19:21:40:06:40:32:1e:05:83:95: 98:3e:15:63:d9:e2:38:1b:ca:c1:4b:3b:0b:0c:ec:f1:d2:f1: e3:52:d6:d8:91:97:ac:df:5c:35:ed:cb:f9:5a:bb:c9:83:39: 9b:c0:b9:98:a9:dc:be:9c:10:9c:9a:1a:a9:80:80:67:2b:51: 81:3b:bb:17:2a:4e:67:0c:68:96:cb:85:b6:78:1f:f7:18:f7: 52:31:ee:23:fc:1b:3b:5f:71:dc:a7:bf:8e:95:75:33:eb:68: ae:e4:d6:d9:d2:47:1a:c4:5b:4c:3b:95:e6:9e:7a:42:f9:2e: d8:98:c4:df:8e:df:b3:98:69:3a:89:fd:be:a4:e2:12:90:6e: 19:ad:51:44:33:24:a6:97:46:fe:4b:40:76:ef:02:b5:bb:6b: 38:f6:3a:43:37:e0:be:15:4c:6a:40:be:8a:49:8e:71:9a:23: e6:07:14:00:cf:7b:21:11:bb:02:3a:47:4f:ca:b1:0a:82:93: ff:80:c8:ab:95:ec:c8:eb:75:9b:2e:e9:24:fa:2e:5d:5a:9c: 1f:63:ac:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bAkKbSlJ95ZmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGMwMzI1ZTMtM2UzYi00ZjdmLTllZjMtYWZmNDRmMzRjYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3YgdMobJuKRpmeASe6rCA/Z183cmllihW6n GnWwKbJIAxN97p5tPOMxB+m3k9/LIg05QIDzCrKVTM3/l2xKOoYO6DE/stU6CqGJ ZEYd05gGxZr47pSIrePwJ9rLuFUs39aVNUdSqoIU5Fc+Cb+Na02Ore7Jvh5peaCc AXyu5F8Y8ZeMXQFfewQzTj1eEnZFM4pDjE8yjzUn5JMi5zWXUDhh99UOGQ4WcyTU kwiZkfLvb+FtCWyY73qGlbXpWJtBQNvAPGvNvy0KdON14SBs4OX95OO+/PQ401iT y53/vfVOgaZZJHYu3hlQeqCfiPfEeXi/iMcZgeF7DvWhnIGv5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFHgcMxFY80BCJwnftG/HkahR9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGExNGI2ODctODc1Mi0z MDZhLWJkZmEtZjg1OWM0N2FkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALe0LnPLnanPufXfHElswNgBc6IFWritNd/3RzLNFUUYoudWdNdz SsWr8iPyGSFABkAyHgWDlZg+FWPZ4jgbysFLOwsM7PHS8eNS1tiRl6zfXDXty/la u8mDOZvAuZip3L6cEJyaGqmAgGcrUYE7uxcqTmcMaJbLhbZ4H/cY91Ix7iP8Gztf cdynv46VdTPraK7k1tnSRxrEW0w7leaeekL5LtiYxN+O37OYaTqJ/b6k4hKQbhmt UUQzJKaXRv5LQHbvArW7azj2OkM34L4VTGpAvopJjnGaI+YHFADPeyERuwI6R0/K sQqCk/+AyKuV7MjrdZsu6ST6Ll1anB9jrPo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:28 2025 by rpki-client