$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa File: d904d990-fb1b-387d-aed0-223f5240308c.roa (raw, json) Hash identifier: xWyWZUudF8Ut9dIa+gbEDih+WBxPH8UZqur8AmBBUeE= Subject key identifier: 76:F9:99:74:D4:CB:48:9B:5B:CD:E8:7D:8C:6C:B6:8F:91:03:2F:F0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0E4164343769910A55624780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20205 IP address blocks: 2001:470:3ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:64:34:37:69:91:0a:55:62:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=26978e37-9bb4-4669-9715-e46e3e82e2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:fc:db:e8:23:5b:9e:82:fb:c8:2d:09:7e: db:41:fe:73:75:e1:dd:ed:e4:97:f8:04:ef:d2:c6: 47:5d:e9:14:c2:f5:0f:29:04:f3:67:7e:56:76:dd: 57:3e:18:b2:91:55:a0:96:e2:8a:86:18:92:21:26: 51:e3:ff:ff:b4:fd:25:a2:76:08:ee:fc:04:69:56: 55:c8:8a:b9:09:90:5d:04:26:79:92:09:7e:cc:24: 78:57:f4:3e:db:89:1f:4e:13:35:70:d2:b3:29:0c: d1:64:a9:25:82:29:1d:74:34:18:4c:aa:0b:cd:0a: 63:83:ad:73:f9:d4:d6:ef:2d:cd:5b:80:60:10:5e: f5:92:1c:4b:56:34:48:e7:1b:3c:f6:6e:36:d6:33: 4c:9f:60:71:13:78:2f:cb:8b:ad:2f:74:08:a8:e6: 1d:9d:c6:84:0a:14:b5:55:ea:46:b0:42:64:ab:5c: 45:0d:a0:3c:ee:22:a3:83:22:72:b5:ca:e2:4c:07: 1b:6f:4d:54:a6:34:cd:3c:68:78:f1:47:55:b9:61: ec:11:05:02:81:b6:a0:98:92:e3:be:02:ee:b9:63: 25:f9:7d:6f:6b:1c:2b:3e:b9:f1:4c:78:dc:2d:d2: d8:a2:e5:26:78:f8:50:a0:15:11:49:57:f5:c7:6d: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:99:74:D4:CB:48:9B:5B:CD:E8:7D:8C:6C:B6:8F:91:03:2F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:7e:5f:5a:6f:df:1c:4d:68:10:1d:a6:91:be:17:70:d8:3f: 9c:d8:69:84:76:81:96:fa:54:f1:1e:17:11:d9:aa:97:f5:6e: e3:b4:14:96:5f:d1:90:5b:d9:cf:0d:00:93:59:b0:1f:9e:32: 26:24:c0:90:01:f7:4c:2c:76:02:f7:d2:8e:5b:0b:a8:53:73: 42:92:57:a3:22:6c:66:6a:81:6c:27:30:8a:4c:3d:b1:26:64: 38:87:66:05:98:6d:04:23:52:8b:7a:2a:3d:bb:0d:fa:43:aa: f0:a5:9c:ef:24:11:b7:16:1a:ac:a9:2a:6b:55:6c:0b:59:3f: 0d:44:a3:93:f9:18:8e:09:8d:49:cc:f2:e3:01:ca:99:05:fa: 01:01:4a:3d:3c:f1:56:a4:a6:ad:01:7f:1f:f0:70:50:b1:99: 0d:47:2d:cc:38:44:4c:4f:35:9d:a0:e0:a7:a0:26:96:bd:ae: 54:68:ee:fd:90:5f:8a:19:99:9b:c3:ab:60:78:72:0f:17:2c: f4:24:ff:de:ea:28:7c:4c:00:fc:4e:00:ba:ad:15:0a:8e:8b: 2e:71:48:8e:12:a8:a5:94:f4:f1:a4:72:85:de:63:63:4e:66: 1a:4a:d8:4a:de:46:92:2a:51:e2:7e:fc:4b:a1:cf:5a:89:d5: cf:d2:3f:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsOQWQ0N2mRClViR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjY5NzhlMzctOWJiNC00NjY5LTk3MTUtZTQ2ZTNlODJlMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3b82+gjW56C+8gtCX7bQf5zdeHd7eSX+ATv 0sZHXekUwvUPKQTzZ35Wdt1XPhiykVWgluKKhhiSISZR4///tP0lonYI7vwEaVZV yIq5CZBdBCZ5kgl+zCR4V/Q+24kfThM1cNKzKQzRZKklgikddDQYTKoLzQpjg61z +dTW7y3NW4BgEF71khxLVjRI5xs89m421jNMn2BxE3gvy4utL3QIqOYdncaEChS1 VepGsEJkq1xFDaA87iKjgyJytcriTAcbb01UpjTNPGh48UdVuWHsEQUCgbagmJLj vgLuuWMl+X1vaxwrPrnxTHjcLdLYouUmePhQoBURSVf1x23abQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHb5mXTUy0ibW83ofYxsto+RAy/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDkwNGQ5OTAtZmIxYi0z ODdkLWFlZDAtMjIzZjUyNDAzMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMV+X1pv3xxNaBAdppG+F3DYP5zYaYR2gZb6VPEeFxHZqpf1buO0 FJZf0ZBb2c8NAJNZsB+eMiYkwJAB90wsdgL30o5bC6hTc0KSV6MibGZqgWwnMIpM PbEmZDiHZgWYbQQjUot6Kj27DfpDqvClnO8kEbcWGqypKmtVbAtZPw1Eo5P5GI4J jUnM8uMBypkF+gEBSj088Vakpq0Bfx/wcFCxmQ1HLcw4RExPNZ2g4KegJpa9rlRo 7v2QX4oZmZvDq2B4cg8XLPQk/97qKHxMAPxOALqtFQqOiy5xSI4SqKWU9PGkcoXe Y2NOZhpK2EreRpIqUeJ+/Euhz1qJ1c/SP1Y= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:11 2025 by rpki-client