$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14511eda-6977-34e5-9e47-8b3b467364a0.roa File: 14511eda-6977-34e5-9e47-8b3b467364a0.roa (raw, json) Hash identifier: U1UoQHfeLyLPN7fb3VGm8wO58xAxb96vLH+m6qkBzbQ= Subject key identifier: 89:6B:D2:0E:65:82:A7:D5:41:4D:21:7E:08:9D:C9:09:E5:51:7C:9E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B21CC3F496F93BE26BEE3E7E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14511eda-6977-34e5-9e47-8b3b467364a0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 22709 IP address blocks: 2001:470:432::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:49:6f:93:be:26:be:e3:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=de0d8c35-49fe-41b9-972f-6b9e6368065f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:06:ea:bd:50:b8:29:69:25:3b:de:07:71: d2:42:6b:46:eb:ea:e3:5b:4d:0a:4a:30:1a:41:f6: df:21:d5:57:34:a4:0e:d9:16:ec:6e:c3:bb:92:21: 65:54:f6:f3:82:a2:4c:6c:8f:52:ae:6b:b9:9e:bb: 3b:64:18:76:e8:f7:3b:0c:27:a8:1d:80:21:af:6b: 81:08:fc:ad:ff:66:7f:ea:02:c9:01:19:bb:37:ab: 26:10:c2:b3:e7:0b:8b:7c:d4:bf:cd:f9:da:b6:1c: 5c:24:53:13:ee:53:f4:d7:2a:e4:0e:17:d1:21:b4: d3:2b:39:eb:7b:f3:5f:53:a7:e5:06:63:9c:d7:f8: fe:65:ca:4f:ff:18:ad:f6:25:8c:d1:97:78:03:24: 34:50:6b:2d:cf:3d:d7:ec:92:2d:39:f7:8d:85:df: 26:8e:1b:81:26:65:8e:7a:3b:78:8e:36:78:14:3f: e1:45:44:29:7d:c1:51:aa:ce:81:ca:4c:51:c2:eb: fb:4a:ec:95:ae:15:0b:ec:9f:76:88:60:96:a6:9a: 90:5d:73:fa:3e:81:f0:83:80:22:93:9c:31:e0:a1: b7:3c:ad:e5:e1:0c:76:0d:fa:15:2f:8c:3f:c0:c1: 9e:3e:21:c8:89:f1:0a:8b:c8:d6:4a:78:36:5c:e6: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6B:D2:0E:65:82:A7:D5:41:4D:21:7E:08:9D:C9:09:E5:51:7C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14511eda-6977-34e5-9e47-8b3b467364a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:432::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4e:5d:67:a3:43:0a:5a:57:b9:ff:3d:42:78:72:aa:02:e0: 88:14:e8:47:7e:69:92:77:a1:4f:1c:6b:10:e1:c6:4c:a5:84: ae:6a:84:43:c6:8c:37:ac:58:22:02:5b:1c:8a:16:1a:aa:ec: b1:e4:87:87:9a:29:8f:a9:74:2b:19:a5:b5:3b:1b:d0:dc:1f: c4:79:e6:02:97:bb:ed:90:2a:33:52:a8:f3:ba:a8:54:7a:c1: 04:59:cc:ce:50:e0:8c:08:ed:d7:92:a7:b8:1d:33:6c:4b:73: 62:88:b0:09:57:8d:b3:f0:cb:c5:fc:f1:2c:57:32:5b:62:02: 19:f6:79:af:32:65:a7:4e:64:05:bd:7f:3e:92:4e:b6:8f:31: 24:bc:f9:6c:f8:32:88:d1:dd:70:f6:64:c4:72:69:5b:ca:8b: e4:3b:3c:c8:90:10:48:bd:ed:48:5e:b0:9a:fc:60:f3:71:e2: a0:8b:87:46:cd:aa:cd:50:71:65:12:b9:17:b7:8d:ec:2b:4a: a5:ba:b6:91:7c:d4:51:33:44:ae:57:1b:16:f7:f0:a9:ad:a1: 7d:40:f6:f9:7b:5b:8c:81:da:d6:4d:c2:1d:eb:8b:15:5c:b1: 9a:17:4e:6a:8d:7f:51:2c:4a:c3:ba:51:f9:8c:7a:91:49:96: 91:80:30:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzD9Jb5O+Jr7j5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZGUwZDhjMzUtNDlmZS00MWI5LTk3MmYtNmI5ZTYzNjgwNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs4G6r1QuClpJTveB3HSQmtG6+rjW00KSjAa QfbfIdVXNKQO2RbsbsO7kiFlVPbzgqJMbI9Srmu5nrs7ZBh26Pc7DCeoHYAhr2uB CPyt/2Z/6gLJARm7N6smEMKz5wuLfNS/zfnathxcJFMT7lP01yrkDhfRIbTTKznr e/NfU6flBmOc1/j+ZcpP/xit9iWM0Zd4AyQ0UGstzz3X7JItOfeNhd8mjhuBJmWO ejt4jjZ4FD/hRUQpfcFRqs6BykxRwuv7SuyVrhUL7J92iGCWppqQXXP6PoHwg4Ai k5wx4KG3PK3l4Qx2DfoVL4w/wMGePiHIifEKi8jWSng2XOZL+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIlr0g5lgqfVQU0hfgidyQnlUXyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTQ1MTFlZGEtNjk3Ny0z NGU1LTllNDctOGIzYjQ2NzM2NGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxOXWejQwpaV7n/PUJ4cqoC4IgU6Ed+aZJ3oU8caxDhxkylhK5q hEPGjDesWCICWxyKFhqq7LHkh4eaKY+pdCsZpbU7G9DcH8R55gKXu+2QKjNSqPO6 qFR6wQRZzM5Q4IwI7deSp7gdM2xLc2KIsAlXjbPwy8X88SxXMltiAhn2ea8yZadO ZAW9fz6STraPMSS8+Wz4MojR3XD2ZMRyaVvKi+Q7PMiQEEi97UhesJr8YPNx4qCL h0bNqs1QcWUSuRe3jewrSqW6tpF81FEzRK5XGxb38KmtoX1A9vl7W4yB2tZNwh3r ixVcsZoXTmqNf1EsSsO6UfmMepFJlpGAMDM= -----END CERTIFICATE-----Generated at Thu Oct 16 17:37:25 2025 by rpki-client