$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa File: 1c1d9b1b-aae0-33de-9996-50958fe5794a.roa (raw, json) Hash identifier: wAguWMKV2mVxsPwwxDozN7P57x90O/BybhRKsYWjl2k= Subject key identifier: BE:F0:76:8D:89:35:4D:2B:9D:42:8B:E9:7B:30:0E:22:E6:C5:82:65 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B3556F5966D9787319BC5F980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 140577 IP address blocks: 2001:470:3bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f5:96:6d:97:87:31:9b:c5:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ad85668f-3b44-460b-b611-63af869b6ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:bb:95:e0:b7:09:bd:93:e6:da:f7:2c:43: 46:42:21:66:98:81:e3:b3:68:e9:fa:a3:64:90:d7: 9c:bd:2e:cc:4d:8b:dc:a3:9f:d3:e9:51:1e:b3:3b: 5b:27:6b:da:80:bd:66:de:54:2d:3d:a3:59:17:4b: e9:f5:1c:ed:5c:c1:37:05:2d:9a:84:40:3e:7d:af: c3:f2:2b:55:35:97:04:cb:0d:78:0d:45:23:37:f4: f5:b9:62:c3:49:01:d3:0c:12:e2:00:7f:16:4c:4b: 95:13:d9:15:a7:b5:03:2b:05:61:99:ca:b0:61:00: 96:76:3e:ba:e4:3b:93:6a:6e:6f:81:db:97:a2:37: ef:93:f4:1f:66:8a:e7:4f:b0:8e:96:f6:59:e0:21: b9:96:9f:87:f0:ef:76:8e:45:b8:fc:d7:6d:eb:c9: 87:cd:09:86:c9:80:35:06:e5:81:86:ad:47:ea:be: 77:45:cc:cc:9b:a1:31:e0:74:51:e7:30:23:24:bc: 21:dd:f7:cf:7b:06:0c:52:92:7b:fc:55:0f:4c:9b: c8:ea:7a:d3:d9:89:90:e8:e2:e4:e4:0e:00:db:4f: 99:d6:64:0f:51:c0:c5:00:2a:6c:0b:f8:da:f9:24: 10:3c:67:3b:9c:40:b9:a0:a1:07:ca:b7:7f:ac:cd: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:76:8D:89:35:4D:2B:9D:42:8B:E9:7B:30:0E:22:E6:C5:82:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:91:72:36:e4:3f:a2:41:b6:43:32:d9:36:ae:ed:e8:74:e3: 1c:33:a6:24:d1:1f:62:8f:19:6b:c3:51:27:b4:a9:f0:98:26: ba:ce:93:ed:f3:65:f7:e7:12:54:f3:e0:9c:4c:0b:30:0d:75: 12:11:d3:cb:c0:fa:0e:f2:07:6a:93:3c:bf:f0:ea:a0:28:85: 49:1d:78:86:10:9d:20:02:36:0e:c1:e9:7c:bd:bc:8b:85:30: 35:69:3f:08:a8:d2:fe:04:2a:69:3c:6a:94:06:3e:02:68:15: 3e:ea:75:a0:80:70:b1:b7:57:36:a5:6a:35:9e:0a:78:81:19: 4d:f6:8a:62:8b:70:4e:da:5e:a1:6b:d3:90:f4:57:c6:e9:1c: 53:f6:4b:96:13:af:f8:b6:03:85:26:12:58:e6:7c:ed:a9:e0: 8c:7d:9d:46:0a:52:39:e8:93:b4:c9:cb:9d:fc:fa:32:64:f7: ba:39:78:8b:b1:96:b5:dc:9c:39:60:e9:21:eb:0e:8a:59:77: eb:36:5e:eb:62:21:85:98:c4:85:2c:75:b2:c6:b3:88:b4:51: d1:a1:41:cb:fe:a7:19:84:f2:7c:1d:49:da:09:c8:eb:5c:49: 9d:25:07:a8:fa:ba:7f:89:60:c8:c8:e6:91:7a:ee:cf:49:90: 3f:5c:a5:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VvWWbZeHMZvF+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YWQ4NTY2OGYtM2I0NC00NjBiLWI2MTEtNjNhZjg2OWI2Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHu7leC3Cb2T5tr3LENGQiFmmIHjs2jp+qNk kNecvS7MTYvco5/T6VEesztbJ2vagL1m3lQtPaNZF0vp9RztXME3BS2ahEA+fa/D 8itVNZcEyw14DUUjN/T1uWLDSQHTDBLiAH8WTEuVE9kVp7UDKwVhmcqwYQCWdj66 5DuTam5vgduXojfvk/QfZornT7COlvZZ4CG5lp+H8O92jkW4/Ndt68mHzQmGyYA1 BuWBhq1H6r53RczMm6Ex4HRR5zAjJLwh3ffPewYMUpJ7/FUPTJvI6nrT2YmQ6OLk 5A4A20+Z1mQPUcDFACpsC/ja+SQQPGc7nEC5oKEHyrd/rM1Y3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL7wdo2JNU0rnUKL6XswDiLmxYJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWMxZDliMWItYWFlMC0z M2RlLTk5OTYtNTA5NThmZTU3OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMKRcjbkP6JBtkMy2Tau7eh04xwzpiTRH2KPGWvDUSe0qfCYJrrO k+3zZffnElTz4JxMCzANdRIR08vA+g7yB2qTPL/w6qAohUkdeIYQnSACNg7B6Xy9 vIuFMDVpPwio0v4EKmk8apQGPgJoFT7qdaCAcLG3VzalajWeCniBGU32imKLcE7a XqFr05D0V8bpHFP2S5YTr/i2A4UmEljmfO2p4Ix9nUYKUjnok7TJy538+jJk97o5 eIuxlrXcnDlg6SHrDopZd+s2XutiIYWYxIUsdbLGs4i0UdGhQcv+pxmE8nwdSdoJ yOtcSZ0lB6j6un+JYMjI5pF67s9JkD9cpXs= -----END CERTIFICATE-----Generated at Tue Sep 16 12:00:03 2025 by rpki-client