$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/261a3e7d-623b-3ecd-91dc-c6f72f3c1178.roa File: 261a3e7d-623b-3ecd-91dc-c6f72f3c1178.roa (raw, json) Hash identifier: 2aKnYzVVGwVcsHt4gOHjcDYCVbZ+STG7XAeR/oULNfQ= Subject key identifier: 47:8F:EE:D3:0B:B4:13:F0:2C:82:CB:EA:66:E7:35:D6:88:C5:1C:AD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B477C7574008EDB4204390F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/261a3e7d-623b-3ecd-91dc-c6f72f3c1178.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 397601 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:75:74:00:8e:db:42:04:39:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=a9dd40e8-b41e-45a3-88bd-f19ed229893b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:cb:5f:cd:bc:25:dc:68:77:9b:2e:ed:89: 6e:dc:f0:0a:04:c2:95:0f:b7:04:51:d4:66:65:01: 32:cb:09:2a:02:45:7d:d4:ff:1e:cf:3e:02:f2:1a: cc:14:3c:02:29:e0:7a:8e:27:6d:a2:7e:82:b0:17: da:bb:61:40:63:22:7f:a7:b2:30:e4:af:70:bb:43: 6c:70:0e:da:bf:50:ed:37:6b:16:22:53:96:60:06: 9a:6b:38:00:0b:79:b7:89:cc:16:7b:64:02:e5:c2: de:5a:f8:99:0c:cc:6f:21:64:5a:59:45:f8:00:bd: 12:21:4a:4e:03:3c:f7:6f:e1:61:bd:7c:a1:be:b6: 66:d5:6f:2e:7c:1a:1c:c3:a5:95:89:6b:72:5f:7b: 1a:cb:8c:a0:2a:4c:90:39:f2:02:c0:9e:a7:c4:f3: b9:7e:84:58:35:83:2f:2e:d4:3f:14:4a:5d:1b:13: 66:3a:a3:60:32:21:93:bb:f2:83:17:db:13:ad:a1: 99:7f:ee:fb:da:58:2d:a6:12:84:dc:b7:6d:70:dc: c4:a3:d5:13:e5:dc:5a:16:1c:9a:0a:8d:9e:20:9e: 9a:c7:0c:0b:e2:fb:3e:ea:1c:52:08:27:b9:f4:91: 33:17:d5:df:e3:bf:cf:f6:12:bd:de:f2:a0:f2:81: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:EE:D3:0B:B4:13:F0:2C:82:CB:EA:66:E7:35:D6:88:C5:1C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/261a3e7d-623b-3ecd-91dc-c6f72f3c1178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2b:b9:ee:84:ed:2d:3b:20:47:d6:71:38:72:8f:03:5c:ed: c0:31:02:84:bd:cc:01:9d:c0:6b:c9:28:b4:8f:b0:68:36:d1: 52:12:e1:63:04:20:61:18:d8:bc:f8:7c:b9:55:71:85:cb:d8: 48:db:f9:ae:f5:db:c0:fb:d2:aa:33:6e:3f:23:24:47:27:1b: 8f:de:9d:ca:30:6d:17:a1:24:b3:f4:fd:33:6e:00:30:33:5e: 5e:89:79:9e:4e:da:b9:11:fb:ad:af:78:c3:5f:7e:26:13:ad: 9f:4d:97:bc:12:72:d7:a2:0c:35:a3:c5:21:33:73:e4:22:e0: 8d:ca:6b:c8:1d:b3:3d:bd:d3:e0:34:af:f6:fc:f4:53:9e:63: 37:97:21:0e:35:10:45:9e:61:5c:81:52:20:fa:06:5e:97:e6: 0a:24:25:4e:52:d2:81:54:55:55:67:7e:ff:95:ab:17:08:71: df:48:c3:dd:b8:dd:e6:15:59:d2:05:57:04:68:3c:fb:f2:96: 78:f7:ed:51:d7:46:8f:a1:08:dc:43:33:64:da:5f:70:29:0b: f9:06:53:81:10:d1:d0:b4:58:52:96:63:4c:8f:a7:c6:67:14: c2:65:bd:31:ad:da:cc:ab:2a:f7:3d:cc:43:7c:29:ab:7b:1a: 15:c7:ae:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHV0AI7bQgQ5DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YTlkZDQwZTgtYjQxZS00NWEzLTg4YmQtZjE5ZWQyMjk4OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrLX828Jdxod5su7Ylu3PAKBMKVD7cEUdRm ZQEyywkqAkV91P8ezz4C8hrMFDwCKeB6jidton6CsBfau2FAYyJ/p7Iw5K9wu0Ns cA7av1DtN2sWIlOWYAaaazgAC3m3icwWe2QC5cLeWviZDMxvIWRaWUX4AL0SIUpO Azz3b+FhvXyhvrZm1W8ufBocw6WViWtyX3say4ygKkyQOfICwJ6nxPO5foRYNYMv LtQ/FEpdGxNmOqNgMiGTu/KDF9sTraGZf+772lgtphKE3LdtcNzEo9UT5dxaFhya Co2eIJ6axwwL4vs+6hxSCCe59JEzF9Xf47/P9hK93vKg8oGoJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeP7tMLtBPwLILL6mbnNdaIxRytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjYxYTNlN2QtNjIzYi0z ZWNkLTkxZGMtYzZmNzJmM2MxMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgrue6E7S07IEfWcThyjwNc7cAxAoS9zAGdwGvJKLSPsGg20VIS 4WMEIGEY2Lz4fLlVcYXL2Ejb+a7128D70qozbj8jJEcnG4/encowbRehJLP0/TNu ADAzXl6JeZ5O2rkR+62veMNffiYTrZ9Nl7wScteiDDWjxSEzc+Qi4I3Ka8gdsz29 0+A0r/b89FOeYzeXIQ41EEWeYVyBUiD6Bl6X5gokJU5S0oFUVVVnfv+VqxcIcd9I w9243eYVWdIFVwRoPPvylnj37VHXRo+hCNxDM2TaX3ApC/kGU4EQ0dC0WFKWY0yP p8ZnFMJlvTGt2syrKvc9zEN8Kat7GhXHrkg= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:30 2025 by rpki-client