$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa File: 4083e462-20aa-3a3d-9351-277f5d3e760a.roa (raw, json) Hash identifier: sKWcOj7I4qhK4QO2mhlyvHAlOXoMNOzt7xW98pBG4GY= Subject key identifier: 66:CE:F3:97:AB:D6:86:39:46:6B:24:90:D6:8B:47:70:92:D0:B5:DD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0B76CDF3B81172603753DC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 4474 IP address blocks: 2001:470:3aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cd:f3:b8:11:72:60:37:53:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e23a55eb-0a6c-4959-b08e-7e1b7a6db010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:0a:f9:31:08:c9:45:e0:13:cc:05:81:d8: f6:5e:32:15:7f:ab:07:c7:ce:40:9b:82:3f:87:57: 6e:a2:eb:22:e8:98:82:0e:d8:42:13:5e:f2:90:12: 96:8d:9f:3c:e8:e2:32:5c:35:22:72:88:00:55:60: 19:c5:4d:e1:8a:96:e6:9c:18:17:d9:ed:0f:b7:74: 48:5f:fb:e9:12:d7:fd:3b:ff:18:10:9b:82:f1:e5: 02:94:65:e4:76:fc:8a:22:15:2b:41:2b:e6:97:c4: 5d:b0:82:e1:da:1f:8e:7d:ea:18:23:6d:dc:66:35: 32:63:91:fc:40:96:d8:a4:c6:e2:d5:ac:09:b5:99: a7:72:fc:15:c5:db:5d:ea:36:36:77:bf:78:ce:8b: f7:2f:67:e6:ae:50:0d:41:af:d7:bf:b6:dd:ab:87: 59:bb:59:70:42:f3:60:f2:ac:8b:1d:92:b5:83:6b: a6:74:be:9b:a2:7e:6b:dd:87:8d:22:be:77:9b:03: ea:3a:99:20:ca:c1:53:56:75:dd:78:76:21:b4:b7: e8:5b:0f:f3:a4:00:87:67:47:02:f8:a4:4d:ce:97: e4:09:99:9d:f6:a3:2c:e4:f9:ea:50:e8:b3:cd:7e: 03:47:0c:da:de:66:e9:d4:c1:7a:d7:fe:46:f7:2b: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CE:F3:97:AB:D6:86:39:46:6B:24:90:D6:8B:47:70:92:D0:B5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4083e462-20aa-3a3d-9351-277f5d3e760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6a:60:98:39:b6:55:0e:16:06:76:8a:c4:36:e4:f7:5b:ae: c5:aa:d3:1a:4d:20:2d:e8:0e:b3:21:e3:05:fb:4e:03:69:47: 31:2d:f7:af:a1:2f:e1:bd:53:27:40:df:ba:8b:59:d0:3c:ac: 96:3f:06:f0:4f:0b:5d:9d:59:4f:ff:df:a0:5f:d2:c3:98:f5: ef:7a:a6:83:ff:9c:79:10:49:da:a2:e1:dd:da:e6:76:12:5b: 30:38:67:66:73:3c:5b:40:6f:24:53:37:a8:c6:60:cc:4d:1e: aa:03:a0:7f:a3:c4:b0:c6:3d:a2:32:91:8e:e3:fd:fd:08:70: 2e:cb:02:46:f2:9a:2d:4f:d3:15:61:22:28:e5:3d:26:19:13: 1b:f5:95:89:b1:e1:3b:f9:2a:41:66:0c:0b:fb:e4:fb:35:e0: e1:c8:7a:3a:b0:e2:6c:c5:19:1a:c6:c3:59:ba:ee:bb:e1:eb: 4b:40:41:d1:c6:a7:75:58:5f:c8:76:f5:db:3a:26:3f:98:44: ed:44:be:3e:8d:df:4a:77:98:4e:ea:02:3c:68:dd:4a:0c:ef: b6:f4:9e:2e:9b:a6:35:0b:c5:b0:e8:0c:98:e6:af:f6:52:c1: c1:4f:21:f7:07:95:85:24:c3:31:6d:b0:92:dd:1f:ea:f4:1f: ab:25:a4:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLds3zuBFyYDdT3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTIzYTU1ZWItMGE2Yy00OTU5LWIwOGUtN2UxYjdhNmRiMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+YK+TEIyUXgE8wFgdj2XjIVf6sHx85Am4I/ h1duousi6JiCDthCE17ykBKWjZ886OIyXDUicogAVWAZxU3hipbmnBgX2e0Pt3RI X/vpEtf9O/8YEJuC8eUClGXkdvyKIhUrQSvml8RdsILh2h+OfeoYI23cZjUyY5H8 QJbYpMbi1awJtZmncvwVxdtd6jY2d794zov3L2fmrlANQa/Xv7bdq4dZu1lwQvNg 8qyLHZK1g2umdL6bon5r3YeNIr53mwPqOpkgysFTVnXdeHYhtLfoWw/zpACHZ0cC +KRNzpfkCZmd9qMs5PnqUOizzX4DRwza3mbp1MF61/5G9ytHbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGbO85er1oY5RmskkNaLR3CS0LXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDA4M2U0NjItMjBhYS0z YTNkLTkzNTEtMjc3ZjVkM2U3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpqYJg5tlUOFgZ2isQ25PdbrsWq0xpNIC3oDrMh4wX7TgNpRzEt 96+hL+G9UydA37qLWdA8rJY/BvBPC12dWU//36Bf0sOY9e96poP/nHkQSdqi4d3a 5nYSWzA4Z2ZzPFtAbyRTN6jGYMxNHqoDoH+jxLDGPaIykY7j/f0IcC7LAkbymi1P 0xVhIijlPSYZExv1lYmx4Tv5KkFmDAv75Ps14OHIejqw4mzFGRrGw1m67rvh60tA QdHGp3VYX8h29ds6Jj+YRO1Evj6N30p3mE7qAjxo3UoM77b0ni6bpjULxbDoDJjm r/ZSwcFPIfcHlYUkwzFtsJLdH+r0H6slpNg= -----END CERTIFICATE-----Generated at Mon Sep 15 18:16:10 2025 by rpki-client