$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41298bcf-fcde-3fae-aa53-2a9201a845f3.roa File: 41298bcf-fcde-3fae-aa53-2a9201a845f3.roa (raw, json) Hash identifier: 5oaAVyMaR9En2MNUyYUhSIKxUmonGrZAeVPLq2EGfRk= Subject key identifier: 3A:7C:5C:D3:46:48:3A:01:92:C9:1C:BF:C3:85:C8:B8:93:51:99:62 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B3557049B8C99502237AF7100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41298bcf-fcde-3fae-aa53-2a9201a845f3.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 401110 IP address blocks: 2001:470:422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:04:9b:8c:99:50:22:37:af:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c05a9af3-d7bf-439a-9b7e-67bec68e620e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:02:3f:83:0d:5d:c5:43:09:8e:5d:45:55: 5e:0e:ae:37:d9:69:06:45:2b:a7:46:19:e3:22:ac: b6:0c:f8:6f:f8:d3:cd:02:00:39:56:26:26:48:cc: 9c:5c:f3:2b:06:e8:e8:0a:58:f3:33:a2:d0:6c:61: 83:c0:10:72:98:bd:66:bb:dd:8b:2b:c4:c2:a4:e4: 9b:8c:8d:0f:10:5f:cf:41:0a:16:4b:7e:5d:36:70: 6e:c5:4f:d3:e5:51:9f:c9:f8:a2:f7:a0:ed:ec:20: 0c:3c:38:23:a7:d3:e8:d1:96:1a:d6:1c:66:a0:90: 9c:e8:a8:c4:d8:35:8f:bc:9b:8e:27:ab:59:cf:7c: f7:2a:69:0b:44:df:f6:9f:9e:94:c1:3c:55:50:22: 48:67:8d:4f:d3:d8:f3:8a:8d:c2:8c:89:21:d6:dd: 9d:c3:ef:53:e8:37:66:4a:41:ea:f8:5e:5e:80:11: b3:05:40:ca:19:ac:d0:30:c9:1e:74:83:6f:da:8b: 16:04:02:79:bc:f4:0f:a8:e7:1d:bc:ba:82:66:4e: d5:71:3a:ea:c8:73:be:cb:70:23:99:77:a4:4d:42: ac:d8:41:ee:e5:e0:b0:41:10:7e:3d:4e:3d:6b:05: bd:e6:ad:04:98:be:8c:0e:38:02:26:d3:06:6b:9e: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:5C:D3:46:48:3A:01:92:C9:1C:BF:C3:85:C8:B8:93:51:99:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41298bcf-fcde-3fae-aa53-2a9201a845f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:422::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4b:0b:38:df:c6:18:ed:dd:a4:aa:61:b1:82:97:5a:9c:c8: 8b:e2:d7:b1:c5:d6:08:8a:72:c2:2f:93:d8:f2:a9:25:22:df: ae:6e:89:b2:14:8b:bb:ff:06:40:c4:1d:63:f2:4c:54:8b:f7: c6:d0:3a:59:61:a4:c5:19:61:78:9f:af:af:6b:6d:ad:12:28: 35:67:f0:3d:79:09:88:d9:f4:b2:b4:34:64:18:7a:22:f8:a4: 10:f5:60:ea:ff:39:4b:41:b0:e0:9c:d1:20:f5:00:d5:be:df: 47:b6:fa:84:30:64:f0:76:b7:de:05:51:67:3e:0e:fe:e6:48: c7:ae:41:a9:6c:36:fe:a0:f2:67:76:31:ec:6c:4a:ad:ce:41: 58:87:b0:63:1e:ff:60:30:46:ce:59:5e:fb:0f:cc:71:3b:cc: 9c:64:32:71:47:f1:75:7e:e7:5d:41:d7:f1:4d:1c:35:ed:67: 70:aa:5e:f8:31:88:bb:2a:ec:45:f7:c5:e7:42:0c:29:b2:c8: a2:6b:0a:67:71:1a:0f:c6:b1:5f:8f:49:04:21:4a:69:a3:eb: 1f:c3:56:b2:bf:9e:77:a4:2d:58:68:3f:fa:1c:71:af:55:2d: 19:6b:21:6a:f8:f5:18:09:54:a5:02:b2:d4:fd:7b:90:24:1f: 4d:48:de:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VwSbjJlQIjevcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzA1YTlhZjMtZDdiZi00MzlhLTliN2UtNjdiZWM2OGU2MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBgCP4MNXcVDCY5dRVVeDq432WkGRSunRhnj Iqy2DPhv+NPNAgA5ViYmSMycXPMrBujoCljzM6LQbGGDwBBymL1mu92LK8TCpOSb jI0PEF/PQQoWS35dNnBuxU/T5VGfyfii96Dt7CAMPDgjp9Po0ZYa1hxmoJCc6KjE 2DWPvJuOJ6tZz3z3KmkLRN/2n56UwTxVUCJIZ41P09jzio3CjIkh1t2dw+9T6Ddm SkHq+F5egBGzBUDKGazQMMkedINv2osWBAJ5vPQPqOcdvLqCZk7VcTrqyHO+y3Aj mXekTUKs2EHu5eCwQRB+PU49awW95q0EmL6MDjgCJtMGa54cPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDp8XNNGSDoBkskcv8OFyLiTUZliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDEyOThiY2YtZmNkZS0z ZmFlLWFhNTMtMmE5MjAxYTg0NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJLCzjfxhjt3aSqYbGCl1qcyIvi17HF1giKcsIvk9jyqSUi365u ibIUi7v/BkDEHWPyTFSL98bQOllhpMUZYXifr69rba0SKDVn8D15CYjZ9LK0NGQY eiL4pBD1YOr/OUtBsOCc0SD1ANW+30e2+oQwZPB2t94FUWc+Dv7mSMeuQalsNv6g 8md2MexsSq3OQViHsGMe/2AwRs5ZXvsPzHE7zJxkMnFH8XV+511B1/FNHDXtZ3Cq XvgxiLsq7EX3xedCDCmyyKJrCmdxGg/GsV+PSQQhSmmj6x/DVrK/nnekLVhoP/oc ca9VLRlrIWr49RgJVKUCstT9e5AkH01I3rg= -----END CERTIFICATE-----Generated at Fri Sep 19 19:39:51 2025 by rpki-client