$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa File: 67997ea0-d09c-3c09-826b-b8693975ef81.roa (raw, json) Hash identifier: DhpTnQe27+J/cryWfXCt+nAW2vz5Bk0w80gMNuiTAL4= Subject key identifier: DC:30:52:B6:A1:32:06:72:95:55:E9:8D:21:BE:AD:A1:40:59:27:CA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B56D739C61E87998CD2A5A700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 125 IP address blocks: 2001:470:33a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:39:c6:1e:87:99:8c:d2:a5:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=217c98a0-2d79-41d5-a086-b192a1cac399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:f1:e9:98:62:16:73:20:ce:cd:96:fb:fb: df:44:63:09:91:d7:f7:d9:3a:ea:12:4f:d7:53:8b: f2:12:fc:25:79:d2:c1:1f:e9:70:7a:c7:2b:61:74: e9:5d:a5:99:f5:3a:fd:1e:4f:0b:67:3b:b0:4f:75: e2:9a:29:f6:b4:78:96:d8:b3:87:54:8b:53:d6:b4: 2d:5d:1d:1c:c6:08:a2:5d:12:54:c4:d2:c7:36:d6: 5d:c8:a5:68:bb:38:0e:b0:cf:26:ae:c8:45:28:81: 9c:25:ae:ee:f7:bf:68:42:08:8f:ed:4d:dd:5e:1e: 6f:79:7d:2a:16:4e:e2:77:de:a2:58:95:97:01:1c: fa:97:0f:09:3b:1e:5f:6b:98:59:37:cb:38:9d:f0: 24:17:4e:b1:e0:bb:7c:32:61:54:03:bb:f4:a4:fc: b9:51:ce:e6:14:34:9c:1b:18:6a:24:6a:2f:d0:98: df:22:41:ab:57:75:40:38:0e:ae:5f:05:82:6d:f0: 8c:3b:83:05:fa:bc:07:25:6d:41:de:05:02:d9:e2: 5e:13:2d:16:7d:fe:6b:f1:1a:99:c4:34:a1:1d:50: a6:f9:32:d1:e8:c1:9d:09:c4:01:04:6b:29:40:28: ed:7a:99:fc:77:bb:74:1d:2e:24:2c:f0:f5:a4:47: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:52:B6:A1:32:06:72:95:55:E9:8D:21:BE:AD:A1:40:59:27:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67997ea0-d09c-3c09-826b-b8693975ef81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a9:eb:8d:77:f9:3c:85:c5:71:a6:5d:8d:33:ab:ad:7b:1c: 3a:0f:13:19:68:3f:df:65:2a:fd:8c:ad:e1:e7:2e:f9:06:e2: 11:aa:08:02:06:91:59:27:3a:c5:a9:14:76:5e:ea:1f:59:08: c1:c8:ab:b4:62:9c:c4:21:2f:df:21:22:a1:39:13:d8:b2:97: b7:54:e5:48:b8:f9:86:0d:b3:f5:05:2d:4a:b6:fd:17:96:9a: 75:a0:04:f6:c1:45:ad:c9:b8:cf:5e:9b:43:41:09:58:81:73: 67:e2:de:ca:d0:3e:77:7d:c5:22:75:a8:60:f3:5a:38:54:09: 4c:62:fc:bb:c0:03:be:95:2a:43:2f:31:0a:82:2a:99:f6:88: 27:b0:3b:a5:63:4a:90:ae:74:cb:28:96:47:a3:e4:d6:0e:b5: 65:36:30:25:81:6c:94:3e:57:dc:da:ba:4e:69:2c:87:5c:ae: ab:87:eb:3d:bb:08:19:41:50:e3:b3:0e:3b:ce:5e:ee:ac:fa: 7c:47:6e:92:1d:d8:be:aa:8e:dd:65:31:f7:5c:77:c9:f8:d7: 2a:7e:4e:1c:c3:2f:ae:f0:90:ff:52:87:a0:6e:c9:60:38:da: ce:2d:3b:4d:ea:52:79:98:a6:56:1f:1b:d0:2d:12:f6:4d:a3: 42:1d:c6:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1znGHoeZjNKlpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MjE3Yzk4YTAtMmQ3OS00MWQ1LWEwODYtYjE5MmExY2FjMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lbx6ZhiFnMgzs2W+/vfRGMJkdf32TrqEk/X U4vyEvwledLBH+lwescrYXTpXaWZ9Tr9Hk8LZzuwT3Ximin2tHiW2LOHVItT1rQt XR0cxgiiXRJUxNLHNtZdyKVouzgOsM8mrshFKIGcJa7u979oQgiP7U3dXh5veX0q Fk7id96iWJWXARz6lw8JOx5fa5hZN8s4nfAkF06x4Lt8MmFUA7v0pPy5Uc7mFDSc GxhqJGov0JjfIkGrV3VAOA6uXwWCbfCMO4MF+rwHJW1B3gUC2eJeEy0Wff5r8RqZ xDShHVCm+TLR6MGdCcQBBGspQCjtepn8d7t0HS4kLPD1pEfkdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNwwUrahMgZylVXpjSG+raFAWSfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjc5OTdlYTAtZDA5Yy0z YzA5LTgyNmItYjg2OTM5NzVlZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKep6413+TyFxXGmXY0zq617HDoPExloP99lKv2MreHnLvkG4hGq CAIGkVknOsWpFHZe6h9ZCMHIq7RinMQhL98hIqE5E9iyl7dU5Ui4+YYNs/UFLUq2 /ReWmnWgBPbBRa3JuM9em0NBCViBc2fi3srQPnd9xSJ1qGDzWjhUCUxi/LvAA76V KkMvMQqCKpn2iCewO6VjSpCudMsolkej5NYOtWU2MCWBbJQ+V9zauk5pLIdcrquH 6z27CBlBUOOzDjvOXu6s+nxHbpId2L6qjt1lMfdcd8n41yp+ThzDL67wkP9Sh6Bu yWA42s4tO03qUnmYplYfG9AtEvZNo0IdxtY= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:17 2025 by rpki-client