$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa File: 8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa (raw, json) Hash identifier: OMISjs8Zz233Q56iKzPlC8Kb4HthAvdJG5Dvbxhn3p8= Subject key identifier: E7:08:1E:C8:B0:8E:B6:CA:71:10:08:7F:1B:D1:AB:D3:2C:FE:2C:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B40904F4A58C564A7CF8B2F60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa Signing time: Sat 20 Sep 2025 01:30:12 +0000 ROA not before: Sat 20 Sep 2025 01:30:12 +0000 ROA not after: Fri 19 Dec 2025 02:30:12 +0000 asID: 270118 IP address blocks: 2001:470:4db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:90:4f:4a:58:c5:64:a7:cf:8b:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 01:30:12 2025 GMT Not After : Dec 19 02:30:12 2025 GMT Subject: CN=7ba6a389-1d8d-47a5-830a-b9242e136f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:54:29:95:f5:c7:f5:6f:46:bc:e9:8a:13: a5:13:f3:e8:1a:91:51:8a:e0:bf:69:83:d0:24:de: 80:4a:53:56:1d:0c:a3:03:3b:96:e8:d4:80:c0:80: 99:71:41:b9:9c:03:0c:b8:0f:d3:1a:24:dc:7a:3a: fa:cc:42:c5:e2:c3:2d:43:24:50:f7:1b:7b:fd:e0: 7d:af:e5:0b:ce:b7:5e:49:4b:e3:06:5b:15:b7:88: c1:8e:a9:23:07:b8:79:01:ac:69:fc:e4:74:39:33: 81:4b:78:68:78:f6:fe:13:93:e9:ab:69:73:88:ae: dc:dd:e3:fe:01:7b:fa:db:ab:05:db:b0:a1:63:6e: 4a:56:74:60:c0:38:4e:25:8f:33:9d:06:c9:3a:83: 35:0f:76:c1:0e:ac:0c:36:ca:2a:a6:5f:1e:d5:b0: 24:6a:0e:0f:9d:25:46:da:ed:d8:cc:5a:9f:29:87: d4:6e:bc:39:c1:99:17:50:03:8e:de:f5:9a:80:ac: 67:f3:e1:91:aa:74:80:63:1e:4e:b8:f1:c2:22:5e: 63:a0:fe:66:fc:83:06:6e:3f:83:bd:8e:ef:6b:3d: 79:e6:d5:7e:92:d9:97:f2:9e:8e:6b:97:05:bc:57: bd:d8:20:5c:89:98:c6:6a:94:06:cb:e2:e3:04:83: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:08:1E:C8:B0:8E:B6:CA:71:10:08:7F:1B:D1:AB:D3:2C:FE:2C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cdfe820-9c18-3ca2-b897-ce7d123d70c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d8:4c:54:db:f3:52:7d:31:8a:6a:02:b8:8c:0b:c6:a3:ec: 65:f7:68:bb:49:d5:85:53:e5:17:ae:cb:25:4f:8e:54:08:41: 4b:46:6f:1a:91:9c:e1:22:cf:2e:e0:60:0f:90:a6:fa:e0:d3: 13:f4:8b:e1:8c:65:bd:f3:2e:a5:f6:5c:8e:65:38:e8:df:fe: e7:97:07:f9:d0:40:a3:92:4d:f2:20:81:50:14:dc:dd:d3:84: c5:87:c2:13:36:fc:a8:ad:48:02:f9:2a:6f:84:fa:c7:0e:96: ca:cf:78:15:ff:25:40:2e:6e:72:bf:4f:45:a7:21:d7:64:a1: 21:de:d8:49:56:04:8d:4c:ae:aa:24:b4:8a:80:95:6d:f9:11: 08:81:db:38:29:90:2a:78:75:f5:2d:9c:c0:21:b4:1b:dc:c3: e1:d3:75:ec:31:37:f9:59:40:b0:59:32:e8:28:15:c1:79:55: d8:b2:a3:ab:60:61:d4:df:80:27:af:2a:c7:ee:18:c7:f1:22: b3:2c:0f:07:d0:77:3f:d8:70:64:c7:5a:be:e5:4c:5b:66:33: 78:c5:5b:50:56:83:0d:12:e3:59:c6:49:c1:b8:dd:cb:e9:9d: 9e:36:34:4d:ba:72:db:9a:7a:cc:08:72:1b:9f:5c:81:5b:19: fa:b0:8b:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAkE9KWMVkp8+LL2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMDAxMzAxMloXDTI1MTIxOTAyMzAxMlowLzEtMCsGA1UEAxMk N2JhNmEzODktMWQ4ZC00N2E1LTgzMGEtYjkyNDJlMTM2ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdUKZX1x/VvRrzpihOlE/PoGpFRiuC/aYPQ JN6ASlNWHQyjAzuW6NSAwICZcUG5nAMMuA/TGiTcejr6zELF4sMtQyRQ9xt7/eB9 r+ULzrdeSUvjBlsVt4jBjqkjB7h5Aaxp/OR0OTOBS3hoePb+E5Ppq2lziK7c3eP+ AXv626sF27ChY25KVnRgwDhOJY8znQbJOoM1D3bBDqwMNsoqpl8e1bAkag4PnSVG 2u3YzFqfKYfUbrw5wZkXUAOO3vWagKxn8+GRqnSAYx5OuPHCIl5joP5m/IMGbj+D vY7vaz155tV+ktmX8p6Oa5cFvFe92CBciZjGapQGy+LjBIOS7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOcIHsiwjrbKcRAIfxvRq9Ms/ix6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGNkZmU4MjAtOWMxOC0z Y2EyLWI4OTctY2U3ZDEyM2Q3MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDYTFTb81J9MYpqAriMC8aj7GX3aLtJ1YVT5ReuyyVPjlQIQUtG bxqRnOEizy7gYA+Qpvrg0xP0i+GMZb3zLqX2XI5lOOjf/ueXB/nQQKOSTfIggVAU 3N3ThMWHwhM2/KitSAL5Km+E+scOlsrPeBX/JUAubnK/T0WnIddkoSHe2ElWBI1M rqoktIqAlW35EQiB2zgpkCp4dfUtnMAhtBvcw+HTdewxN/lZQLBZMugoFcF5Vdiy o6tgYdTfgCevKsfuGMfxIrMsDwfQdz/YcGTHWr7lTFtmM3jFW1BWgw0S41nGScG4 3cvpnZ42NE26ctuaeswIchufXIFbGfqwiwc= -----END CERTIFICATE-----Generated at Mon Oct 27 01:59:00 2025 by rpki-client