$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970e9b76-aa35-3931-8e95-35adab4f091d.roa File: 970e9b76-aa35-3931-8e95-35adab4f091d.roa (raw, json) Hash identifier: 9LRnGT09kAOyw6E3CMOZhuh1dzYJ0tr/jKED70hn0CQ= Subject key identifier: A5:27:D4:18:99:FF:92:52:5C:C1:D9:58:BC:75:7D:F8:DD:B9:F2:2F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B24A574E2718FBC97EFE69480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970e9b76-aa35-3931-8e95-35adab4f091d.roa Signing time: Wed 10 Sep 2025 01:30:10 +0000 ROA not before: Wed 10 Sep 2025 01:30:10 +0000 ROA not after: Tue 09 Dec 2025 02:30:10 +0000 asID: 63981 IP address blocks: 2001:470:2cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:a5:74:e2:71:8f:bc:97:ef:e6:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 10 01:30:10 2025 GMT Not After : Dec 9 02:30:10 2025 GMT Subject: CN=9754aa5b-7cf6-4f13-b90a-50b88210b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:12:94:bd:66:e4:99:65:08:55:c2:00:de: b5:94:c6:94:20:28:17:68:c6:e5:38:78:87:ae:58: 31:9d:89:03:dd:b7:56:11:4a:15:b7:5f:05:64:f2: 19:b3:97:ec:78:18:33:11:6d:35:f7:be:0c:30:21: 87:8d:76:06:5d:d4:8d:19:1e:ce:f9:b3:db:57:d1: 1f:0d:14:3c:38:1b:96:8c:01:df:44:3c:f4:72:e8: cd:8e:9d:ad:de:43:ae:10:c9:d5:37:af:f0:21:f4: d1:9b:5d:5e:27:4b:59:2e:13:6a:78:ff:f0:cc:55: f2:23:2b:47:e8:ee:31:da:1c:9f:2b:11:e0:ac:3b: b8:e4:56:1c:c6:2c:37:cb:9f:23:25:d5:1d:32:2b: 34:fb:52:46:7f:c6:dc:91:b0:3b:96:fb:2f:61:28: b3:18:60:b8:61:a3:03:2d:1e:5f:5f:3a:1a:be:1a: 31:f2:e2:16:a9:ae:5a:49:34:c3:fb:53:1a:8c:11: 5a:ea:1f:5d:41:40:2a:0d:f2:fa:bf:6d:3a:63:7b: c6:a3:d3:30:28:23:f5:3f:3e:aa:6c:68:d3:7a:98: ec:44:e7:fc:2a:fb:34:ae:06:de:58:2e:7b:76:1e: 80:8b:5f:b7:11:2e:43:78:9a:fb:38:58:72:04:ea: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:D4:18:99:FF:92:52:5C:C1:D9:58:BC:75:7D:F8:DD:B9:F2:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/970e9b76-aa35-3931-8e95-35adab4f091d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0e:d8:bd:f4:39:43:ce:7d:fd:0b:8a:f3:98:d8:0e:26:98: fd:d0:ac:96:eb:1f:6a:85:03:29:14:11:8d:cf:5e:3e:b3:5c: ac:31:3a:98:bc:28:70:d7:1d:f3:0a:b4:25:26:df:24:e9:7b: c9:21:4c:d5:88:8b:e2:2e:03:81:14:0b:8b:31:07:54:57:63: 2a:e9:ad:fb:49:d0:07:46:08:86:01:33:e2:e3:78:12:95:00: 85:ce:34:dd:02:a1:0d:f2:16:f5:f6:9d:3b:58:2d:a3:26:90: 5e:3d:59:ee:87:39:b7:88:40:79:e4:1b:4b:42:06:75:c9:a6: 03:2a:88:76:f3:d9:b3:d3:5e:8d:16:c4:12:a3:aa:08:59:09: e4:01:ff:b7:9d:2e:9c:f9:47:a6:5d:ec:d2:8b:84:aa:c9:36: 7f:45:32:11:bc:38:ef:1d:f6:06:fc:b1:0b:40:64:92:af:77: ff:79:f6:14:83:44:3e:ad:1d:9c:ba:83:d8:7a:91:38:9b:65: 66:93:e9:81:5c:59:f2:24:f8:20:c5:54:26:5c:78:a3:9e:26: ea:06:43:f4:16:4d:6b:35:de:d4:91:52:6f:a2:f8:db:fc:6a: c8:8b:5b:90:dd:22:eb:e4:fc:af:fb:c9:d2:31:39:c0:c8:78: dd:fe:4d:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskpXTicY+8l+/mlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxMDAxMzAxMFoXDTI1MTIwOTAyMzAxMFowLzEtMCsGA1UEAxMk OTc1NGFhNWItN2NmNi00ZjEzLWI5MGEtNTBiODgyMTBiNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlUSlL1m5JllCFXCAN61lMaUICgXaMblOHiH rlgxnYkD3bdWEUoVt18FZPIZs5fseBgzEW01974MMCGHjXYGXdSNGR7O+bPbV9Ef DRQ8OBuWjAHfRDz0cujNjp2t3kOuEMnVN6/wIfTRm11eJ0tZLhNqeP/wzFXyIytH 6O4x2hyfKxHgrDu45FYcxiw3y58jJdUdMis0+1JGf8bckbA7lvsvYSizGGC4YaMD LR5fXzoavhox8uIWqa5aSTTD+1MajBFa6h9dQUAqDfL6v206Y3vGo9MwKCP1Pz6q bGjTepjsROf8Kvs0rgbeWC57dh6Ai1+3ES5DeJr7OFhyBOovSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUn1BiZ/5JSXMHZWLx1ffjdufIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTcwZTliNzYtYWEzNS0z OTMxLThlOTUtMzVhZGFiNGYwOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALcO2L30OUPOff0LivOY2A4mmP3QrJbrH2qFAykUEY3PXj6zXKwx Opi8KHDXHfMKtCUm3yTpe8khTNWIi+IuA4EUC4sxB1RXYyrprftJ0AdGCIYBM+Lj eBKVAIXONN0CoQ3yFvX2nTtYLaMmkF49We6HObeIQHnkG0tCBnXJpgMqiHbz2bPT Xo0WxBKjqghZCeQB/7edLpz5R6Zd7NKLhKrJNn9FMhG8OO8d9gb8sQtAZJKvd/95 9hSDRD6tHZy6g9h6kTibZWaT6YFcWfIk+CDFVCZceKOeJuoGQ/QWTWs13tSRUm+i +Nv8asiLW5DdIuvk/K/7ydIxOcDIeN3+TUg= -----END CERTIFICATE-----Generated at Fri Sep 19 09:47:13 2025 by rpki-client