$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9953e775-ee82-3cb2-add0-4ea8e80742f1.roa File: 9953e775-ee82-3cb2-add0-4ea8e80742f1.roa (raw, json) Hash identifier: PXd6fSH7N+6oIS0jJimN96yZwFDWqcu8OgU61oltiDg= Subject key identifier: 61:4D:E9:79:45:96:11:4F:E8:5B:C2:99:B8:B2:36:B9:87:9E:86:68 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B277022C3B3CED27F228C2500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9953e775-ee82-3cb2-add0-4ea8e80742f1.roa Signing time: Thu 11 Sep 2025 01:30:10 +0000 ROA not before: Thu 11 Sep 2025 01:30:10 +0000 ROA not after: Wed 10 Dec 2025 02:30:10 +0000 asID: 200249 IP address blocks: 2001:470:4cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:70:22:c3:b3:ce:d2:7f:22:8c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 11 01:30:10 2025 GMT Not After : Dec 10 02:30:10 2025 GMT Subject: CN=9e31ea63-270e-4be1-b272-b359ed4ae2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:e7:90:de:fe:82:bf:11:50:2a:5c:ac:3d: 03:31:4a:1f:64:72:86:3e:c3:1f:b2:b1:02:60:9f: 6a:f3:9c:5f:92:f5:99:84:da:3d:f6:1b:47:24:88: 3b:cf:55:d0:ec:ac:02:03:13:79:8e:d0:b6:9e:c3: 5f:e1:f2:d1:a7:f8:2b:fa:54:95:06:46:04:33:c9: 7e:be:f2:a2:c8:67:01:73:13:7c:f5:84:59:c4:c4: fd:51:58:ef:19:64:fc:9c:4d:15:39:c0:4d:d3:23: f4:60:7c:3b:08:b6:d5:66:ff:cb:6d:f4:d8:ee:19: 3c:50:08:d3:ea:0b:30:54:37:1a:d0:31:f2:4e:17: 66:99:c0:75:74:27:77:6d:1c:06:c4:fe:04:cf:59: d9:27:92:2f:62:f3:b2:30:81:bd:e1:20:7d:0c:e5: e8:70:4a:fd:d7:8d:e2:1d:f6:ed:3c:1e:35:93:91: 65:92:bc:78:57:7a:7d:91:ba:1c:34:f5:d3:95:d9: c6:50:33:6c:dd:79:dc:ab:81:45:86:3f:59:ef:08: b4:6e:91:54:83:98:c2:5a:03:cd:59:93:30:f4:96: bc:3c:bf:15:10:4d:a0:a9:b2:ed:52:e2:9e:64:0f: d0:36:66:c7:b5:c3:e5:57:bd:f9:9e:63:d4:6a:2c: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4D:E9:79:45:96:11:4F:E8:5B:C2:99:B8:B2:36:B9:87:9E:86:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9953e775-ee82-3cb2-add0-4ea8e80742f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:10:16:7b:f9:03:ee:e0:d8:57:c6:ac:43:49:3d:f8:f2:5b: fe:df:51:9c:1b:d8:45:21:66:de:e1:52:6c:28:24:1f:c5:a6: f0:af:2b:7e:7b:d1:41:48:99:46:70:1e:70:b9:f0:e3:ff:63: ed:da:62:eb:9c:8f:9b:79:cc:54:ed:7c:2b:96:ce:f9:e2:41: da:f7:ef:cc:0e:59:86:96:0a:ff:17:70:33:8e:60:30:cf:d1: 77:45:a0:3f:0e:36:2c:b8:5a:2f:66:b7:00:79:8c:e3:3b:55: 97:26:91:10:fe:4f:c1:5f:d0:22:cc:b1:df:ba:77:ba:05:e7: c5:c2:00:b6:4a:7c:4f:b6:8a:48:6d:08:e4:15:9e:ef:c1:00: a0:2c:9f:7d:1e:45:f0:f5:c0:15:09:a5:a1:d6:42:d3:00:04: dc:24:d8:8f:69:6a:57:ec:cf:9d:ad:12:70:6b:25:bf:2b:46: e7:d8:98:aa:ab:f6:1b:51:90:96:cb:68:00:bb:26:cf:2c:ee: de:2a:a3:bb:17:77:62:9b:3d:18:1e:0e:8a:3d:64:20:9c:c9: bf:47:da:97:c1:eb:de:82:b7:80:20:e4:7c:a5:d3:b3:40:ed: 83:6e:a0:87:d9:52:f5:1c:cf:a8:7d:73:0a:df:32:e8:6c:e1: 28:af:69:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsncCLDs87SfyKMJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxMTAxMzAxMFoXDTI1MTIxMDAyMzAxMFowLzEtMCsGA1UEAxMk OWUzMWVhNjMtMjcwZS00YmUxLWIyNzItYjM1OWVkNGFlMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny7nkN7+gr8RUCpcrD0DMUofZHKGPsMfsrEC YJ9q85xfkvWZhNo99htHJIg7z1XQ7KwCAxN5jtC2nsNf4fLRp/gr+lSVBkYEM8l+ vvKiyGcBcxN89YRZxMT9UVjvGWT8nE0VOcBN0yP0YHw7CLbVZv/LbfTY7hk8UAjT 6gswVDca0DHyThdmmcB1dCd3bRwGxP4Ez1nZJ5IvYvOyMIG94SB9DOXocEr9143i HfbtPB41k5Flkrx4V3p9kbocNPXTldnGUDNs3Xncq4FFhj9Z7wi0bpFUg5jCWgPN WZMw9Ja8PL8VEE2gqbLtUuKeZA/QNmbHtcPlV735nmPUaixfsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGFN6XlFlhFP6FvCmbiyNrmHnoZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTk1M2U3NzUtZWU4Mi0z Y2IyLWFkZDAtNGVhOGU4MDc0MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYQFnv5A+7g2FfGrENJPfjyW/7fUZwb2EUhZt7hUmwoJB/FpvCv K3570UFImUZwHnC58OP/Y+3aYuucj5t5zFTtfCuWzvniQdr378wOWYaWCv8XcDOO YDDP0XdFoD8ONiy4Wi9mtwB5jOM7VZcmkRD+T8Ff0CLMsd+6d7oF58XCALZKfE+2 ikhtCOQVnu/BAKAsn30eRfD1wBUJpaHWQtMABNwk2I9palfsz52tEnBrJb8rRufY mKqr9htRkJbLaAC7Js8s7t4qo7sXd2KbPRgeDoo9ZCCcyb9H2pfB696Ct4Ag5Hyl 07NA7YNuoIfZUvUcz6h9cwrfMuhs4Sivaes= -----END CERTIFICATE-----Generated at Fri Sep 19 09:32:51 2025 by rpki-client