$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa File: 9a00f132-1002-3836-92ff-a14a40c528fc.roa (raw, json) Hash identifier: 1F4o6kQIT8re4S/KWCs9VJ+VGuPWVVpnqIcGXuKyP1Q= Subject key identifier: D9:8C:C6:EB:CF:0D:4D:3C:83:1F:6D:3B:F1:43:ED:3F:56:A5:88:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF0F13E73A30EEBE6F7857BC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 28773 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3e:73:a3:0e:eb:e6:f7:85:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=7b1e6469-e158-40ed-8901-3ad2b1b40e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:37:19:01:9b:2c:41:02:ee:1e:37:40:8f: cf:d5:a2:9e:58:c2:d2:b7:0d:bc:8a:1e:8c:16:de: c7:22:28:b9:31:c1:89:b4:d5:d2:ec:4e:75:f3:0f: 86:89:d5:ac:69:fe:c3:22:a0:b9:da:24:d0:0c:2d: a7:5c:f6:c2:e5:7a:19:f8:cf:47:bc:cc:f4:f8:d2: 59:d6:6b:52:32:e2:79:8e:0d:66:ab:9e:a8:69:9f: b4:77:78:aa:21:f4:e4:01:96:38:82:d5:79:58:19: b5:83:06:0a:4e:c5:44:57:6e:f7:b9:29:28:73:21: 33:88:24:20:a6:89:e0:16:53:69:77:b4:92:77:ba: 71:d7:1e:ee:c1:c3:79:38:1a:53:3e:c2:c2:cb:71: bb:82:c6:c9:2b:31:0f:6d:81:fd:a6:0b:c1:a2:13: db:66:bd:54:83:67:c8:04:a8:f8:84:0e:e6:ae:bc: 58:a4:4e:ae:87:cc:47:39:1d:f8:5d:47:87:a1:39: 8a:ea:cf:a3:7c:95:60:c8:33:3f:bc:77:d6:03:e3: 61:97:1a:17:14:3c:89:88:f8:ec:4d:98:91:e8:71: b4:13:06:6b:a5:d7:e9:80:0c:96:1f:48:cf:bb:5e: fb:ac:a5:02:1c:fe:a0:b9:56:bd:ab:37:14:c2:56: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8C:C6:EB:CF:0D:4D:3C:83:1F:6D:3B:F1:43:ED:3F:56:A5:88:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:4a:ab:b4:f5:05:97:6f:2c:4b:9f:b7:87:85:90:a6:69: b7:62:10:f9:c1:b4:e1:bf:78:af:08:70:37:0d:ae:17:f4:92: 0f:7c:ae:7e:4a:e3:a3:f6:89:b3:0b:b4:e4:8a:e0:48:31:bf: 18:58:d9:ec:ac:d2:3c:c5:ab:90:e5:a8:6c:7b:43:4a:1b:5d: e6:a6:e7:3a:0a:ac:2b:ea:5e:97:03:68:c7:9d:96:cf:3d:d5: 7b:e0:91:cb:0f:98:fd:cf:d6:17:2d:d7:4a:e5:2d:97:6c:3e: 65:07:b8:07:5a:c5:8d:79:53:a4:04:2a:c3:cd:40:07:00:e4: c4:e6:c7:cc:52:05:6d:d7:ef:47:cb:a7:da:cb:14:e7:08:48: 98:39:37:d0:98:d3:34:7d:4a:a8:b2:65:9d:ef:16:a4:b1:27: f0:0e:38:0f:56:3f:90:0f:86:46:1d:4f:49:4b:00:b4:56:f1: 81:ef:1b:03:38:74:e9:c8:f7:cf:83:e4:1a:cd:1b:ce:b7:78: 89:9a:79:cb:8c:3b:64:a2:aa:85:2a:04:36:51:86:47:1b:72: 99:1e:83:93:31:7f:9e:39:30:c3:3e:e6:30:f3:c7:9d:03:76: 61:3e:af:99:3c:fa:ed:a8:bb:e6:14:27:42:e3:bc:29:55:fd: 95:0d:81:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8T5zow7r5veFe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk N2IxZTY0NjktZTE1OC00MGVkLTg5MDEtM2FkMmIxYjQwZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49M3GQGbLEEC7h43QI/P1aKeWMLStw28ih6M Ft7HIii5McGJtNXS7E518w+GidWsaf7DIqC52iTQDC2nXPbC5XoZ+M9HvMz0+NJZ 1mtSMuJ5jg1mq56oaZ+0d3iqIfTkAZY4gtV5WBm1gwYKTsVEV273uSkocyEziCQg pongFlNpd7SSd7px1x7uwcN5OBpTPsLCy3G7gsbJKzEPbYH9pgvBohPbZr1Ug2fI BKj4hA7mrrxYpE6uh8xHOR34XUeHoTmK6s+jfJVgyDM/vHfWA+NhlxoXFDyJiPjs TZiR6HG0EwZrpdfpgAyWH0jPu177rKUCHP6guVa9qzcUwlaMyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmMxuvPDU08gx9tO/FD7T9WpYhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWEwMGYxMzItMTAwMi0z ODM2LTkyZmYtYTE0YTQwYzUyOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAuKSqu09QWXbyxLn7eHhZCmabdiEPnBtOG/eK8IcDcNrhf0kg98 rn5K46P2ibMLtOSK4EgxvxhY2eys0jzFq5DlqGx7Q0obXeam5zoKrCvqXpcDaMed ls891XvgkcsPmP3P1hct10rlLZdsPmUHuAdaxY15U6QEKsPNQAcA5MTmx8xSBW3X 70fLp9rLFOcISJg5N9CY0zR9SqiyZZ3vFqSxJ/AOOA9WP5APhkYdT0lLALRW8YHv GwM4dOnI98+D5BrNG863eImaecuMO2SiqoUqBDZRhkcbcpkeg5Mxf545MMM+5jDz x50DdmE+r5k8+u2ou+YUJ0LjvClV/ZUNgZc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:28 2025 by rpki-client