$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a70bd944-372e-34fd-9a86-f7a8190e46c6.roa File: a70bd944-372e-34fd-9a86-f7a8190e46c6.roa (raw, json) Hash identifier: gOFOSlN2kTviyhCzcwm765K60WoItFUIu8tFRBfylMw= Subject key identifier: DD:4D:CF:02:23:55:C1:BB:BA:5F:E9:0E:81:DF:00:EC:D4:95:C2:97 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B27702376917AA453E522F930 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a70bd944-372e-34fd-9a86-f7a8190e46c6.roa Signing time: Thu 11 Sep 2025 01:30:10 +0000 ROA not before: Thu 11 Sep 2025 01:30:10 +0000 ROA not after: Wed 10 Dec 2025 02:30:10 +0000 asID: 397041 IP address blocks: 2001:470:4cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:70:23:76:91:7a:a4:53:e5:22:f9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 11 01:30:10 2025 GMT Not After : Dec 10 02:30:10 2025 GMT Subject: CN=00d64fbe-b1cc-4f66-a841-8d760bae6ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:07:4b:4e:9a:b4:3e:6f:0f:16:2c:08:6c: 83:62:4a:12:4c:9e:ef:22:db:4f:0a:5e:e1:e7:c9: d9:c6:fa:25:83:53:a8:8b:b6:28:58:b6:18:30:4e: 2f:8e:f9:24:88:42:b2:57:d4:10:c5:14:aa:af:74: aa:4f:99:cb:3c:42:2b:ef:5d:b3:de:f0:ab:14:f2: 6e:1c:a9:03:f2:e5:26:49:61:79:d2:7b:8d:38:68: be:9f:0c:74:95:77:39:29:b6:ea:7a:fa:61:da:05: 9d:bd:33:d4:fe:d7:e8:33:dd:d4:d0:a2:b7:31:ad: fd:93:13:18:b1:3c:de:ee:49:1f:58:ac:c7:5f:75: 96:21:29:a7:a5:04:30:af:b2:f7:28:da:f3:6c:a1: 14:7d:46:73:26:bf:46:94:68:99:61:90:db:ee:36: 21:b5:14:f1:cc:5d:24:87:4c:c9:d6:23:d0:f2:bd: fb:5b:70:29:c3:41:09:3e:10:a6:f3:40:e5:0b:7c: 66:1d:58:a0:d9:d4:35:e9:e8:b2:5a:69:5b:54:fe: c1:29:a6:6f:ff:65:a7:10:9b:fa:78:e2:f9:a1:b6: aa:07:1b:f7:6b:26:46:19:1a:d8:65:f7:e5:53:6b: e5:6b:9c:59:15:6d:ba:47:e2:6e:95:f1:9c:33:32: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4D:CF:02:23:55:C1:BB:BA:5F:E9:0E:81:DF:00:EC:D4:95:C2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a70bd944-372e-34fd-9a86-f7a8190e46c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0a:78:3b:fd:c6:30:44:cc:f1:34:c3:af:31:8c:53:a9:d7: 57:0b:9a:4f:9c:ca:50:fb:bb:e1:68:5a:c7:8c:55:59:af:5c: e5:d5:58:a6:95:4a:80:cd:6b:da:5f:93:e4:8b:1e:df:43:2a: 38:e1:69:33:71:60:f4:c7:98:24:29:f5:1b:d7:d0:ee:7b:47: 14:94:1b:b1:08:02:24:be:f4:e6:54:f8:cf:28:96:96:c7:8a: a1:f3:9d:db:b8:21:4d:7b:1f:a1:71:54:ac:e4:f7:0d:cf:a4: 65:c1:07:bd:12:b2:02:46:d3:49:74:69:df:ce:85:10:12:68: ff:18:35:af:71:dd:84:da:f8:7b:4d:5c:e2:cb:0e:97:f3:cf: 16:e5:bf:11:df:19:a5:5d:98:7a:f5:fa:4d:ea:d4:a4:99:d0: 1a:c7:19:90:27:aa:82:f8:f8:00:33:1a:e8:40:b3:ea:e1:eb: 36:35:99:e0:c5:07:85:63:13:25:cf:d5:a0:41:1b:f9:49:93: 6a:78:7b:81:a7:bc:24:f7:8f:3d:3e:94:37:1c:4c:e0:df:ec: 5b:f3:ed:38:31:27:f8:02:f5:d5:4e:11:3a:a2:c5:fe:aa:b4: e0:15:53:87:57:63:3d:d7:10:ba:52:13:07:4e:f0:d6:99:e5: a3:d7:24:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsncCN2kXqkU+Ui+TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxMTAxMzAxMFoXDTI1MTIxMDAyMzAxMFowLzEtMCsGA1UEAxMk MDBkNjRmYmUtYjFjYy00ZjY2LWE4NDEtOGQ3NjBiYWU2ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvooHS06atD5vDxYsCGyDYkoSTJ7vIttPCl7h 58nZxvolg1Ooi7YoWLYYME4vjvkkiEKyV9QQxRSqr3SqT5nLPEIr712z3vCrFPJu HKkD8uUmSWF50nuNOGi+nwx0lXc5Kbbqevph2gWdvTPU/tfoM93U0KK3Ma39kxMY sTze7kkfWKzHX3WWISmnpQQwr7L3KNrzbKEUfUZzJr9GlGiZYZDb7jYhtRTxzF0k h0zJ1iPQ8r37W3Apw0EJPhCm80DlC3xmHVig2dQ16eiyWmlbVP7BKaZv/2WnEJv6 eOL5obaqBxv3ayZGGRrYZfflU2vla5xZFW26R+JulfGcMzLu3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1NzwIjVcG7ul/pDoHfAOzUlcKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTcwYmQ5NDQtMzcyZS0z NGZkLTlhODYtZjdhODE5MGU0NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkKeDv9xjBEzPE0w68xjFOp11cLmk+cylD7u+FoWseMVVmvXOXV WKaVSoDNa9pfk+SLHt9DKjjhaTNxYPTHmCQp9RvX0O57RxSUG7EIAiS+9OZU+M8o lpbHiqHzndu4IU17H6FxVKzk9w3PpGXBB70SsgJG00l0ad/OhRASaP8YNa9x3YTa +HtNXOLLDpfzzxblvxHfGaVdmHr1+k3q1KSZ0BrHGZAnqoL4+AAzGuhAs+rh6zY1 meDFB4VjEyXP1aBBG/lJk2p4e4GnvCT3jz0+lDccTODf7Fvz7TgxJ/gC9dVOETqi xf6qtOAVU4dXYz3XELpSEwdO8NaZ5aPXJBM= -----END CERTIFICATE-----Generated at Fri Sep 19 09:35:15 2025 by rpki-client