$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa File: a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa (raw, json) Hash identifier: 9C+1XPKwJ06bp6kY472ok0JIBwEtFHNazA6wkANlOmE= Subject key identifier: A8:02:F2:65:0B:DA:09:19:0F:07:DD:10:07:39:67:08:C5:41:80:33 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B21CC3F0A038782C3089D3E40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 135330 IP address blocks: 2001:470:433::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:0a:03:87:82:c3:08:9d:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=6532fdfb-ec16-4d9f-b86d-f2926d844f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:1b:07:bc:dd:ad:5e:21:7c:f5:04:2d:28: 70:36:cf:fb:0f:b4:f8:37:95:e1:04:f0:37:eb:a7: 7d:9f:d2:85:29:d9:ee:c0:f9:24:05:f8:c0:be:cb: 25:f7:b2:22:24:a5:aa:ef:ff:0f:06:63:fe:d3:e9: 50:66:1f:80:d7:09:3a:ad:d4:65:30:aa:2f:06:07: b8:65:a6:92:be:bc:82:5c:fb:65:3e:01:ba:03:71: f3:ec:7c:bb:27:8f:22:85:50:63:4a:8c:97:77:92: 97:3f:f0:31:5c:07:3c:89:08:c2:e5:4a:0b:8f:03: 4d:cf:58:6c:9b:a0:97:28:9a:2a:9b:55:ca:63:35: 49:ab:ba:9e:43:5c:28:e9:45:39:5a:81:8c:08:8f: 72:64:2e:76:47:bc:fd:ec:4b:be:b7:eb:af:2d:fe: 30:50:b7:5e:9a:49:98:0d:27:07:65:0a:91:d5:b9: 03:d9:a1:e0:a3:a1:1c:8b:9d:ac:fa:7a:0a:3a:47: 0e:c6:b1:c2:dd:a6:72:be:ad:6e:e6:48:01:f2:23: 59:31:0b:32:c0:f6:8c:2a:bb:d2:f8:fc:4a:f9:54: ed:ce:9e:54:7b:a8:47:ff:39:0d:6c:cf:8f:54:33: 26:c1:e6:0a:ff:dc:a6:00:5a:2e:5d:eb:d4:ef:97: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:F2:65:0B:DA:09:19:0F:07:DD:10:07:39:67:08:C5:41:80:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:433::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:dc:bd:59:31:8c:d6:d6:3c:43:fb:79:20:a3:e3:b5:9f:77: 18:2b:23:f8:56:e0:9e:a5:b2:a7:6f:83:0e:a5:f6:ef:70:2d: 0a:92:a6:03:57:9c:5b:5f:d7:2c:24:a6:95:48:97:74:a5:49: 05:f7:38:f5:65:6a:82:bb:19:04:2c:ea:61:cb:fd:7d:bc:a7: 4b:a7:63:ab:71:29:05:d3:d2:19:85:0f:0f:96:bc:fc:97:ea: 4a:fe:1f:a0:75:0f:99:a4:20:11:74:8a:99:fd:1d:9d:b7:54: 0c:ff:d3:ab:65:02:67:49:da:65:e9:18:08:f9:06:7a:55:ae: 9e:f1:e7:b2:08:df:ae:44:c3:c2:3b:dc:10:ab:94:a1:f1:84: 3c:25:00:48:d9:34:0d:2f:78:09:bd:40:f4:99:ad:d9:28:f0: 2c:92:28:39:0d:af:e2:17:9a:7d:7d:eb:72:b3:9b:55:28:db: 46:70:0e:df:23:b7:40:0e:2f:c7:c0:a6:90:76:74:db:a0:f8: 55:79:a2:bd:d7:27:3e:fd:cf:f1:97:e3:51:64:55:14:d9:c6: 6c:df:3c:9e:00:5b:ed:ed:d6:f2:99:02:73:02:a7:81:ea:90: 0d:ea:8c:ec:da:da:f9:32:d6:d5:ad:65:52:0a:73:1a:50:15: 7f:3c:10:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzD8KA4eCwwidPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NjUzMmZkZmItZWMxNi00ZDlmLWI4NmQtZjI5MjZkODQ0ZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhcbB7zdrV4hfPUELShwNs/7D7T4N5XhBPA3 66d9n9KFKdnuwPkkBfjAvssl97IiJKWq7/8PBmP+0+lQZh+A1wk6rdRlMKovBge4 ZaaSvryCXPtlPgG6A3Hz7Hy7J48ihVBjSoyXd5KXP/AxXAc8iQjC5UoLjwNNz1hs m6CXKJoqm1XKYzVJq7qeQ1wo6UU5WoGMCI9yZC52R7z97Eu+t+uvLf4wULdemkmY DScHZQqR1bkD2aHgo6Eci52s+noKOkcOxrHC3aZyvq1u5kgB8iNZMQsywPaMKrvS +PxK+VTtzp5Ue6hH/zkNbM+PVDMmweYK/9ymAFouXevU75cftwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKgC8mUL2gkZDwfdEAc5ZwjFQYAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTg2NWFlYzAtMzZhNC0z MjRiLTllZjUtYTVkZmFiNTI5MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKPcvVkxjNbWPEP7eSCj47WfdxgrI/hW4J6lsqdvgw6l9u9wLQqS pgNXnFtf1ywkppVIl3SlSQX3OPVlaoK7GQQs6mHL/X28p0unY6txKQXT0hmFDw+W vPyX6kr+H6B1D5mkIBF0ipn9HZ23VAz/06tlAmdJ2mXpGAj5BnpVrp7x57II365E w8I73BCrlKHxhDwlAEjZNA0veAm9QPSZrdko8CySKDkNr+IXmn1963Kzm1Uo20Zw Dt8jt0AOL8fAppB2dNug+FV5or3XJz79z/GX41FkVRTZxmzfPJ4AW+3t1vKZAnMC p4HqkA3qjOza2vky1tWtZVIKcxpQFX88EP0= -----END CERTIFICATE-----Generated at Fri Sep 19 18:03:57 2025 by rpki-client