$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa File: bb4f2049-ba62-3c87-888a-febe4a159ee0.roa (raw, json) Hash identifier: kzuVPCo8tt14JhRai8v6uJNp/tiJcmjPSYDNaYjtN8o= Subject key identifier: D2:51:B0:E9:51:79:20:6A:1E:78:DC:94:94:20:7D:A5:8E:B7:6D:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B5C6CB0228801145E2984D300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 20648 IP address blocks: 2001:470:390::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b0:22:88:01:14:5e:29:84:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=3a142225-fa93-4759-ac40-c114c72a0f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:68:a6:a4:1a:6e:58:97:4b:c5:3b:cb:fa: f2:01:89:19:8a:a8:69:d3:cf:7d:9d:e3:8f:3d:99: 8e:e4:cf:d7:a6:ba:9a:eb:4f:61:1b:5e:04:2d:02: 49:1d:71:9c:ff:e1:3f:9b:fa:65:1b:a0:ba:54:2c: 0f:c4:c9:fe:06:79:b9:da:b2:b3:b4:46:3a:b2:be: a0:fc:4f:d9:d4:4f:a8:e2:7e:91:8e:2a:4c:26:d5: a7:57:6e:58:c6:86:84:26:3f:3f:3c:ae:4a:1c:37: 80:d9:bb:04:ee:66:fc:5a:9e:e7:0d:27:c7:79:08: 07:6b:37:16:65:42:a0:82:86:2e:e2:02:6a:70:bb: e6:b0:6c:7d:9a:15:7d:a1:97:cb:79:a4:b3:cb:85: 42:33:7b:b2:2d:e1:ad:4e:15:8e:fa:4a:ab:de:6a: bf:c8:99:86:2d:de:0e:d6:56:7f:53:d8:91:e3:13: e5:7a:d2:21:fe:2e:68:58:e6:3a:fc:6b:d9:e5:c4: c2:16:10:3a:1f:e7:f1:56:a4:89:e6:1f:86:1c:8a: 88:3f:20:a0:4d:36:32:17:7b:ed:22:98:e4:c9:9d: af:69:99:51:13:2d:63:3d:35:c2:41:ee:b2:31:3b: 55:60:aa:09:5e:2b:40:fa:71:36:51:3c:21:b1:e6: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:B0:E9:51:79:20:6A:1E:78:DC:94:94:20:7D:A5:8E:B7:6D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:390::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:41:58:8e:22:63:c9:d1:52:ab:90:a9:dc:67:7d:9a:06:44: a4:6a:2a:d2:3c:ba:23:fb:c7:5f:23:e0:e8:39:a5:fc:96:b2: ce:a2:4f:f1:87:1f:3c:61:c2:5b:a0:c8:f5:71:5b:ee:20:77: 33:9a:31:63:d7:78:d8:b8:9b:e7:b7:0a:9a:fa:a5:4f:67:d3: 04:e7:c6:76:36:65:5e:81:31:35:2d:56:12:c1:ec:ea:2b:a1: d3:ed:78:2d:16:6f:eb:e9:b3:0b:63:ef:c1:78:01:29:c9:6d: bd:2b:44:07:7d:1c:95:c7:a0:76:0b:62:89:56:62:aa:ac:4c: a8:f8:5b:b6:0c:49:62:05:fa:1a:9e:92:30:13:df:74:73:39: e6:84:fd:b5:7b:28:9e:4e:58:c3:3f:f0:32:c4:e1:a1:f9:2d: 4d:49:2a:13:d8:34:b4:60:e8:05:32:1f:e8:cb:69:e3:96:e8: 65:6d:e4:8b:77:cc:96:45:05:69:6f:f7:e0:50:03:4e:c7:e8: 6c:ad:00:fa:36:6d:c6:e6:8f:7b:cb:75:79:0f:bb:1c:96:f8: 79:9c:fb:5f:d7:0a:b9:33:76:65:3c:d0:15:df:9e:a9:4d:d4: 9b:7b:ff:2a:bb:1a:de:61:f9:f7:ff:9a:64:61:a2:17:c1:b2: b7:0e:24:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbLAiiAEUXimE0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk M2ExNDIyMjUtZmE5My00NzU5LWFjNDAtYzExNGM3MmEwZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ5opqQabliXS8U7y/ryAYkZiqhp0899neOP PZmO5M/Xprqa609hG14ELQJJHXGc/+E/m/plG6C6VCwPxMn+Bnm52rKztEY6sr6g /E/Z1E+o4n6RjipMJtWnV25YxoaEJj8/PK5KHDeA2bsE7mb8Wp7nDSfHeQgHazcW ZUKggoYu4gJqcLvmsGx9mhV9oZfLeaSzy4VCM3uyLeGtThWO+kqr3mq/yJmGLd4O 1lZ/U9iR4xPletIh/i5oWOY6/GvZ5cTCFhA6H+fxVqSJ5h+GHIqIPyCgTTYyF3vt IpjkyZ2vaZlREy1jPTXCQe6yMTtVYKoJXitA+nE2UTwhseaclwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNJRsOlReSBqHnjclJQgfaWOt20sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI0ZjIwNDktYmE2Mi0z Yzg3LTg4OGEtZmViZTRhMTU5ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9BWI4iY8nRUquQqdxnfZoGRKRqKtI8uiP7x18j4Og5pfyWss6i T/GHHzxhwlugyPVxW+4gdzOaMWPXeNi4m+e3Cpr6pU9n0wTnxnY2ZV6BMTUtVhLB 7OorodPteC0Wb+vpswtj78F4ASnJbb0rRAd9HJXHoHYLYolWYqqsTKj4W7YMSWIF +hqekjAT33RzOeaE/bV7KJ5OWMM/8DLE4aH5LU1JKhPYNLRg6AUyH+jLaeOW6GVt 5It3zJZFBWlv9+BQA07H6GytAPo2bcbmj3vLdXkPuxyW+Hmc+1/XCrkzdmU80BXf nqlN1Jt7/yq7Gt5h+ff/mmRhohfBsrcOJGE= -----END CERTIFICATE-----Generated at Sat Oct 18 09:21:00 2025 by rpki-client