$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa File: c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa (raw, json) Hash identifier: 0dWJA7Khr/lW5xiQsNiUSCsJHKrm4zU+C7cT1OjgVVg= Subject key identifier: 99:3E:40:E8:2B:92:87:74:3A:A6:33:9F:FC:0C:22:5F:89:D3:A9:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF95152CA1F938693AE948F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 23437 IP address blocks: 2001:470:3a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:52:ca:1f:93:86:93:ae:94:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6f6b2ad4-db63-45cb-9d9d-62f3dc7d3eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:30:ee:be:f6:aa:cb:35:b3:0a:e6:40:5f: 2d:a6:6e:35:6c:5c:39:21:bf:5a:79:2c:6e:78:23: 4f:89:49:97:0d:73:7d:41:14:9e:fb:37:be:48:f6: d8:78:02:39:1d:46:4a:84:93:aa:0a:5f:c1:b0:96: 8a:7b:9b:40:16:24:15:84:3c:aa:d9:71:2c:39:dd: ca:24:2a:d6:76:56:2d:0e:17:dd:33:23:e5:55:99: 1c:a2:e2:5f:00:5e:4f:f6:2d:47:e0:5b:8b:d4:b5: 02:24:14:7e:ab:2f:81:3b:10:e5:76:3a:02:88:31: 32:d6:c0:38:49:5b:c3:11:82:16:d1:eb:ba:36:09: f2:1d:d2:eb:79:f8:30:1d:ec:9a:bd:6d:72:2f:f3: 2e:c2:41:c7:68:e3:db:28:cb:df:8c:e5:99:46:35: c0:d7:00:1e:28:02:cf:9f:db:9e:5f:2a:82:06:ef: 92:9f:0c:6e:e8:a0:27:c4:3b:13:b7:c5:5c:8a:04: 82:7f:6f:d3:83:44:58:76:45:52:76:56:d9:82:df: 8b:9a:4f:3e:cf:4e:41:f8:c3:ec:96:c6:96:c6:43: 02:a7:b2:4d:49:05:72:17:ba:12:8f:1f:eb:e3:49: 48:09:78:38:67:c3:62:b7:2f:13:c0:cd:c7:0b:7e: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:40:E8:2B:92:87:74:3A:A6:33:9F:FC:0C:22:5F:89:D3:A9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1033ffa-6361-3ea0-812d-af8ec89f8f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:07:07:18:50:53:dc:d6:8e:58:00:20:9d:54:3f:66:52:8b: 29:46:6e:a1:34:bb:6b:29:99:6d:41:8f:b9:0d:d6:10:dd:42: d4:fb:4e:ae:40:26:0d:26:ba:c8:11:57:43:d1:04:86:04:df: eb:c6:09:f3:08:9f:0d:05:b1:ec:f5:7b:f7:54:81:b2:1c:50: 85:0d:eb:02:8c:d9:e0:00:bd:3f:14:22:8e:43:d3:00:11:d1: 5f:ee:7b:d3:7e:c9:20:45:3b:bb:52:c8:53:0e:86:d8:80:76: 7c:80:09:b7:1a:b3:37:ff:7b:af:b4:18:76:7d:4d:98:94:91: f8:96:62:3c:d8:53:9e:5d:16:a8:72:8b:ce:db:1d:fe:f2:6d: be:83:8f:fc:23:0b:05:3c:dc:42:cd:40:e9:89:f1:df:9e:f7: 6b:89:46:f8:2f:97:b8:54:4b:6b:63:58:1e:f0:ec:12:97:1b: 77:31:56:ac:99:89:9a:1f:9f:3b:09:0d:e5:89:71:e6:06:14: b1:86:ea:f5:e8:34:97:f8:64:b4:8e:4f:d7:61:67:94:ba:52: c9:cb:02:a5:ba:26:1d:b4:d1:e9:1b:7a:24:2a:60:d4:95:65: 6e:d9:8d:42:f3:11:d9:2b:fd:fa:bb:bf:78:25:35:80:5d:60: ce:a4:fd:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UVLKH5OGk66UjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmY2YjJhZDQtZGI2My00NWNiLTlkOWQtNjJmM2RjN2QzZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GIw7r72qss1swrmQF8tpm41bFw5Ib9aeSxu eCNPiUmXDXN9QRSe+ze+SPbYeAI5HUZKhJOqCl/BsJaKe5tAFiQVhDyq2XEsOd3K JCrWdlYtDhfdMyPlVZkcouJfAF5P9i1H4FuL1LUCJBR+qy+BOxDldjoCiDEy1sA4 SVvDEYIW0eu6NgnyHdLrefgwHeyavW1yL/MuwkHHaOPbKMvfjOWZRjXA1wAeKALP n9ueXyqCBu+Snwxu6KAnxDsTt8VcigSCf2/Tg0RYdkVSdlbZgt+Lmk8+z05B+MPs lsaWxkMCp7JNSQVyF7oSjx/r40lICXg4Z8Nity8TwM3HC35kYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJk+QOgrkod0OqYzn/wMIl+J06ltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzEwMzNmZmEtNjM2MS0z ZWEwLTgxMmQtYWY4ZWM4OWY4ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkHBxhQU9zWjlgAIJ1UP2ZSiylGbqE0u2spmW1Bj7kN1hDdQtT7 Tq5AJg0musgRV0PRBIYE3+vGCfMInw0Fsez1e/dUgbIcUIUN6wKM2eAAvT8UIo5D 0wAR0V/ue9N+ySBFO7tSyFMOhtiAdnyACbcaszf/e6+0GHZ9TZiUkfiWYjzYU55d Fqhyi87bHf7ybb6Dj/wjCwU83ELNQOmJ8d+e92uJRvgvl7hUS2tjWB7w7BKXG3cx VqyZiZofnzsJDeWJceYGFLGG6vXoNJf4ZLSOT9dhZ5S6UsnLAqW6Jh200ekbeiQq YNSVZW7ZjULzEdkr/fq7v3glNYBdYM6k/RI= -----END CERTIFICATE-----Generated at Thu Sep 18 05:09:39 2025 by rpki-client