$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa File: c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa (raw, json) Hash identifier: +Qow+ncU8BMMQDO13J1aJ1yztEbxV0LUBMwbgAKg6rs= Subject key identifier: 8C:D0:B9:A0:C9:01:6C:E8:3F:B6:AA:96:1F:7F:E7:BA:81:16:D1:F3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B16B0090F67295782322B9680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa Signing time: Fri 05 Sep 2025 01:30:10 +0000 ROA not before: Fri 05 Sep 2025 01:30:10 +0000 ROA not after: Thu 04 Dec 2025 02:30:10 +0000 asID: 40692 IP address blocks: 2001:470:4c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:b0:09:0f:67:29:57:82:32:2b:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 01:30:10 2025 GMT Not After : Dec 4 02:30:10 2025 GMT Subject: CN=043a1565-d249-4a95-af9e-ef009d3e5390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:a7:0f:21:d6:7c:ad:b9:7a:e8:b7:2a:46: 17:55:08:87:46:52:f4:79:22:84:5b:76:25:85:25: 2f:81:c1:40:e3:b8:95:7b:55:57:d0:a3:fe:eb:67: 18:6c:85:9b:66:c2:a3:da:be:aa:65:54:5d:56:2e: 04:94:18:c7:43:a6:dd:c1:f2:c7:55:eb:ff:a1:dc: bd:8e:b5:46:2f:c2:5d:13:32:75:20:9a:98:91:0d: 16:90:6a:07:cf:b2:17:8c:8c:bf:70:db:41:75:6b: da:50:3b:20:83:73:04:f3:2d:4f:75:bc:b9:52:65: d0:1a:c4:89:39:43:86:b9:73:39:3b:ae:48:11:f5: 3c:3e:0c:e4:ca:9f:f2:15:65:f5:26:92:46:21:fa: 6c:9c:c4:6d:cf:d4:c0:28:35:ec:46:8b:36:7b:f1: d5:37:6e:23:c0:e1:3f:91:73:42:cc:e3:a9:00:56: c3:7d:98:a8:9d:32:3e:40:d9:e7:85:56:7d:c0:2d: 20:88:47:6a:26:29:84:7e:10:cf:56:35:c3:e4:46: 8a:85:1e:34:b9:2d:6d:e6:72:a5:b6:b4:5e:87:89: 16:03:9b:43:27:cd:a7:db:a0:76:9b:29:1a:bd:a5: 0c:ca:dd:f5:b5:b0:b9:ad:ec:77:ad:1f:e6:3e:10: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:B9:A0:C9:01:6C:E8:3F:B6:AA:96:1F:7F:E7:BA:81:16:D1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:68:41:7c:50:49:4c:ee:b2:16:6e:ed:1b:4b:85:20:aa:ec: 43:5c:87:15:f5:16:35:b6:71:41:bc:f9:aa:82:fc:1b:25:02: 35:e4:0f:46:dc:a4:00:d1:f0:67:f7:a9:c4:c1:5f:e2:d2:bf: 04:73:64:19:62:d2:43:cc:3e:ba:66:8b:5d:b8:59:b9:0b:46: 95:3a:7b:77:c7:47:7b:81:70:07:66:1f:76:e3:38:23:45:00: 3c:85:5c:29:b2:62:46:0f:f5:61:72:e9:ec:5e:df:53:2a:a8: 8d:f3:49:fa:3c:4a:61:15:31:7c:18:23:cd:5f:e9:06:a7:21: ad:31:65:1e:66:0a:48:7a:75:5d:fc:4f:04:61:75:56:89:71: 6b:9c:e1:e8:c4:c6:5e:70:0b:b6:d3:58:5c:54:00:f0:4d:39: 1f:c6:9a:b1:ab:c0:be:2c:4c:85:fd:09:8b:a1:3e:a8:b4:83: b0:77:96:c3:e7:43:28:87:78:a8:b6:5a:fb:93:d2:60:1c:fc: d3:ec:c4:5f:ff:4b:c8:68:53:92:9f:9c:5d:c2:cf:a7:3a:a3: b7:12:f5:73:bc:5a:90:56:17:39:d1:79:8c:cd:4a:30:ec:82: 56:aa:0f:7b:5b:f8:26:0b:0f:bc:b5:51:17:9d:62:9a:c6:11: 5d:4f:66:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsWsAkPZylXgjIrloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNTAxMzAxMFoXDTI1MTIwNDAyMzAxMFowLzEtMCsGA1UEAxMk MDQzYTE1NjUtZDI0OS00YTk1LWFmOWUtZWYwMDlkM2U1MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VGnDyHWfK25eui3KkYXVQiHRlL0eSKEW3Yl hSUvgcFA47iVe1VX0KP+62cYbIWbZsKj2r6qZVRdVi4ElBjHQ6bdwfLHVev/ody9 jrVGL8JdEzJ1IJqYkQ0WkGoHz7IXjIy/cNtBdWvaUDsgg3ME8y1Pdby5UmXQGsSJ OUOGuXM5O65IEfU8Pgzkyp/yFWX1JpJGIfpsnMRtz9TAKDXsRos2e/HVN24jwOE/ kXNCzOOpAFbDfZionTI+QNnnhVZ9wC0giEdqJimEfhDPVjXD5EaKhR40uS1t5nKl trReh4kWA5tDJ82n26B2mykavaUMyt31tbC5rex3rR/mPhCgCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzQuaDJAWzoP7aqlh9/57qBFtHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQwYTIzNWUtMzg0OS0z NzJhLThiNmMtZjYzZjRiZjg3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRoQXxQSUzushZu7RtLhSCq7ENchxX1FjW2cUG8+aqC/BslAjXk D0bcpADR8Gf3qcTBX+LSvwRzZBli0kPMPrpmi124WbkLRpU6e3fHR3uBcAdmH3bj OCNFADyFXCmyYkYP9WFy6exe31MqqI3zSfo8SmEVMXwYI81f6QanIa0xZR5mCkh6 dV38TwRhdVaJcWuc4ejExl5wC7bTWFxUAPBNOR/GmrGrwL4sTIX9CYuhPqi0g7B3 lsPnQyiHeKi2WvuT0mAc/NPsxF//S8hoU5KfnF3Cz6c6o7cS9XO8WpBWFznReYzN SjDsglaqD3tb+CYLD7y1URedYprGEV1PZk4= -----END CERTIFICATE-----Generated at Fri Sep 19 09:35:32 2025 by rpki-client