$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daf22697-d01a-39ff-bb49-b259fcc896db.roa File: daf22697-d01a-39ff-bb49-b259fcc896db.roa (raw, json) Hash identifier: 4r3txX5IuZ3Zx0vE8tABuNuZMAkZcTYkceRB6DgBZGc= Subject key identifier: D7:57:70:E7:7C:8E:B3:AF:D1:08:64:9D:CE:14:8C:3F:BE:6D:7D:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B21CC3FBF9B84DE805A469DE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daf22697-d01a-39ff-bb49-b259fcc896db.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 44477 IP address blocks: 2001:470:433::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:bf:9b:84:de:80:5a:46:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=59966bb3-e1ec-432b-a13f-8577dc9606cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:bd:29:96:ee:ff:a8:8e:f0:36:e2:d3:4f: bc:a2:68:21:bf:bf:f3:7f:a0:cd:aa:96:6a:8c:33: a2:42:ef:33:4b:b3:ee:95:1d:eb:06:1c:8e:78:34: dc:3b:1c:ec:17:2a:ff:43:57:d8:0e:b1:d4:45:e7: c0:82:26:aa:86:03:c9:14:d1:60:12:d1:a9:56:9c: 32:c0:73:24:18:f2:ef:51:17:c6:c8:c0:ef:06:d5: 8f:06:f6:8b:f7:b8:05:ea:9b:27:71:80:92:17:9c: 04:d5:5d:fa:0d:75:f9:52:88:9a:91:e0:20:63:6f: 2f:5d:84:4b:51:b8:d1:c7:00:bb:a0:19:77:9b:05: 7e:7f:1a:31:06:bc:85:9e:48:40:2c:db:61:bf:5f: 00:5b:9c:8d:c4:a2:20:19:5f:a1:24:6a:a1:90:e5: 61:c1:80:d3:0e:48:fc:bb:5f:1f:53:49:16:bd:b1: c0:48:67:b1:34:29:a2:e3:62:f6:dc:a5:4e:46:2f: 3d:13:4d:e1:99:09:b7:48:ca:18:d7:ec:7d:98:ce: 88:97:a4:da:9b:8e:bb:cf:f9:78:66:04:dd:0a:28: 71:c6:ad:9f:76:f2:82:ba:e0:ea:31:4f:81:b7:ce: 3f:ce:f3:27:75:00:07:50:30:a7:f5:93:d4:6e:1e: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:70:E7:7C:8E:B3:AF:D1:08:64:9D:CE:14:8C:3F:BE:6D:7D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daf22697-d01a-39ff-bb49-b259fcc896db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:433::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e0:80:c1:f9:9c:f9:a1:3e:69:a7:da:26:89:6c:ad:b5:4e: 13:1a:c7:0a:70:aa:56:e9:80:f7:8b:4c:42:9b:9f:18:f9:95: 15:a5:c7:60:cf:de:c1:87:97:eb:77:2d:6b:e8:56:84:3e:d8: 52:68:92:0a:1b:7d:ee:34:81:75:f4:da:b2:17:b2:8b:59:22: bf:3b:00:12:13:57:0f:9c:4a:5c:2f:ce:df:ed:e7:72:83:df: 71:a6:4b:0f:12:55:dd:f9:27:b4:57:6e:43:f8:53:85:bd:16: 0c:59:8a:50:c5:5d:90:1a:ad:05:cc:f7:f2:d1:09:94:2b:34: 7f:b4:be:d5:8a:09:ca:b5:c7:c3:98:7f:57:6c:ba:cc:be:0a: 62:93:b4:30:19:04:ab:36:4d:78:87:01:52:db:d1:f3:9c:6a: 43:cd:ba:35:08:d1:4d:86:4f:2a:63:70:77:9a:10:5a:d7:b4: 9e:82:5d:a2:45:8c:00:fa:fc:f5:d6:a0:d3:1f:26:d8:fe:6a: f1:8f:4b:13:41:2a:a1:7a:b7:01:08:8e:63:34:f2:6a:7a:7f: c0:23:fc:04:46:4b:13:58:c4:1c:4c:66:cd:71:c2:02:c3:ad: 5c:cb:c1:53:01:1f:7b:2e:71:36:7a:4d:cf:00:c7:bc:5c:3b: cf:51:67:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzD+/m4TegFpGneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NTk5NjZiYjMtZTFlYy00MzJiLWExM2YtODU3N2RjOTYwNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R69KZbu/6iO8Dbi00+8omghv7/zf6DNqpZq jDOiQu8zS7PulR3rBhyOeDTcOxzsFyr/Q1fYDrHURefAgiaqhgPJFNFgEtGpVpwy wHMkGPLvURfGyMDvBtWPBvaL97gF6psncYCSF5wE1V36DXX5UoiakeAgY28vXYRL UbjRxwC7oBl3mwV+fxoxBryFnkhALNthv18AW5yNxKIgGV+hJGqhkOVhwYDTDkj8 u18fU0kWvbHASGexNCmi42L23KVORi89E03hmQm3SMoY1+x9mM6Il6Tam467z/l4 ZgTdCihxxq2fdvKCuuDqMU+Bt84/zvMndQAHUDCn9ZPUbh49OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNdXcOd8jrOv0Qhknc4UjD++bX2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFmMjI2OTctZDAxYS0z OWZmLWJiNDktYjI1OWZjYzg5NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnggMH5nPmhPmmn2iaJbK21ThMaxwpwqlbpgPeLTEKbnxj5lRWl x2DP3sGHl+t3LWvoVoQ+2FJokgobfe40gXX02rIXsotZIr87ABITVw+cSlwvzt/t 53KD33GmSw8SVd35J7RXbkP4U4W9FgxZilDFXZAarQXM9/LRCZQrNH+0vtWKCcq1 x8OYf1dsusy+CmKTtDAZBKs2TXiHAVLb0fOcakPNujUI0U2GTypjcHeaEFrXtJ6C XaJFjAD6/PXWoNMfJtj+avGPSxNBKqF6twEIjmM08mp6f8Aj/ARGSxNYxBxMZs1x wgLDrVzLwVMBH3sucTZ6Tc8Ax7xcO89RZ2s= -----END CERTIFICATE-----Generated at Fri Sep 19 02:54:05 2025 by rpki-client