$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f29a3f94-b277-3e37-9a17-ee85e38ab8c6.roa File: f29a3f94-b277-3e37-9a17-ee85e38ab8c6.roa (raw, json) Hash identifier: CU7IpFFAYm+WwYIp+jtVrzAiLABkOjryeRrpGitlnsI= Subject key identifier: FF:75:99:5A:BC:F4:34:BD:D7:11:DB:FD:0B:15:D8:86:90:7D:58:1E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B13E5597793B77FED3906F080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f29a3f94-b277-3e37-9a17-ee85e38ab8c6.roa Signing time: Thu 04 Sep 2025 01:30:10 +0000 ROA not before: Thu 04 Sep 2025 01:30:10 +0000 ROA not after: Wed 03 Dec 2025 02:30:10 +0000 asID: 30536 IP address blocks: 2001:470:4c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:e5:59:77:93:b7:7f:ed:39:06:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 4 01:30:10 2025 GMT Not After : Dec 3 02:30:10 2025 GMT Subject: CN=c7cad5e8-6716-4a2a-9df7-172200506a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:c9:05:eb:fd:f3:3d:75:e5:01:78:bb:df: 83:bc:ae:09:87:08:6f:4a:eb:bd:4d:12:62:61:a1: 7b:7f:45:51:30:4e:45:49:70:32:24:0c:3c:3f:39: a1:cf:5b:a0:f7:50:ad:89:ad:bd:c6:4c:c4:24:4e: d4:30:c0:0f:39:08:9c:7f:ef:25:07:a1:b1:9e:a3: 35:b9:57:12:13:e4:30:5b:ca:6f:e4:cf:c5:ad:53: 11:ea:3d:f5:0b:ba:07:42:32:9a:73:5c:cc:ff:aa: 0e:f9:57:da:01:3d:d0:22:20:2e:c0:82:e5:4a:68: ca:16:4c:eb:b9:3a:8c:28:2f:ea:52:ca:8d:6e:e9: 3d:bb:0a:5e:46:53:e9:a5:5a:80:9f:d5:9b:eb:8a: df:42:86:4f:b0:7b:c8:00:e4:35:aa:c2:5f:7c:23: 36:d0:d5:8d:f8:6e:2e:fa:68:4b:49:0e:40:5c:48: 15:55:f8:9a:82:92:e7:1b:b6:0a:53:f8:31:fc:d2: 7a:d3:3c:17:db:77:74:ae:33:70:77:58:28:ca:88: 10:54:45:f9:22:30:5f:e7:34:ee:8d:46:82:0f:41: d3:5f:89:59:e2:08:46:e0:5c:1c:24:3f:f3:58:37: 68:41:8e:43:f0:5d:ff:60:c6:e9:4c:a6:b2:f8:c8: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:75:99:5A:BC:F4:34:BD:D7:11:DB:FD:0B:15:D8:86:90:7D:58:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f29a3f94-b277-3e37-9a17-ee85e38ab8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5f:57:30:11:4a:e1:09:cd:51:21:d1:a5:61:c4:6d:cf:6a: cc:0d:1d:b7:e1:54:15:74:71:20:84:ce:ca:62:1b:25:84:8f: 25:a5:a9:a7:37:85:dc:ee:c3:10:0e:7a:b7:77:f3:75:31:68: 24:10:d0:87:7e:72:ac:7e:00:a9:45:c1:7a:89:7a:aa:0a:04: 70:2a:cf:ed:0b:9f:38:c4:24:97:d6:c0:4d:ea:b4:69:88:45: a3:81:60:18:b0:87:b0:b4:18:80:b8:ce:2d:f2:d1:c3:97:d9: 60:b0:05:d4:dc:f4:b2:a3:b8:82:c3:87:e6:ab:48:0b:8d:03: be:75:a5:bc:c8:df:f4:80:4f:c3:75:28:da:f0:cd:59:70:e2: 19:6d:d6:7d:62:35:7f:fa:7c:a7:33:4e:f8:7e:af:13:3c:ba: c4:c7:1c:0a:d8:f9:4c:b3:5c:c9:2f:bb:94:af:51:d7:4c:ef: e1:0f:48:df:19:ea:fe:0c:3e:ab:52:96:f2:d5:17:12:2b:76: 8d:bc:e4:d1:4e:7e:37:05:44:35:1f:51:bf:75:d6:d8:42:c5: 76:0b:8f:24:6e:a1:10:0d:77:a6:c0:22:a8:b3:ff:9e:a6:4c: ea:88:c8:69:35:ff:70:9b:80:14:f7:e8:48:32:56:39:cc:80: b4:15:cd:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT5Vl3k7d/7TkG8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNDAxMzAxMFoXDTI1MTIwMzAyMzAxMFowLzEtMCsGA1UEAxMk YzdjYWQ1ZTgtNjcxNi00YTJhLTlkZjctMTcyMjAwNTA2YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4DJBev98z115QF4u9+DvK4JhwhvSuu9TRJi YaF7f0VRME5FSXAyJAw8Pzmhz1ug91Ctia29xkzEJE7UMMAPOQicf+8lB6GxnqM1 uVcSE+QwW8pv5M/FrVMR6j31C7oHQjKac1zM/6oO+VfaAT3QIiAuwILlSmjKFkzr uTqMKC/qUsqNbuk9uwpeRlPppVqAn9Wb64rfQoZPsHvIAOQ1qsJffCM20NWN+G4u +mhLSQ5AXEgVVfiagpLnG7YKU/gx/NJ60zwX23d0rjNwd1goyogQVEX5IjBf5zTu jUaCD0HTX4lZ4ghG4FwcJD/zWDdoQY5D8F3/YMbpTKay+MgJ2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP91mVq89DS91xHb/QsV2IaQfVgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjI5YTNmOTQtYjI3Ny0z ZTM3LTlhMTctZWU4NWUzOGFiOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFfVzARSuEJzVEh0aVhxG3PaswNHbfhVBV0cSCEzspiGyWEjyWl qac3hdzuwxAOerd383UxaCQQ0Id+cqx+AKlFwXqJeqoKBHAqz+0LnzjEJJfWwE3q tGmIRaOBYBiwh7C0GIC4zi3y0cOX2WCwBdTc9LKjuILDh+arSAuNA751pbzI3/SA T8N1KNrwzVlw4hlt1n1iNX/6fKczTvh+rxM8usTHHArY+UyzXMkvu5SvUddM7+EP SN8Z6v4MPqtSlvLVFxIrdo285NFOfjcFRDUfUb911thCxXYLjyRuoRANd6bAIqiz /56mTOqIyGk1/3CbgBT36EgyVjnMgLQVzfo= -----END CERTIFICATE-----Generated at Fri Sep 19 19:39:16 2025 by rpki-client