$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa File: 03902d79-5b13-3e15-bae8-b2e0464440b8.roa (raw, json) Hash identifier: L6rlqrTnPNMl2kqrheWrF2k6RyyXnIAOY8e0iqI46Ec= Subject key identifier: 26:AD:6C:0C:34:72:CE:0C:FE:F8:B3:06:87:E5:63:F1:D4:98:A9:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B25FC445A37231E96D94CE1A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 38901 IP address blocks: 2001:470:3b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:44:5a:37:23:1e:96:d9:4c:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=0b420e95-a0ba-456d-b2db-2d76dbd437f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:6e:d7:d4:35:21:fe:86:c3:22:19:12:77: a3:64:d4:63:7f:92:3d:65:89:37:22:8c:ab:0b:fd: 84:11:16:7c:35:48:0b:34:d4:c6:e4:4e:15:57:24: d4:ca:11:0f:66:27:9a:60:a6:2a:86:53:c4:f1:d4: 95:0d:0b:c6:30:e1:bd:f0:21:0c:e7:36:e9:64:e9: 58:fc:00:54:06:6b:f7:f0:6c:27:2e:a9:67:2c:9e: da:5f:c7:48:79:18:07:0c:e5:ea:5b:b1:09:7e:88: 45:e1:2d:88:2b:63:9e:cc:3f:8f:cd:0f:64:0f:f1: 87:08:0f:fc:50:e3:50:0a:49:d7:0f:fc:a0:3c:cd: 50:7c:7c:1b:ef:b2:51:c4:b1:d4:e7:57:07:6d:80: 29:19:53:b2:73:72:c6:42:a2:b2:e9:e6:65:57:0c: b6:b4:20:e5:37:61:e2:4a:06:7e:3a:bc:34:7a:a0: fe:f2:f4:53:17:00:a9:96:7a:d0:03:f3:e4:56:14: 3d:9a:7a:40:be:b3:e5:a4:bc:27:28:33:b4:b8:16: 88:ea:12:e5:6d:7a:5f:8d:86:39:f0:9e:c6:c0:12: b4:b0:9e:53:2f:ac:a6:a7:d2:3a:a5:63:b8:ea:24: 12:9d:43:13:22:fd:90:90:b5:6d:ec:33:3c:18:50: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AD:6C:0C:34:72:CE:0C:FE:F8:B3:06:87:E5:63:F1:D4:98:A9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03902d79-5b13-3e15-bae8-b2e0464440b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:48:18:76:db:5f:1e:87:b1:b1:0a:75:d9:c8:be:05:04:67: e3:d7:e4:fc:cb:ff:89:f0:0e:5b:5f:68:6d:a4:15:5a:77:c7: b3:cf:55:5c:5c:0b:ee:84:04:f2:1d:e3:5a:4c:59:ce:71:50: 6a:c4:f5:72:29:4a:09:83:57:b8:5c:26:e7:55:54:bd:d7:9f: 17:8a:d3:ee:69:07:b8:65:7a:d2:bb:ad:81:1b:5d:9f:fd:0e: 6f:ed:ee:00:c0:1a:fd:73:f7:77:13:fb:4c:0d:5e:19:be:cd: 46:4e:ca:3e:19:9b:3f:45:7d:ca:3e:fe:9c:81:e7:0f:4e:02: 40:aa:6f:f8:6e:17:97:45:9f:41:47:0f:c5:56:35:f6:5f:c3: 1e:5d:d7:fa:86:da:de:a2:c1:26:7c:94:15:a8:fd:1f:b0:20: 69:a2:e5:f9:67:4c:ee:02:4c:a8:5c:03:29:db:26:4b:e5:e1: 57:08:e1:1b:72:67:15:b7:79:29:7b:04:15:01:df:97:9c:e4: 81:79:0c:94:9f:e7:c7:80:e1:d1:6d:a5:8d:94:77:e6:4a:b9: de:d1:3c:1d:9a:0c:d2:da:73:1e:7e:dc:55:f0:62:c8:8e:84: bd:12:95:20:b3:f2:95:06:5c:e6:98:54:54:fc:96:3b:da:9d: c7:18:21:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/ERaNyMeltlM4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MGI0MjBlOTUtYTBiYS00NTZkLWIyZGItMmQ3NmRiZDQzN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkntu19Q1If6GwyIZEnejZNRjf5I9ZYk3Ioyr C/2EERZ8NUgLNNTG5E4VVyTUyhEPZieaYKYqhlPE8dSVDQvGMOG98CEM5zbpZOlY /ABUBmv38GwnLqlnLJ7aX8dIeRgHDOXqW7EJfohF4S2IK2OezD+PzQ9kD/GHCA/8 UONQCknXD/ygPM1QfHwb77JRxLHU51cHbYApGVOyc3LGQqKy6eZlVwy2tCDlN2Hi SgZ+Orw0eqD+8vRTFwCplnrQA/PkVhQ9mnpAvrPlpLwnKDO0uBaI6hLlbXpfjYY5 8J7GwBK0sJ5TL6ymp9I6pWO46iQSnUMTIv2QkLVt7DM8GFDOOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCatbAw0cs4M/vizBoflY/HUmKl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDM5MDJkNzktNWIxMy0z ZTE1LWJhZTgtYjJlMDQ2NDQ0MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMVIGHbbXx6HsbEKddnIvgUEZ+PX5PzL/4nwDltfaG2kFVp3x7PP VVxcC+6EBPId41pMWc5xUGrE9XIpSgmDV7hcJudVVL3XnxeK0+5pB7hletK7rYEb XZ/9Dm/t7gDAGv1z93cT+0wNXhm+zUZOyj4Zmz9Ffco+/pyB5w9OAkCqb/huF5dF n0FHD8VWNfZfwx5d1/qG2t6iwSZ8lBWo/R+wIGmi5flnTO4CTKhcAynbJkvl4VcI 4RtyZxW3eSl7BBUB35ec5IF5DJSf58eA4dFtpY2Ud+ZKud7RPB2aDNLacx5+3FXw YsiOhL0SlSCz8pUGXOaYVFT8ljvanccYIQw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:14 2025 by rpki-client