$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa File: 211e541b-a489-3085-9583-5ef6d8a55b16.roa (raw, json) Hash identifier: /x5cVvxIPfT3pxqnU6GkM2t7Y87wTUMCXKg33srKEDY= Subject key identifier: 12:4A:57:9D:9B:1C:7A:EB:60:BF:16:2C:DC:D9:AF:A2:EE:7D:CF:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B13D6CB5CD67B18BB4AFF83E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 43957 IP address blocks: 2001:470:34a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:cb:5c:d6:7b:18:bb:4a:ff:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=af17405c-f302-4a99-87d0-4bbd17b9015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:82:b2:b1:ad:85:ad:31:93:b9:fb:fc:64: 18:05:ea:a4:b3:36:55:df:e1:b2:d2:35:b6:7c:5c: 23:4b:35:73:4c:ee:68:43:3e:df:b3:fb:4e:df:f4: 97:4f:69:71:6e:2a:73:cc:3a:b6:24:70:36:39:53: a0:e4:64:bd:28:b2:82:70:de:56:aa:3a:69:86:28: 1e:0a:c4:f4:4b:27:de:39:f3:0b:6f:8a:88:85:bf: 01:4c:bf:5e:b5:8d:80:c2:3a:c1:db:2a:35:a7:55: 89:8f:3b:eb:60:7e:73:96:be:a1:fc:60:4b:db:ae: 21:1b:58:72:47:fd:44:51:6a:fe:90:27:b2:04:6f: a9:40:c8:e0:cd:95:b6:ea:82:4d:e8:ba:b9:c2:26: 49:67:65:d1:41:85:45:b7:af:33:44:71:f5:60:29: 9e:56:2d:a7:55:d7:71:8e:b0:8b:cf:b3:f0:6b:34: 4c:30:d9:c9:3c:a8:a9:76:bb:9c:3b:a3:57:d7:67: 97:74:ad:cf:9b:8b:1b:dd:f1:b4:7c:01:6d:38:22: 1e:aa:1c:08:bb:59:e0:47:91:51:44:00:a2:6c:98: 27:0a:69:20:89:b9:6e:c5:82:6b:42:78:60:08:d2: 45:c0:18:ac:3a:76:46:3e:a5:12:04:65:98:dd:99: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4A:57:9D:9B:1C:7A:EB:60:BF:16:2C:DC:D9:AF:A2:EE:7D:CF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/211e541b-a489-3085-9583-5ef6d8a55b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:34a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:80:70:5b:61:68:d6:73:a4:60:56:3c:9a:70:d6:8e:e5:1a: 23:4a:92:97:bc:b2:d3:21:19:d8:f5:72:bf:1c:dd:ad:c1:64: 4f:11:01:af:c3:56:f7:dc:67:65:70:4b:bb:62:29:14:6c:54: fc:70:ee:ab:f4:fa:7d:f2:ac:02:13:94:1d:88:a5:c2:51:e1: 29:da:cf:c4:47:d5:00:f2:d3:4a:d9:5c:bc:81:9c:a1:02:2a: 48:2f:60:fe:a1:a0:ed:1d:d3:8a:73:6a:4e:90:ea:cc:9d:47: 0f:33:4f:9c:7e:b4:a9:fc:f4:46:a0:be:97:c4:b9:c5:f2:85: 9d:d9:2a:b2:5b:17:5e:73:ce:18:4a:b1:66:0b:f0:6f:5b:06: 38:61:71:07:33:c9:0e:08:4e:37:ab:23:37:d0:b5:a4:0f:a3: 56:4a:12:ea:64:e4:8f:94:f2:e0:2a:63:de:da:2f:94:8f:e8: 40:55:14:9f:10:33:97:1d:67:a8:a9:e0:7b:ad:82:1a:cd:7a: ed:d2:ce:45:d6:f9:3f:cd:bd:83:f0:07:c5:3a:25:a0:3d:d4: 46:5d:46:b5:41:0d:8f:38:c8:36:68:59:a6:f6:2c:11:6e:65: be:9e:6a:82:50:04:c3:96:97:19:b6:7c:61:56:6e:e9:25:09: 50:74:ce:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1stc1nsYu0r/g+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWYxNzQwNWMtZjMwMi00YTk5LTg3ZDAtNGJiZDE3YjkwMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm22CsrGtha0xk7n7/GQYBeqkszZV3+Gy0jW2 fFwjSzVzTO5oQz7fs/tO3/SXT2lxbipzzDq2JHA2OVOg5GS9KLKCcN5Wqjpphige CsT0SyfeOfMLb4qIhb8BTL9etY2AwjrB2yo1p1WJjzvrYH5zlr6h/GBL264hG1hy R/1EUWr+kCeyBG+pQMjgzZW26oJN6Lq5wiZJZ2XRQYVFt68zRHH1YCmeVi2nVddx jrCLz7PwazRMMNnJPKipdrucO6NX12eXdK3Pm4sb3fG0fAFtOCIeqhwIu1ngR5FR RACibJgnCmkgibluxYJrQnhgCNJFwBisOnZGPqUSBGWY3ZnC+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJKV52bHHrrYL8WLNzZr6Lufc8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjExZTU0MWItYTQ4OS0z MDg1LTk1ODMtNWVmNmQ4YTU1YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALaAcFthaNZzpGBWPJpw1o7lGiNKkpe8stMhGdj1cr8c3a3BZE8R Aa/DVvfcZ2VwS7tiKRRsVPxw7qv0+n3yrAITlB2IpcJR4Snaz8RH1QDy00rZXLyB nKECKkgvYP6hoO0d04pzak6Q6sydRw8zT5x+tKn89EagvpfEucXyhZ3ZKrJbF15z zhhKsWYL8G9bBjhhcQczyQ4ITjerIzfQtaQPo1ZKEupk5I+U8uAqY97aL5SP6EBV FJ8QM5cdZ6ip4HutghrNeu3SzkXW+T/NvYPwB8U6JaA91EZdRrVBDY84yDZoWab2 LBFuZb6eaoJQBMOWlxm2fGFWbuklCVB0zkw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:44 2025 by rpki-client