$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42c24661-e4de-3e1c-8af9-adc0d32692f3.roa File: 42c24661-e4de-3e1c-8af9-adc0d32692f3.roa (raw, json) Hash identifier: 6PwMFP659vjKyKmWj0NkLjcXrJRg1E1dq/6fmA7PxZM= Subject key identifier: 13:70:19:B9:0E:63:30:C1:7B:26:AD:D9:E6:74:6E:F0:05:9B:8F:11 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B03253DEB1439467AE6473580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42c24661-e4de-3e1c-8af9-adc0d32692f3.roa Signing time: Fri 29 Aug 2025 01:30:10 +0000 ROA not before: Fri 29 Aug 2025 01:30:10 +0000 ROA not after: Thu 27 Nov 2025 02:30:10 +0000 asID: 401903 IP address blocks: 2001:470:250::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:25:3d:eb:14:39:46:7a:e6:47:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 29 01:30:10 2025 GMT Not After : Nov 27 02:30:10 2025 GMT Subject: CN=7abf57aa-d404-4117-82f4-e1609894c94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a8:5c:af:3f:1a:43:35:51:76:c4:31:14:91: 8b:1a:0a:69:a6:d9:7f:e9:40:29:0e:94:9d:f2:ee: 41:e3:ea:07:46:ff:01:16:60:04:e8:ed:78:c9:b6: 03:77:69:0d:91:b6:86:b1:73:e7:b2:7d:10:19:a5: d5:7d:d1:b0:81:3f:31:f1:51:08:ee:2f:d3:8f:bb: ea:dc:fc:77:e4:2d:94:4a:2f:44:7f:d6:07:67:60: 4b:7d:f5:0c:5f:70:66:da:2b:76:bc:c2:9c:1c:4a: 00:b5:c8:af:4c:c9:1c:d4:bb:a0:8c:62:59:ca:dc: 04:ff:59:87:98:3a:40:37:a9:83:be:8b:f4:c3:9c: 28:21:70:97:4e:60:d8:44:df:76:c0:52:9a:0a:7c: ff:0a:45:46:a8:80:68:6f:2d:7e:3b:25:48:a8:00: fe:f1:a4:ed:fc:2f:54:e6:4f:98:c9:44:de:f8:3b: b7:d2:1f:0b:04:93:b2:0b:0f:d7:11:5f:8f:13:aa: 05:eb:08:07:8c:70:35:aa:d3:56:7c:77:9e:38:5d: a7:2b:83:a3:27:59:a6:56:e7:a1:06:11:61:75:c6: 0d:93:45:29:79:c1:76:f8:bb:fd:33:c6:e5:bd:9e: 7c:64:58:81:70:a8:4e:43:e8:49:81:9f:77:b7:cf: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:19:B9:0E:63:30:C1:7B:26:AD:D9:E6:74:6E:F0:05:9B:8F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42c24661-e4de-3e1c-8af9-adc0d32692f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:250::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:54:28:64:69:1e:2c:5d:af:c2:58:a1:55:ff:1c:86:2f:af: 03:c2:7c:5d:2f:59:27:ad:b0:03:34:8d:39:34:f0:1d:35:fb: f5:aa:52:29:d9:a4:62:41:83:e8:55:f6:96:71:c9:4c:17:ac: 7d:be:cc:83:f7:49:d7:5f:09:b7:54:4f:a4:44:86:f2:a5:80: 3c:d1:82:88:e8:50:98:14:e4:90:66:41:f3:56:24:da:41:18: 43:d6:36:38:d0:08:2f:bb:e1:ae:cd:05:15:46:b5:ae:5b:b2: 35:f6:e9:27:44:fe:83:22:1c:32:5d:5c:3b:10:12:bf:45:06: 87:63:5a:f3:8a:0c:fd:4b:f0:24:f6:f9:cd:6b:85:e4:62:12: 9e:a2:f9:14:c7:d8:92:2a:90:bd:f6:02:8d:01:cd:f3:0a:6a: 42:45:c2:5d:17:a8:d1:ae:25:7b:29:c2:e1:a5:0d:67:fc:76: 02:55:92:fa:6e:58:9c:de:05:fc:6f:5d:78:52:76:97:40:69: fe:0b:a0:de:65:2d:8a:05:ae:8f:90:ca:8d:cb:70:18:fc:07: bd:28:11:cd:5c:1a:79:3a:6c:9b:10:30:2c:26:c1:87:67:54: 4d:93:d3:83:ec:30:00:8d:00:c2:fb:3a:4e:21:20:3a:d6:12: de:bc:5d:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsDJT3rFDlGeuZHNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyOTAxMzAxMFoXDTI1MTEyNzAyMzAxMFowLzEtMCsGA1UEAxMk N2FiZjU3YWEtZDQwNC00MTE3LTgyZjQtZTE2MDk4OTRjOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ahcrz8aQzVRdsQxFJGLGgppptl/6UApDpSd 8u5B4+oHRv8BFmAE6O14ybYDd2kNkbaGsXPnsn0QGaXVfdGwgT8x8VEI7i/Tj7vq 3Px35C2USi9Ef9YHZ2BLffUMX3Bm2it2vMKcHEoAtcivTMkc1LugjGJZytwE/1mH mDpAN6mDvov0w5woIXCXTmDYRN92wFKaCnz/CkVGqIBoby1+OyVIqAD+8aTt/C9U 5k+YyUTe+Du30h8LBJOyCw/XEV+PE6oF6wgHjHA1qtNWfHeeOF2nK4OjJ1mmVueh BhFhdcYNk0UpecF2+Lv9M8blvZ58ZFiBcKhOQ+hJgZ93t8/iNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNwGbkOYzDBeyat2eZ0bvAFm48RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDJjMjQ2NjEtZTRkZS0z ZTFjLThhZjktYWRjMGQzMjY5MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRUKGRpHixdr8JYoVX/HIYvrwPCfF0vWSetsAM0jTk08B01+/Wq UinZpGJBg+hV9pZxyUwXrH2+zIP3SddfCbdUT6REhvKlgDzRgojoUJgU5JBmQfNW JNpBGEPWNjjQCC+74a7NBRVGta5bsjX26SdE/oMiHDJdXDsQEr9FBodjWvOKDP1L 8CT2+c1rheRiEp6i+RTH2JIqkL32Ao0BzfMKakJFwl0XqNGuJXspwuGlDWf8dgJV kvpuWJzeBfxvXXhSdpdAaf4LoN5lLYoFro+Qyo3LcBj8B70oEc1cGnk6bJsQMCwm wYdnVE2T04PsMACNAML7Ok4hIDrWEt68XfU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:01 2025 by rpki-client