$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbd443d4-290f-3c47-bda1-ffac116fc78c.roa File: bbd443d4-290f-3c47-bda1-ffac116fc78c.roa (raw, json) Hash identifier: QUY18eUHk/nTC1bxcJfTjWeu/OMytktXYhBpMDN9yuo= Subject key identifier: E1:65:E8:4C:74:2F:9F:9F:1B:4A:A0:B9:C1:7C:58:33:E9:BB:66:50 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B5DD20D3B959FF145CFD07B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbd443d4-290f-3c47-bda1-ffac116fc78c.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 401561 IP address blocks: 2001:470:338::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:0d:3b:95:9f:f1:45:cf:d0:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=52c315c9-799c-467c-9dae-5b9175958e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:ce:0b:61:bb:a1:6b:04:ea:ee:07:9e:a3: 3d:51:ce:78:cc:d1:31:0d:f5:87:ab:f3:db:70:31: 6e:ff:88:a4:44:5c:d4:a7:ce:3c:61:93:1e:fc:41: b2:01:54:ef:7f:81:b2:d3:55:99:f3:ff:ce:d1:30: 76:70:09:13:a7:fa:dc:eb:40:34:91:f5:4b:13:da: 44:4a:89:02:d4:d4:df:14:8a:8b:76:7c:7a:4b:a4: aa:4a:6f:89:d2:00:6f:21:02:00:f2:f3:af:64:d4: a7:b7:bc:0a:44:b0:64:1a:82:be:c4:ec:bd:44:92: 78:48:cb:91:c5:21:79:05:aa:25:06:05:67:87:b7: 1a:08:23:6e:4a:44:65:8f:d0:57:f4:41:55:2b:a7: 18:49:18:40:3a:be:ac:16:97:7c:82:70:d0:e8:b0: 11:cb:27:01:8b:66:a6:45:4b:b2:da:a5:7e:dc:41: 5c:7b:34:6c:77:d5:a7:2e:4b:7e:8e:b3:7b:2f:47: ff:a1:bf:79:81:d7:c3:56:c6:97:b9:9b:44:30:45: 15:d2:f1:18:52:6f:5d:0b:1b:f4:60:bc:28:6f:45: 15:cb:da:a1:de:f0:23:76:a7:0d:9f:a7:9e:89:49: 43:7f:9e:d6:d3:69:d4:21:41:d7:d0:c4:45:84:21: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:E8:4C:74:2F:9F:9F:1B:4A:A0:B9:C1:7C:58:33:E9:BB:66:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbd443d4-290f-3c47-bda1-ffac116fc78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:338::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:77:59:b8:a5:6c:b8:0d:b9:b1:aa:a7:79:64:43:94:97:76: 5b:c5:20:fd:d3:1d:8c:bf:bf:a9:2a:9d:44:b2:57:75:70:f7: 53:42:92:63:46:0b:1b:8b:42:df:7e:03:54:46:91:9b:3f:92: 33:8a:e1:20:9a:9a:8d:55:7c:1d:9c:88:b8:a8:71:cd:e6:10: 84:71:a6:e1:0f:53:93:5a:f7:41:3b:a0:4f:1c:15:46:52:ca: ce:0b:65:66:4c:e8:3d:62:2d:6f:d5:d7:f9:99:63:de:86:dd: ec:3d:09:02:b7:8b:5b:49:3d:05:ca:50:04:95:f9:11:34:a2: 3e:01:2b:c2:29:63:7c:1e:a4:66:82:9a:52:cd:7d:bb:fc:2a: 40:50:f0:dd:1e:04:be:31:76:68:8a:16:8e:fe:f2:e8:97:9a: 5c:ee:40:e9:bf:56:14:db:9a:92:a3:7d:49:2c:87:83:25:02: a1:b7:99:11:b1:c3:da:2a:2b:73:ac:49:53:8a:a4:62:b9:3e: f3:c7:1c:f3:d5:53:16:3e:48:5b:12:08:63:5a:b2:ce:f5:87: f2:6d:ef:38:ef:c4:78:3b:04:c1:7b:db:d8:1d:c6:3e:bc:59: f6:c6:6d:f7:84:2b:f6:c1:bc:8f:c3:37:05:eb:62:67:dc:56: 80:98:65:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0g07lZ/xRc/QewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NTJjMzE1YzktNzk5Yy00NjdjLTlkYWUtNWI5MTc1OTU4ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC7OC2G7oWsE6u4HnqM9Uc54zNExDfWHq/Pb cDFu/4ikRFzUp848YZMe/EGyAVTvf4Gy01WZ8//O0TB2cAkTp/rc60A0kfVLE9pE SokC1NTfFIqLdnx6S6SqSm+J0gBvIQIA8vOvZNSnt7wKRLBkGoK+xOy9RJJ4SMuR xSF5BaolBgVnh7caCCNuSkRlj9BX9EFVK6cYSRhAOr6sFpd8gnDQ6LARyycBi2am RUuy2qV+3EFcezRsd9WnLkt+jrN7L0f/ob95gdfDVsaXuZtEMEUV0vEYUm9dCxv0 YLwob0UVy9qh3vAjdqcNn6eeiUlDf57W02nUIUHX0MRFhCEm9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFl6Ex0L5+fG0qgucF8WDPpu2ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmJkNDQzZDQtMjkwZi0z YzQ3LWJkYTEtZmZhYzExNmZjNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHV3WbilbLgNubGqp3lkQ5SXdlvFIP3THYy/v6kqnUSyV3Vw91NC kmNGCxuLQt9+A1RGkZs/kjOK4SCamo1VfB2ciLiocc3mEIRxpuEPU5Na90E7oE8c FUZSys4LZWZM6D1iLW/V1/mZY96G3ew9CQK3i1tJPQXKUASV+RE0oj4BK8IpY3we pGaCmlLNfbv8KkBQ8N0eBL4xdmiKFo7+8uiXmlzuQOm/VhTbmpKjfUksh4MlAqG3 mRGxw9oqK3OsSVOKpGK5PvPHHPPVUxY+SFsSCGNass71h/Jt7zjvxHg7BMF729gd xj68WfbGbfeEK/bBvI/DNwXrYmfcVoCYZak= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:22 2025 by rpki-client