$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2040a4d-7fd5-33cb-bc99-5ca0c0b8ef8f.roa File: c2040a4d-7fd5-33cb-bc99-5ca0c0b8ef8f.roa (raw, json) Hash identifier: Gys54qyu0iSYpCecwW7KY+/RW1d2OYaOrcvLtFDZWK4= Subject key identifier: 3D:14:87:8D:40:DB:FB:C6:1B:9B:5F:08:85:90:81:56:E7:31:2F:3E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B03253F375FD5C9CC37178340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2040a4d-7fd5-33cb-bc99-5ca0c0b8ef8f.roa Signing time: Fri 29 Aug 2025 01:30:10 +0000 ROA not before: Fri 29 Aug 2025 01:30:10 +0000 ROA not after: Thu 27 Nov 2025 02:30:10 +0000 asID: 55262 IP address blocks: 2001:470:4c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:25:3f:37:5f:d5:c9:cc:37:17:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 29 01:30:10 2025 GMT Not After : Nov 27 02:30:10 2025 GMT Subject: CN=5cf43b4e-1c86-4823-8459-966cd6c43297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:00:6f:d7:97:60:82:73:9e:43:0b:48:fe: 46:37:95:32:2e:64:3d:00:a1:66:ac:ef:9f:b7:b6: dc:7c:e4:ee:42:d4:f8:2e:73:56:19:6e:e2:30:f2: a8:63:87:7b:2b:11:0e:cc:2a:15:15:40:6c:17:1f: ce:66:c8:60:f4:13:14:12:c3:1e:6e:67:5d:d0:b6: bd:94:b9:46:2a:a3:86:05:1d:82:f8:b2:23:e0:c3: c1:35:16:2a:7a:34:88:39:14:e3:db:1b:69:9e:15: fd:5e:06:dd:7c:e1:11:26:9e:61:f7:f4:33:de:74: 7d:a0:de:85:29:2b:6a:72:e3:0e:fa:c4:75:e4:16: 4a:2f:eb:45:22:f6:44:c2:13:9c:72:a3:94:12:15: 92:ea:21:34:5e:23:3d:e5:1d:35:ff:6b:02:47:8d: 50:aa:54:50:39:fd:89:6c:6c:fe:10:22:8c:01:35: 4a:47:a3:ad:7e:7e:b9:4f:5a:32:b1:15:34:83:de: 1a:45:4a:fb:b1:a6:db:0d:e9:d4:2e:51:48:57:0b: 87:4e:d9:f1:34:58:df:32:5e:a5:1f:a4:0e:5a:c2: 69:17:cb:af:e8:70:9e:cd:91:df:a0:62:d9:26:8d: d3:e3:32:09:12:30:99:12:c2:64:4d:ad:53:1e:47: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:87:8D:40:DB:FB:C6:1B:9B:5F:08:85:90:81:56:E7:31:2F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2040a4d-7fd5-33cb-bc99-5ca0c0b8ef8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:61:7c:e2:58:48:3c:89:0e:6d:a5:23:b2:ce:ea:fd:1b:ee: 64:d8:80:99:21:08:c0:3b:17:9f:c4:31:c6:cd:b5:d7:da:a9: 39:51:39:b8:79:05:cb:1e:89:03:1b:64:6f:97:17:0b:fd:ae: b2:9b:eb:3e:5b:74:4d:7d:c9:a0:d1:f2:e5:9c:22:21:83:c7: e1:f0:b9:ef:14:5b:2d:37:98:88:bf:d3:0f:30:3c:b9:c6:95: ce:42:c1:34:67:82:34:63:8c:ca:be:65:e2:cc:de:25:a3:91: ec:fe:6a:2e:8b:83:8a:eb:04:f8:53:01:96:2d:10:47:96:66: 99:1e:ae:69:19:bb:5f:2a:a3:06:e4:4e:25:58:2b:2d:50:c9: 22:ac:69:0c:bc:74:ad:80:c3:d1:ff:84:eb:1e:e5:67:00:0a: bd:f0:d8:6b:4e:19:e8:87:1b:b5:8d:4d:78:82:60:ae:92:dc: 9f:61:e2:f0:d8:98:0d:5f:49:cb:5b:36:7c:45:8b:06:26:df: 97:21:73:eb:fa:f7:49:ca:28:bc:79:cc:8c:1f:9d:73:a7:87: c7:43:78:28:53:18:f3:12:85:32:bb:76:34:38:8f:17:49:0f: 1b:97:ac:bf:48:83:e2:08:4b:54:6b:12:3e:c9:69:b0:15:d8: 5a:0b:6a:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsDJT83X9XJzDcXg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyOTAxMzAxMFoXDTI1MTEyNzAyMzAxMFowLzEtMCsGA1UEAxMk NWNmNDNiNGUtMWM4Ni00ODIzLTg0NTktOTY2Y2Q2YzQzMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX4Ab9eXYIJznkMLSP5GN5UyLmQ9AKFmrO+f t7bcfOTuQtT4LnNWGW7iMPKoY4d7KxEOzCoVFUBsFx/OZshg9BMUEsMebmdd0La9 lLlGKqOGBR2C+LIj4MPBNRYqejSIORTj2xtpnhX9XgbdfOERJp5h9/Qz3nR9oN6F KStqcuMO+sR15BZKL+tFIvZEwhOccqOUEhWS6iE0XiM95R01/2sCR41QqlRQOf2J bGz+ECKMATVKR6Otfn65T1oysRU0g94aRUr7sabbDenULlFIVwuHTtnxNFjfMl6l H6QOWsJpF8uv6HCezZHfoGLZJo3T4zIJEjCZEsJkTa1THkdk4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0Uh41A2/vGG5tfCIWQgVbnMS8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzIwNDBhNGQtN2ZkNS0z M2NiLWJjOTktNWNhMGMwYjhlZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVhfOJYSDyJDm2lI7LO6v0b7mTYgJkhCMA7F5/EMcbNtdfaqTlR Obh5BcseiQMbZG+XFwv9rrKb6z5bdE19yaDR8uWcIiGDx+Hwue8UWy03mIi/0w8w PLnGlc5CwTRngjRjjMq+ZeLM3iWjkez+ai6Lg4rrBPhTAZYtEEeWZpkermkZu18q owbkTiVYKy1QySKsaQy8dK2Aw9H/hOse5WcACr3w2GtOGeiHG7WNTXiCYK6S3J9h 4vDYmA1fSctbNnxFiwYm35chc+v690nKKLx5zIwfnXOnh8dDeChTGPMShTK7djQ4 jxdJDxuXrL9Ig+IIS1RrEj7JabAV2FoLal0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:13 2025 by rpki-client