$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3e4ae5e-da69-302f-9191-0148f964cf47.roa File: f3e4ae5e-da69-302f-9191-0148f964cf47.roa (raw, json) Hash identifier: N9ySZ3SBZ3fDwpCtXiJB2InR2Hj1SIE1jjZoS5hfh2Y= Subject key identifier: 9E:DF:65:90:AC:D5:61:78:AD:5B:D9:53:9A:07:16:30:67:31:B7:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AFC1C20CC231844F5B8C3AF60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3e4ae5e-da69-302f-9191-0148f964cf47.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 47898 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:20:cc:23:18:44:f5:b8:c3:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a5f3d903-35b4-462f-835e-a6631d98390a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:ca:a5:78:1d:8e:91:44:db:c9:e6:b5:17: ea:f2:84:8b:10:6e:b7:67:84:2a:7a:ca:46:79:47: 17:28:cd:8d:1e:25:f0:11:a3:5d:f0:9c:d8:53:ed: e5:6c:ab:7e:1f:02:89:0c:a7:73:5d:f0:ec:8e:d1: d0:ff:22:95:80:89:57:6a:38:e2:35:55:4c:2c:23: c2:e2:c4:c4:e1:05:5a:57:d8:c5:9c:30:53:83:1a: e0:7d:2a:a7:fa:4a:e7:b1:ef:89:b9:1c:b9:f3:a5: 63:ef:88:26:45:6b:33:f1:fc:b4:36:9c:37:cf:66: db:c7:00:0b:01:a7:ef:d1:d8:0a:5e:0b:13:54:78: 25:d9:78:38:da:2d:8e:dd:09:ee:0e:3a:95:19:38: 9a:fb:57:ac:94:7e:04:e6:38:1e:3d:36:af:c3:c1: 66:34:d6:d4:d6:64:2d:30:75:87:a0:10:b4:0a:71: bf:21:25:72:92:9f:ba:99:02:c6:41:b7:00:52:55: ba:e6:0f:11:85:e2:08:b8:9d:c5:9f:6c:43:32:ed: 73:54:82:3b:5f:dd:81:0b:76:9b:bd:d1:32:40:57: 09:b3:16:ac:95:05:5c:14:58:f5:a2:cd:29:47:96: 4c:3b:69:d9:87:49:ba:8f:9a:94:2e:79:ef:28:e1: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DF:65:90:AC:D5:61:78:AD:5B:D9:53:9A:07:16:30:67:31:B7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3e4ae5e-da69-302f-9191-0148f964cf47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f5:99:b5:5e:99:a2:db:40:07:c2:dd:c6:7a:da:0c:e4:1e: a3:eb:31:c0:7c:91:84:f8:35:fa:5f:72:35:82:3b:1f:94:8c: 7e:75:bf:0e:fd:ca:09:51:bf:b5:33:be:9b:54:38:bf:0d:24: 57:bb:33:48:64:61:0e:1e:4d:9b:89:25:ee:d0:ea:42:4e:0a: fe:57:82:52:ba:a7:2a:a1:3e:08:8a:fe:f6:2e:6c:19:5e:b9: 01:f2:f8:cd:6f:f0:77:bf:24:3a:34:3d:86:3d:02:9f:3f:1e: 8e:4f:23:0f:75:1c:e4:4f:7e:81:52:dc:5b:15:f6:3a:90:35: e2:4b:84:22:d2:e9:49:ba:2f:13:95:1f:29:6a:20:74:d6:42: 81:ed:b8:a1:82:f5:7d:c6:33:50:bc:01:3e:f8:e8:94:76:2f: 76:14:ca:33:f9:52:4f:25:7f:8a:55:13:9f:f2:56:d7:7e:e0: ae:40:4f:86:64:6c:d0:b7:1c:7a:d8:d1:4a:53:e8:14:06:bb: 50:04:69:11:26:0f:86:b7:11:01:15:8a:47:3d:91:a6:17:f2: 59:20:5b:5c:e5:ae:d0:4a:cf:a9:99:be:c5:0a:f5:b2:69:ac: e4:4d:4d:49:60:54:b1:5e:25:2c:fa:b9:bc:42:f5:85:fa:54: 87:9a:fa:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HCDMIxhE9bjDr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTVmM2Q5MDMtMzViNC00NjJmLTgzNWUtYTY2MzFkOTgzOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaXKpXgdjpFE28nmtRfq8oSLEG63Z4QqespG eUcXKM2NHiXwEaNd8JzYU+3lbKt+HwKJDKdzXfDsjtHQ/yKVgIlXajjiNVVMLCPC 4sTE4QVaV9jFnDBTgxrgfSqn+krnse+JuRy586Vj74gmRWsz8fy0Npw3z2bbxwAL Aafv0dgKXgsTVHgl2Xg42i2O3QnuDjqVGTia+1eslH4E5jgePTavw8FmNNbU1mQt MHWHoBC0CnG/ISVykp+6mQLGQbcAUlW65g8RheIIuJ3Fn2xDMu1zVII7X92BC3ab vdEyQFcJsxaslQVcFFj1os0pR5ZMO2nZh0m6j5qULnnvKOHS+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7fZZCs1WF4rVvZU5oHFjBnMbdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjNlNGFlNWUtZGE2OS0z MDJmLTkxOTEtMDE0OGY5NjRjZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABf1mbVemaLbQAfC3cZ62gzkHqPrMcB8kYT4NfpfcjWCOx+UjH51 vw79yglRv7UzvptUOL8NJFe7M0hkYQ4eTZuJJe7Q6kJOCv5XglK6pyqhPgiK/vYu bBleuQHy+M1v8He/JDo0PYY9Ap8/Ho5PIw91HORPfoFS3FsV9jqQNeJLhCLS6Um6 LxOVHylqIHTWQoHtuKGC9X3GM1C8AT746JR2L3YUyjP5Uk8lf4pVE5/yVtd+4K5A T4ZkbNC3HHrY0UpT6BQGu1AEaREmD4a3EQEVikc9kaYX8lkgW1zlrtBKz6mZvsUK 9bJprORNTUlgVLFeJSz6ubxC9YX6VIea+ts= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:20 2025 by rpki-client