$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa File: ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa (raw, json) Hash identifier: gkXaN4Fb3SYLQ3spNrp2uUrcmMUJn8twv/wIqjU1h8U= Subject key identifier: 9B:62:10:D4:E1:1C:79:55:F0:18:39:0D:21:D7:E9:2E:03:C8:2B:1F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B4E773B8A11CADEBE4D58F780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 46632 IP address blocks: 2001:470:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:3b:8a:11:ca:de:be:4d:58:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=1e3c7b4b-183d-49b8-a4fd-2468dcb41db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:b5:9b:f8:fd:ec:78:b9:77:77:59:12:ed: 3f:87:8a:a1:fc:9d:16:37:23:ac:2e:53:87:9b:77: 5a:77:62:d2:39:5a:7c:44:0e:26:03:87:14:f6:84: 12:a1:94:60:83:a3:e7:d5:08:72:42:64:46:2d:06: 98:42:c4:7e:7e:96:43:b4:7c:0b:34:f4:66:a6:5c: d2:b2:60:9f:4d:b2:bb:29:48:5b:25:90:fc:5c:f6: 65:9e:f0:21:2c:70:80:cb:46:0e:42:43:af:01:90: 01:af:40:72:bc:a3:e9:37:3b:f2:3a:d2:a3:eb:e6: 31:2f:b5:9a:45:46:44:b0:9f:67:58:e8:68:f1:7e: 51:97:df:80:bb:63:d1:76:57:28:2a:3d:e4:c0:96: e1:15:59:56:7a:99:14:0d:40:05:a5:46:f5:fd:a1: d3:58:f8:bb:1e:bc:c5:2b:fe:c5:b7:10:ad:38:1d: 70:4a:ab:d2:10:77:30:23:4b:90:db:aa:1f:47:da: 21:8e:50:00:80:76:98:ec:85:25:d9:88:01:91:d7: 07:20:f6:2e:74:47:66:81:c2:14:0e:f8:c2:7c:ab: 5b:9d:4a:bb:ab:fd:24:f3:f5:98:00:44:b8:56:49: 04:74:5c:14:7d:91:36:55:3b:5b:2d:1f:8c:98:d7: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:62:10:D4:E1:1C:79:55:F0:18:39:0D:21:D7:E9:2E:03:C8:2B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6b:5e:b0:e7:c5:37:ba:30:e0:0f:28:5b:29:d6:82:65:1e: e5:02:22:80:f3:9a:bb:2a:08:9b:c8:5a:f6:18:0d:59:89:d8: ed:11:44:88:96:85:45:5c:a8:a4:2b:bf:9f:96:07:d6:96:a8: e9:be:28:bb:29:30:62:62:f0:cb:15:9f:df:b9:0c:12:d9:a1: 5f:b7:c6:e8:1e:cb:56:94:40:67:da:79:ea:e2:8d:dd:08:ca: 34:39:16:d8:6c:c6:6a:a8:6f:a8:c4:7c:69:3a:f7:c9:c3:2b: c0:f3:67:2f:b4:ee:9d:bc:f9:37:3b:68:d9:b1:72:4c:de:ce: 1b:fd:ef:5a:dd:e8:e5:7f:7a:91:3b:49:fd:e5:65:ad:05:f0: 0f:90:df:51:e6:f4:df:f1:1e:08:ce:d1:e9:f7:f0:99:fd:00: ab:9c:ae:f5:67:bb:37:1b:8c:ee:22:c9:77:b4:14:81:41:b8: 3d:ac:dc:2f:c7:f7:ee:93:a0:b0:86:48:f5:60:51:6d:33:2f: 0e:d0:f1:fe:cd:fd:2d:7e:c0:55:2e:62:b2:b6:be:8e:06:98: c8:c3:ad:69:50:d2:bd:28:93:08:7d:21:c7:6c:92:93:29:2a: ea:1f:39:41:49:6f:ff:c2:84:c2:22:2e:20:ad:a3:ce:d2:80: 3a:33:c4:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdzuKEcrevk1Y94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MWUzYzdiNGItMTgzZC00OWI4LWE0ZmQtMjQ2OGRjYjQxZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivC1m/j97Hi5d3dZEu0/h4qh/J0WNyOsLlOH m3dad2LSOVp8RA4mA4cU9oQSoZRgg6Pn1QhyQmRGLQaYQsR+fpZDtHwLNPRmplzS smCfTbK7KUhbJZD8XPZlnvAhLHCAy0YOQkOvAZABr0ByvKPpNzvyOtKj6+YxL7Wa RUZEsJ9nWOho8X5Rl9+Au2PRdlcoKj3kwJbhFVlWepkUDUAFpUb1/aHTWPi7HrzF K/7FtxCtOB1wSqvSEHcwI0uQ26ofR9ohjlAAgHaY7IUl2YgBkdcHIPYudEdmgcIU DvjCfKtbnUq7q/0k8/WYAES4VkkEdFwUfZE2VTtbLR+MmNc0kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtiENThHHlV8Bg5DSHX6S4DyCsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY2NzM2YTItNzBiNi0z NmRkLTkzMWQtZmMzYTUzNTZmYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZrXrDnxTe6MOAPKFsp1oJlHuUCIoDzmrsqCJvIWvYYDVmJ2O0R RIiWhUVcqKQrv5+WB9aWqOm+KLspMGJi8MsVn9+5DBLZoV+3xugey1aUQGfaeeri jd0IyjQ5Fthsxmqob6jEfGk698nDK8DzZy+07p28+Tc7aNmxckzezhv971rd6OV/ epE7Sf3lZa0F8A+Q31Hm9N/xHgjO0en38Jn9AKucrvVnuzcbjO4iyXe0FIFBuD2s 3C/H9+6ToLCGSPVgUW0zLw7Q8f7N/S1+wFUuYrK2vo4GmMjDrWlQ0r0okwh9Icds kpMpKuofOUFJb//ChMIiLiCto87SgDozxA8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:39 2025 by rpki-client