$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa File: fff9ea91-21f3-3786-be09-fd1a98051694.roa (raw, json) Hash identifier: aalSuH4xZWqmve5EeOnAPwrpfBkS+dRCv/JznpbMI2Y= Subject key identifier: F3:9C:7E:89:EE:B2:FB:21:D2:4C:EF:84:FD:5C:6F:B4:CC:84:22:09 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B4BAC71FA7A5144E4A3BB7780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 17717 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:71:fa:7a:51:44:e4:a3:bb:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=f296168d-032e-4fec-adfc-f760a3a43c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:48:96:1f:e6:f7:52:05:da:15:7a:9a:9d: 43:59:f6:1c:de:3e:d6:d9:85:e9:ba:35:0a:77:ef: dc:e4:c6:4e:48:95:38:8d:6d:2e:e8:c7:75:e3:32: 48:2e:f4:e2:f9:63:34:69:20:50:60:20:47:07:d9: 9d:40:4d:1e:7f:6e:21:be:96:00:bb:b5:6a:ab:bd: 4a:02:cc:c6:02:3e:03:4c:cc:6b:70:75:18:ce:99: d0:a5:b7:09:0f:5c:9f:00:7c:1c:07:0d:98:b3:52: dc:0a:d0:cc:dc:8b:f2:47:cf:58:6e:07:a5:9c:22: 0a:bb:3e:36:9f:9a:e5:97:e9:ed:e9:78:a0:ec:a7: 73:cc:39:79:ac:97:e0:08:ba:ec:58:80:92:c0:24: b0:e1:e2:e9:02:42:d2:f0:a1:07:fb:b9:4b:d0:05: 42:50:3d:08:fe:a9:60:5a:3d:df:6a:a0:30:ba:63: 4a:78:fa:fe:7d:df:47:6c:2f:b6:1a:36:4d:d8:02: a6:4a:cd:eb:f0:2a:38:44:2c:6f:16:19:07:c7:99: e3:bb:ac:a8:21:70:2f:c8:4b:e0:2b:2c:81:88:0b: 41:38:eb:fc:b0:0f:70:d9:cb:d6:cc:0a:78:1d:86: d8:50:c0:a3:67:8f:06:97:72:0d:ad:6f:49:87:be: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:7E:89:EE:B2:FB:21:D2:4C:EF:84:FD:5C:6F:B4:CC:84:22:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:1c:70:c5:0c:8e:ac:81:48:a4:84:a2:69:52:7a:46:ed:7a: dc:0e:ce:9f:11:12:85:7b:eb:de:a2:6f:f1:94:ad:4c:ac:7b: d9:5b:f1:b1:7f:d1:7f:a4:c1:0d:7a:43:fe:fa:7c:30:77:5c: 87:08:72:57:f5:2e:2a:31:1d:91:e5:71:85:b6:61:79:fe:2d: cf:5f:cd:bf:76:6f:96:85:0f:e1:38:c5:fa:0d:58:ac:d7:38: 39:e0:27:97:c5:88:e1:a3:b4:52:5c:27:98:e5:5d:9f:c7:c5: 48:76:41:0d:11:e1:b8:52:5c:79:bb:f6:8b:6c:77:68:a5:15: ea:1d:af:f6:0e:c6:0b:79:e9:09:4d:c7:18:15:3a:fd:e4:fc: 20:e5:e1:fb:79:26:86:9e:ac:16:4c:4a:cc:02:24:49:50:db: d7:5f:83:4e:8c:06:3c:6d:3e:2a:4f:44:48:6b:a8:bf:75:97: c3:7c:c9:36:35:74:aa:74:40:9e:5c:8a:cd:69:92:69:3e:91: 2f:c4:90:b1:2c:b6:93:b7:13:aa:cc:1c:98:5f:6e:1e:95:7d: fa:23:12:c1:ed:a5:88:8d:c8:12:09:b8:b5:04:32:c9:d6:b9: 8e:9a:ae:ae:fd:8a:3d:dd:81:ea:bc:54:ff:44:ff:2d:28:f1: 97:c5:3e:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrHH6elFE5KO7d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjI5NjE2OGQtMDMyZS00ZmVjLWFkZmMtZjc2MGEzYTQzYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndJIlh/m91IF2hV6mp1DWfYc3j7W2YXpujUK d+/c5MZOSJU4jW0u6Md14zJILvTi+WM0aSBQYCBHB9mdQE0ef24hvpYAu7Vqq71K AszGAj4DTMxrcHUYzpnQpbcJD1yfAHwcBw2Ys1LcCtDM3IvyR89YbgelnCIKuz42 n5rll+nt6Xig7KdzzDl5rJfgCLrsWICSwCSw4eLpAkLS8KEH+7lL0AVCUD0I/qlg Wj3faqAwumNKePr+fd9HbC+2GjZN2AKmSs3r8Co4RCxvFhkHx5nju6yoIXAvyEvg KyyBiAtBOOv8sA9w2cvWzAp4HYbYUMCjZ48Gl3INrW9Jh77NVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOcfonusvsh0kzvhP1cb7TMhCIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmZmOWVhOTEtMjFmMy0z Nzg2LWJlMDktZmQxYTk4MDUxNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYccMUMjqyBSKSEomlSekbtetwOzp8REoV7696ib/GUrUyse9lb 8bF/0X+kwQ16Q/76fDB3XIcIclf1LioxHZHlcYW2YXn+Lc9fzb92b5aFD+E4xfoN WKzXODngJ5fFiOGjtFJcJ5jlXZ/HxUh2QQ0R4bhSXHm79otsd2ilFeodr/YOxgt5 6QlNxxgVOv3k/CDl4ft5JoaerBZMSswCJElQ29dfg06MBjxtPipPREhrqL91l8N8 yTY1dKp0QJ5cis1pkmk+kS/EkLEstpO3E6rMHJhfbh6VffojEsHtpYiNyBIJuLUE MsnWuY6arq79ij3dgeq8VP9E/y0o8ZfFPsE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:36 2025 by rpki-client