$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa File: a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa (raw, json) Hash identifier: eGZZFzp6EnGv6zsPMN8ASv8YsL+0s7wTAK36GdIgt7s= Subject key identifier: 37:03:82:82:D0:3A:22:5C:3C:FF:D6:BC:D2:5A:30:1B:1F:4F:FB:28 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F1B7D9843A8230706C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 198408 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f1:b7:d9:84:3a:82:30:70:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4a91e490-e625-46c0-9130-55bbf7a29d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:ac:83:ba:64:cb:69:f5:06:2f:f2:0d:7d: 01:48:4c:2e:5f:2d:39:2a:71:46:2b:0c:49:1e:bc: 57:91:cf:a2:e3:2d:66:31:72:3d:c9:fe:21:04:d5: 83:19:c1:c0:85:5a:05:e1:87:2a:59:8a:13:03:87: 74:d9:5d:e5:b2:33:b0:fd:c5:b8:9b:b1:41:e9:65: 6b:b2:00:f0:fd:0f:d8:d2:22:4b:7f:03:c0:19:a1: 76:a0:cb:ed:1c:81:39:0a:cb:67:58:82:46:a7:44: 70:ea:b9:ef:12:2e:47:ef:ac:9f:5d:4f:3a:0d:fc: 9c:48:ad:1d:36:d5:6c:72:b4:2b:a9:a3:a9:5f:f1: 36:46:00:da:05:d3:53:a6:0e:b3:f4:c6:86:e1:1c: e5:f8:dc:2f:e5:e0:5c:bd:a2:bb:a3:69:4c:a5:e2: 97:f1:cb:f8:87:c9:72:8a:1b:84:f6:9a:58:d7:a4: 75:72:66:69:31:65:39:9b:6f:b4:43:bb:89:31:4c: b2:0b:2f:5e:fc:8e:4f:d1:b5:00:5a:9f:12:5a:8b: f0:9e:ea:13:69:9a:1d:c7:5d:d0:de:57:32:c4:ca: 86:5c:63:6e:5f:af:37:f9:d6:e7:eb:57:77:ea:0c: fc:17:df:39:6e:13:9e:c8:06:2c:05:1b:a5:83:45: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:82:82:D0:3A:22:5C:3C:FF:D6:BC:D2:5A:30:1B:1F:4F:FB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a94b982b-80a2-3cd6-b6a0-112d231ccee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:45:31:b8:ec:43:4f:b3:91:cc:67:a6:87:88:6a:5b:2e: 3b:69:cc:c6:42:74:8b:46:6f:71:64:27:f4:8e:65:c8:13:bd: 0d:d2:4a:a0:24:c8:ff:c7:07:17:c1:4e:ff:76:21:7e:58:3e: cd:ed:84:bf:cd:51:48:42:42:92:f4:ae:ca:a7:c3:6c:0f:e8: 3c:86:13:16:31:4a:b6:b0:42:85:b0:2e:49:91:48:76:9b:30: ff:3f:5f:73:1e:2e:b6:c6:7c:f0:54:57:4c:06:40:75:15:10: 6b:a0:91:49:ca:bb:45:2b:16:59:47:63:0c:dc:86:d9:41:d7: 19:02:bb:0d:f6:19:ed:dc:02:47:8d:4c:d5:06:67:12:d6:c4: 25:5c:12:8c:21:b1:38:79:5e:20:f5:a6:e2:d9:72:83:64:bc: 5e:ca:07:27:61:ea:d7:45:59:19:ac:3a:f4:91:ac:e1:50:b2: 60:99:7e:51:9e:35:bd:fd:15:0d:28:18:ce:d4:97:f4:e2:8e: b5:dd:15:c9:36:9b:95:1c:52:a4:37:e5:8f:f9:9b:3a:f9:cb: 32:b3:87:2b:01:47:79:e3:8f:80:c3:4f:b6:15:7f:12:cc:98: 2e:c2:a1:ba:82:21:df:82:ef:62:f3:ca:23:bb:c0:98:1c:1d: 97:a7:86:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/G32YQ6gjBwbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NGE5MWU0OTAtZTYyNS00NmMwLTkxMzAtNTViYmY3YTI5ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/esg7pky2n1Bi/yDX0BSEwuXy05KnFGKwxJ HrxXkc+i4y1mMXI9yf4hBNWDGcHAhVoF4YcqWYoTA4d02V3lsjOw/cW4m7FB6WVr sgDw/Q/Y0iJLfwPAGaF2oMvtHIE5CstnWIJGp0Rw6rnvEi5H76yfXU86DfycSK0d NtVscrQrqaOpX/E2RgDaBdNTpg6z9MaG4Rzl+Nwv5eBcvaK7o2lMpeKX8cv4h8ly ihuE9ppY16R1cmZpMWU5m2+0Q7uJMUyyCy9e/I5P0bUAWp8SWovwnuoTaZodx13Q 3lcyxMqGXGNuX683+dbn61d36gz8F985bhOeyAYsBRulg0U4BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDcDgoLQOiJcPP/WvNJaMBsfT/soMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTk0Yjk4MmItODBhMi0z Y2Q2LWI2YTAtMTEyZDIzMWNjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrZRTG47ENPs5HMZ6aHiGpbLjtpzMZCdItGb3FkJ/SOZcgTvQ3S SqAkyP/HBxfBTv92IX5YPs3thL/NUUhCQpL0rsqnw2wP6DyGExYxSrawQoWwLkmR SHabMP8/X3MeLrbGfPBUV0wGQHUVEGugkUnKu0UrFllHYwzchtlB1xkCuw32Ge3c AkeNTNUGZxLWxCVcEowhsTh5XiD1puLZcoNkvF7KBydh6tdFWRmsOvSRrOFQsmCZ flGeNb39FQ0oGM7Ul/TijrXdFck2m5UcUqQ35Y/5mzr5yzKzhysBR3njj4DDT7YV fxLMmC7CobqCId+C72LzyiO7wJgcHZenhtY= -----END CERTIFICATE-----Generated at Mon Oct 27 01:46:50 2025 by rpki-client