$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/022e655d-2d50-352d-ac8b-3593bc048fff.roa File: 022e655d-2d50-352d-ac8b-3593bc048fff.roa (raw, json) Hash identifier: 6V9bu5+0U209Cf5pKHzEFwrMI2sEO1nvjLpjO3OyhvA= Subject key identifier: 46:17:F1:17:70:B0:2A:19:F8:D8:8D:15:06:A0:59:23:7E:2D:BB:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B95AB02565264E29A0D009200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/022e655d-2d50-352d-ac8b-3593bc048fff.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 393880 IP address blocks: 2001:470:3d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:02:56:52:64:e2:9a:0d:00:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=67104eb8-59d7-4086-8491-7579715fbbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:b2:9a:1b:5a:0f:75:06:82:e0:48:0a:b0: 03:6f:fc:c3:64:63:d6:1c:a1:fb:8f:6c:0c:2b:e2: 5b:2b:2b:57:10:c1:af:25:06:c1:64:85:c8:3d:eb: b2:68:26:4f:30:97:db:f6:df:14:80:a4:b2:d8:95: 9d:a5:30:9b:ed:03:4a:04:ee:87:9e:44:fd:e4:5e: 5d:aa:36:8a:65:15:5e:9e:cb:fd:bf:53:89:3d:88: 9b:7c:db:76:c1:b5:ea:8c:c9:2a:5d:23:43:ea:82: df:ad:a2:4a:b7:9a:c8:02:f5:3c:9d:b5:4e:88:4f: cc:e1:a4:1e:da:14:b0:e8:e8:5c:4a:a3:d7:fb:84: ae:4e:0e:51:13:9f:3e:89:5b:8e:5d:93:75:46:4c: 81:ae:03:ae:b0:4e:2d:57:b5:14:03:4a:7d:35:c0: fd:ef:ed:ca:8f:91:b1:46:dc:be:e6:22:dd:b4:ce: ad:83:cd:50:c1:6b:db:5d:ac:ec:20:28:cc:38:89: 63:8d:ba:2d:25:f2:5e:c5:3a:2b:fd:1c:f8:3b:6c: c3:f8:58:0f:91:7f:6f:ab:0b:e6:3d:e7:f2:a6:e0: c3:7f:73:1b:d7:6e:da:78:3c:ec:02:e6:25:4a:d1: f9:25:de:63:b0:71:3c:27:1f:c6:97:d8:9b:15:5a: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:17:F1:17:70:B0:2A:19:F8:D8:8D:15:06:A0:59:23:7E:2D:BB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/022e655d-2d50-352d-ac8b-3593bc048fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:22:62:4d:af:6a:5a:a0:33:50:dd:32:f3:90:36:51:50:93: 37:97:26:24:36:a4:95:41:62:63:02:0c:66:19:cd:51:64:de: 48:2b:bc:5a:73:ac:84:ca:04:0e:9f:4f:78:bf:19:ab:02:19: 26:f5:95:4d:78:02:cc:01:a6:08:b9:f3:63:67:35:d1:a7:d2: 49:b2:67:97:d7:8d:1d:57:d7:a5:02:60:66:9b:12:3c:dc:72: b4:b8:22:f5:88:d4:c1:47:79:26:19:0e:0b:1c:e4:bc:2c:42: 94:cf:eb:31:ff:33:4b:fc:ac:1e:76:ec:ae:38:76:ff:41:46: 65:a0:e4:8c:0f:c1:56:8c:fa:16:1f:0d:64:7e:07:99:29:f4: 38:df:a2:51:3a:f0:a1:57:b3:69:ec:78:4d:4c:49:95:b9:21: 30:ee:26:47:9d:f0:91:dd:fc:f4:a9:fd:dd:4e:83:59:1b:0a: 8f:cc:8a:f9:17:98:27:ba:51:c5:08:5a:ec:da:9d:17:78:aa: 38:48:e3:35:2b:1a:1f:3e:8c:27:7b:f0:b3:e8:6b:c7:4e:89: 2c:1f:d8:53:f2:39:74:85:9d:0b:02:47:8d:da:b5:97:b1:13: 4f:c7:6e:a4:40:fe:bc:9a:17:7d:1f:37:3a:33:22:53:c2:05: 0c:fe:6f:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVqwJWUmTimg0AkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjcxMDRlYjgtNTlkNy00MDg2LTg0OTEtNzU3OTcxNWZiYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFuymhtaD3UGguBICrADb/zDZGPWHKH7j2wM K+JbKytXEMGvJQbBZIXIPeuyaCZPMJfb9t8UgKSy2JWdpTCb7QNKBO6HnkT95F5d qjaKZRVensv9v1OJPYibfNt2wbXqjMkqXSND6oLfraJKt5rIAvU8nbVOiE/M4aQe 2hSw6OhcSqPX+4SuTg5RE58+iVuOXZN1RkyBrgOusE4tV7UUA0p9NcD97+3Kj5Gx Rty+5iLdtM6tg81QwWvbXazsICjMOIljjbotJfJexTor/Rz4O2zD+FgPkX9vqwvm PefypuDDf3Mb127aeDzsAuYlStH5Jd5jsHE8Jx/Gl9ibFVqiHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYX8RdwsCoZ+NiNFQagWSN+LbsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDIyZTY1NWQtMmQ1MC0z NTJkLWFjOGItMzU5M2JjMDQ4ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIiYk2valqgM1DdMvOQNlFQkzeXJiQ2pJVBYmMCDGYZzVFk3kgr vFpzrITKBA6fT3i/GasCGSb1lU14AswBpgi582NnNdGn0kmyZ5fXjR1X16UCYGab EjzccrS4IvWI1MFHeSYZDgsc5LwsQpTP6zH/M0v8rB527K44dv9BRmWg5IwPwVaM +hYfDWR+B5kp9DjfolE68KFXs2nseE1MSZW5ITDuJked8JHd/PSp/d1Og1kbCo/M ivkXmCe6UcUIWuzanRd4qjhI4zUrGh8+jCd78LPoa8dOiSwf2FPyOXSFnQsCR43a tZexE0/HbqRA/ryaF30fNzozIlPCBQz+b5I= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:40 2025 by rpki-client