$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa File: 0797caf3-86f3-359d-93a7-b915b3201297.roa (raw, json) Hash identifier: snGVOxVcW7fn8u3vZFj8WOULBp0rr5hW0C6qk4P4Ih8= Subject key identifier: 25:54:FE:85:F3:97:68:EC:BB:6D:01:1F:DA:23:A1:6C:D6:0F:85:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F09CD756ADB5CB8972C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395029 IP address blocks: 2001:470:21c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f0:9c:d7:56:ad:b5:cb:89:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5eb8e773-8961-4e34-93c9-b65abfe5189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:e2:8b:bd:c8:18:b6:b2:37:f9:fa:9c:2d: 94:45:94:2a:0d:6a:a5:42:49:4d:6d:fd:4d:5f:17: 67:42:b7:98:27:52:ea:52:ee:e2:2c:da:b0:2a:0f: 6a:d0:aa:af:a1:2f:12:18:6d:d0:78:05:5c:56:20: d2:a8:fd:a1:32:ab:77:8b:33:0b:f2:0b:9b:61:30: bc:da:2f:8a:15:ec:bf:8a:9f:30:2e:d5:fc:95:22: 80:bf:52:c0:ef:50:44:a2:da:4f:99:41:ee:72:fe: 99:b5:94:3f:c3:2b:09:9f:85:a5:11:16:db:ac:37: ea:5f:af:38:cc:ba:c1:65:85:21:5f:10:3e:8c:3d: 84:96:61:a8:0e:2d:3a:32:d8:53:58:3e:a3:8d:3e: b9:fa:1d:dd:c4:0c:2d:03:ec:0e:96:b3:bf:8c:c5: 84:c8:4b:14:b4:1c:33:cd:6a:01:fc:48:98:7b:8a: ad:84:58:3d:f2:86:47:12:71:01:8a:24:45:11:25: 98:bc:e9:83:79:20:48:9e:60:02:9a:e9:74:0f:2b: 6e:fa:b1:b1:26:16:e4:3c:0f:88:3b:97:87:83:79: 87:e4:c5:c1:fe:65:07:12:dc:6d:ff:2c:86:f9:b2: 33:97:06:96:0a:94:d3:dd:a2:15:fd:f1:4a:d4:ae: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:FE:85:F3:97:68:EC:BB:6D:01:1F:DA:23:A1:6C:D6:0F:85:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:11:e0:20:dc:ca:61:17:56:4e:ba:ea:fe:70:5b:e1:a2:97: f4:60:3c:65:6b:9f:00:01:0e:90:c5:7c:b8:bc:f1:f4:61:be: ed:2d:8a:62:ac:71:f5:a5:a6:b5:e7:2d:f7:1b:62:a2:f0:97: 56:9e:70:ef:5e:96:28:63:83:50:74:16:0c:3f:b6:b2:60:12: 48:bf:fd:5c:70:4e:3d:b2:fd:28:89:72:74:61:06:df:35:1b: 11:88:0d:7d:28:74:3b:c3:6d:03:2b:e2:7c:a7:4f:c2:b0:a3: a3:4f:66:29:97:3f:29:cb:43:80:c9:fe:5d:6f:98:3e:f0:04: 1b:60:b5:b5:db:d2:c7:00:79:12:37:86:de:0f:bd:20:a3:35: 54:38:e8:bd:c5:d5:ab:92:f1:41:4f:04:2b:74:38:a6:69:94: 31:4c:f5:30:cf:2d:ab:6e:e1:a6:a4:8a:89:84:9b:3c:df:39: 98:27:bc:4a:65:be:c4:cf:20:5e:cd:11:41:92:bd:91:f7:dc: fd:f0:67:f2:98:a8:7c:81:6c:fc:25:1c:2e:0d:da:eb:a1:0e: e7:7c:97:3b:e8:dd:5a:93:22:91:60:0d:2f:a7:e5:ed:5a:98: 87:a8:b5:b7:be:77:c4:ad:2e:14:eb:bc:ea:9f:bf:dd:07:b7: 3a:d3:52:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/Cc11attcuJcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWViOGU3NzMtODk2MS00ZTM0LTkzYzktYjY1YWJmZTUxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP3ii73IGLayN/n6nC2URZQqDWqlQklNbf1N XxdnQreYJ1LqUu7iLNqwKg9q0KqvoS8SGG3QeAVcViDSqP2hMqt3izML8gubYTC8 2i+KFey/ip8wLtX8lSKAv1LA71BEotpPmUHucv6ZtZQ/wysJn4WlERbbrDfqX684 zLrBZYUhXxA+jD2ElmGoDi06MthTWD6jjT65+h3dxAwtA+wOlrO/jMWEyEsUtBwz zWoB/EiYe4qthFg98oZHEnEBiiRFESWYvOmDeSBInmACmul0Dytu+rGxJhbkPA+I O5eHg3mH5MXB/mUHEtxt/yyG+bIzlwaWCpTT3aIV/fFK1K5e9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVU/oXzl2jsu20BH9ojoWzWD4V9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDc5N2NhZjMtODZmMy0z NTlkLTkzYTctYjkxNWIzMjAxMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkR4CDcymEXVk666v5wW+Gil/RgPGVrnwABDpDFfLi88fRhvu0t imKscfWlprXnLfcbYqLwl1aecO9elihjg1B0Fgw/trJgEki//VxwTj2y/SiJcnRh Bt81GxGIDX0odDvDbQMr4nynT8Kwo6NPZimXPynLQ4DJ/l1vmD7wBBtgtbXb0scA eRI3ht4PvSCjNVQ46L3F1auS8UFPBCt0OKZplDFM9TDPLatu4aakiomEmzzfOZgn vEplvsTPIF7NEUGSvZH33P3wZ/KYqHyBbPwlHC4N2uuhDud8lzvo3VqTIpFgDS+n 5e1amIeotbe+d8StLhTrvOqfv90HtzrTUgA= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:42 2025 by rpki-client