$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ea41ddc-08a9-3cae-bb9c-eccce1a52402.roa File: 0ea41ddc-08a9-3cae-bb9c-eccce1a52402.roa (raw, json) Hash identifier: KPCEsPx8XRKzAg/AGwH+037cipIIBXLPDJKDKEWA4RU= Subject key identifier: 1B:B2:AC:0B:16:4E:37:12:DD:92:8A:3F:56:01:24:FE:FD:51:4F:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BABFD06E17EC620840BF10680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ea41ddc-08a9-3cae-bb9c-eccce1a52402.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 38077 IP address blocks: 2001:470:3c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:06:e1:7e:c6:20:84:0b:f1:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f669b50f-ea7b-424a-9151-a3e22a7a6db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:74:e3:6d:4e:d3:91:0c:fb:70:23:47:db: 68:7b:e3:bf:05:8c:07:d7:a2:86:33:16:c8:47:75: 1f:ea:e6:7e:aa:3a:95:26:8b:ae:df:ad:24:91:23: 39:17:7c:bb:93:c9:13:8c:2d:38:ca:41:4f:6f:2d: 55:f2:f9:7f:a1:41:7d:e2:34:bc:81:90:9c:d6:eb: 06:12:5d:08:bb:41:75:35:e9:f7:18:03:be:8c:b7: 6a:ce:5d:0b:2b:7f:b1:b3:a0:16:f1:5b:7a:8a:2a: a7:82:fc:41:bd:0a:bf:a2:1d:2c:06:f0:9b:24:52: 36:f0:7a:b6:79:d9:ae:aa:1d:20:a1:ec:a2:5a:1d: 6d:28:f5:ee:25:62:f1:01:90:1d:ed:b6:2b:82:5c: 2c:26:21:5f:10:54:62:82:3d:fb:68:e9:5d:33:bc: bc:3a:19:75:3f:fe:fa:c7:dc:fa:e5:03:5c:b9:13: e4:43:87:b3:c4:86:30:4a:97:79:92:8b:c0:5e:8a: 3d:a8:fb:e0:d4:8f:61:cf:0f:35:44:b7:74:4d:b3: ec:88:f2:8f:74:33:22:c8:a0:47:15:2e:f3:0a:12: 2e:d1:ec:38:19:78:ff:60:5c:b6:52:b4:4b:23:e6: 4c:72:bf:1a:cc:aa:3c:7d:83:09:1d:52:e3:3f:f9: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B2:AC:0B:16:4E:37:12:DD:92:8A:3F:56:01:24:FE:FD:51:4F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ea41ddc-08a9-3cae-bb9c-eccce1a52402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:07:8a:0b:58:bd:2f:66:f3:6a:60:37:c4:4d:c1:d5:dc:48: 1c:ef:bd:8b:5e:09:5f:a7:c3:13:b5:b0:00:4a:97:25:34:d8: fb:f6:76:d6:a4:8f:bc:bc:db:8e:0a:3e:3f:1d:34:4c:7f:87: 30:d6:5b:f1:49:f5:1f:b5:d2:e0:2a:da:29:d5:47:04:d8:05: f3:93:2d:9b:bd:ea:fc:36:d8:0b:c1:41:78:45:7c:2e:d9:bf: 8c:71:8c:7d:70:06:4e:eb:b2:0a:64:26:73:0c:87:16:2b:95: 95:2d:64:a5:2e:c2:3a:b0:a5:35:49:1a:fc:b8:2c:17:3d:2c: 68:fe:eb:6a:2c:91:42:96:ed:23:d1:a4:06:df:3b:51:fa:47: ce:33:de:92:1c:c6:69:1f:72:9e:b7:0c:2e:3c:e8:f4:7b:ba: e8:1e:b5:de:da:70:fe:f7:21:4e:ed:a7:40:d5:da:78:42:29: a3:83:5b:6f:9f:48:d2:a9:24:76:14:a6:f4:94:12:cf:70:d3: 75:22:50:d3:28:5d:be:77:e0:5d:4d:1c:2f:52:97:fb:b4:71: a0:6f:6e:85:10:bd:a2:c8:a3:e4:ce:e4:a6:37:16:b9:00:6d: b8:f6:e7:6d:9f:2c:ba:42:5b:7b:5a:36:bb:e7:69:a2:02:fe: bb:8f:71:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/QbhfsYghAvxBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjY2OWI1MGYtZWE3Yi00MjRhLTkxNTEtYTNlMjJhN2E2ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS10421O05EM+3AjR9toe+O/BYwH16KGMxbI R3Uf6uZ+qjqVJouu360kkSM5F3y7k8kTjC04ykFPby1V8vl/oUF94jS8gZCc1usG El0Iu0F1Nen3GAO+jLdqzl0LK3+xs6AW8Vt6iiqngvxBvQq/oh0sBvCbJFI28Hq2 edmuqh0goeyiWh1tKPXuJWLxAZAd7bYrglwsJiFfEFRigj37aOldM7y8Ohl1P/76 x9z65QNcuRPkQ4ezxIYwSpd5kovAXoo9qPvg1I9hzw81RLd0TbPsiPKPdDMiyKBH FS7zChIu0ew4GXj/YFy2UrRLI+ZMcr8azKo8fYMJHVLjP/mP6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBuyrAsWTjcS3ZKKP1YBJP79UU8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGVhNDFkZGMtMDhhOS0z Y2FlLWJiOWMtZWNjY2UxYTUyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALMHigtYvS9m82pgN8RNwdXcSBzvvYteCV+nwxO1sABKlyU02Pv2 dtakj7y8244KPj8dNEx/hzDWW/FJ9R+10uAq2inVRwTYBfOTLZu96vw22AvBQXhF fC7Zv4xxjH1wBk7rsgpkJnMMhxYrlZUtZKUuwjqwpTVJGvy4LBc9LGj+62oskUKW 7SPRpAbfO1H6R84z3pIcxmkfcp63DC486PR7uugetd7acP73IU7tp0DV2nhCKaOD W2+fSNKpJHYUpvSUEs9w03UiUNMoXb534F1NHC9Sl/u0caBvboUQvaLIo+TO5KY3 FrkAbbj2522fLLpCW3taNrvnaaIC/ruPcXo= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:04 2025 by rpki-client