$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa File: 0faafe61-87fc-3eee-b788-7d9b253f0a33.roa (raw, json) Hash identifier: dD/34IwFGxwhNy2xRq/EaAfr4hcVpnLRgiCw+WZfg4c= Subject key identifier: 06:70:20:1B:1F:0C:81:F1:D5:66:60:D9:BE:88:A6:2C:2A:9A:BB:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C75150A247700BB8CD5C Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 133929 IP address blocks: 2001:470:1a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c7:51:50:a2:47:70:0b:b8:cd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=44ca2382-a424-4b99-b563-dd8c1cb1dd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:39:24:14:87:5d:3a:b8:8a:c8:ae:da:75: 27:39:84:7f:02:62:97:16:00:c3:77:80:10:07:16: 67:ac:94:b9:07:76:80:ca:64:da:ed:99:f7:4a:b2: 94:69:e9:f9:95:fb:2c:2c:63:f7:11:0a:17:3f:c4: 22:a4:e2:3d:22:5f:ed:cb:43:1b:30:cb:a2:da:0b: 3a:7f:86:3d:b9:cf:14:73:77:0f:29:df:9d:0e:05: 89:9b:44:ad:be:62:3e:d9:f6:31:16:7d:80:c7:b9: 06:71:5b:9d:7f:c4:5c:6d:68:75:7b:8b:06:a6:55: 66:78:f7:ae:75:0c:b0:94:60:3f:66:ad:9a:31:4e: 4d:06:49:da:3f:a1:d4:8b:6a:af:bd:c3:53:60:40: 82:25:fa:01:1a:0e:58:3d:c8:ca:c5:3d:8b:64:89: 94:ca:9c:49:44:d8:e8:49:33:34:70:28:4f:50:44: b6:7b:bd:f1:c3:18:5f:cb:36:40:23:85:59:f5:ca: 80:d3:0d:32:e7:13:aa:30:bc:48:55:7b:97:f4:56: 9b:d5:68:cc:19:90:e9:03:c9:0b:c9:53:a1:a3:42: 12:eb:5c:bc:ad:2f:3e:36:1b:f1:c6:11:08:d3:b1: c8:58:fa:c0:4e:7e:04:03:56:a4:db:91:2f:de:13: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:70:20:1B:1F:0C:81:F1:D5:66:60:D9:BE:88:A6:2C:2A:9A:BB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0faafe61-87fc-3eee-b788-7d9b253f0a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b7:33:2d:8b:62:6b:3a:bd:8e:6a:74:61:41:80:92:b7:43: 5a:25:34:39:f1:46:99:9f:ea:b6:e5:f9:06:ca:4f:22:cd:56: c5:f4:53:10:d0:6a:38:78:be:bc:62:bf:29:69:7b:4c:61:49: c2:fe:23:e9:f3:b3:89:68:00:f2:b8:63:b4:68:c8:10:ec:cf: d2:37:cc:e4:63:23:e1:d3:12:55:d0:a9:42:44:92:d7:b4:69: d7:4f:10:47:aa:e6:0e:9c:c5:b9:ae:b6:1f:7c:23:43:32:6a: b7:69:4f:20:2a:c9:c9:3d:fa:25:c2:ef:10:a6:d9:1c:8c:86: 6a:54:7e:77:d2:58:74:57:1e:02:90:e7:df:46:58:e2:0d:43: 02:44:ee:a0:05:96:ff:c1:9e:cc:d0:f6:c7:cc:6f:01:e9:66: 98:b6:80:ba:a4:0e:57:3f:8f:e8:e4:ca:fe:5e:21:a6:7c:19: d4:20:27:e6:f5:88:ed:d6:79:72:27:6e:ca:be:42:8b:2c:8a: af:15:6f:0c:28:70:91:5e:95:73:21:0c:c8:e3:31:ef:c4:7a: f9:c7:a4:5d:33:50:b0:97:81:80:bc:e8:f0:05:18:7d:1c:7d: 08:36:36:15:0c:21:15:e8:5c:6c:d3:aa:2a:8d:e4:9a:c0:0b: 97:b8:8a:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18dRUKJHcAu4zVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDRjYTIzODItYTQyNC00Yjk5LWI1NjMtZGQ4YzFjYjFkZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypc5JBSHXTq4isiu2nUnOYR/AmKXFgDDd4AQ BxZnrJS5B3aAymTa7Zn3SrKUaen5lfssLGP3EQoXP8QipOI9Il/ty0MbMMui2gs6 f4Y9uc8Uc3cPKd+dDgWJm0StvmI+2fYxFn2Ax7kGcVudf8RcbWh1e4sGplVmePeu dQywlGA/Zq2aMU5NBknaP6HUi2qvvcNTYECCJfoBGg5YPcjKxT2LZImUypxJRNjo STM0cChPUES2e73xwxhfyzZAI4VZ9cqA0w0y5xOqMLxIVXuX9Fab1WjMGZDpA8kL yVOho0IS61y8rS8+NhvxxhEI07HIWPrATn4EA1ak25Ev3hPBMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZwIBsfDIHx1WZg2b6IpiwqmrtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZhYWZlNjEtODdmYy0z ZWVlLWI3ODgtN2Q5YjI1M2YwYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFy3My2LYms6vY5qdGFBgJK3Q1olNDnxRpmf6rbl+QbKTyLNVsX0 UxDQajh4vrxivylpe0xhScL+I+nzs4loAPK4Y7RoyBDsz9I3zORjI+HTElXQqUJE kte0addPEEeq5g6cxbmuth98I0MyardpTyAqyck9+iXC7xCm2RyMhmpUfnfSWHRX HgKQ599GWOINQwJE7qAFlv/BnszQ9sfMbwHpZpi2gLqkDlc/j+jkyv5eIaZ8GdQg J+b1iO3WeXInbsq+Qossiq8VbwwocJFelXMhDMjjMe/EevnHpF0zULCXgYC86PAF GH0cfQg2NhUMIRXoXGzTqiqN5JrAC5e4ito= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:23 2025 by rpki-client