$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa File: 123ca315-755a-32b7-a7a9-85a41620507a.roa (raw, json) Hash identifier: 41YeEmh8KKJFczxhGuJj6VfIYkhcvmv2Z5t0Y5NBuGk= Subject key identifier: F5:62:87:A3:D0:F0:6A:08:BE:A0:73:7E:7F:26:FC:92:5E:1A:66:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B9E07C754B04FCA1F31700980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 59437 IP address blocks: 2001:470:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c7:54:b0:4f:ca:1f:31:70:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=67ca6a10-b808-4b12-a224-2ee7ac54b4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:8d:3d:ea:cc:0c:ca:2e:14:8b:6e:1e:d4: 40:ef:39:10:60:ee:73:55:18:fa:08:66:d4:94:7b: d7:14:c0:3f:8b:6c:62:cd:7d:91:08:95:28:14:a1: 43:e6:53:69:8c:aa:fd:86:f4:1e:c1:14:45:a4:19: 0a:8b:ee:e8:7f:04:44:29:eb:b8:de:fe:fe:db:f3: c3:de:1b:6d:57:ef:8b:c0:8c:98:af:a2:65:14:de: 98:3f:0d:cd:1e:eb:ea:74:80:85:1b:a3:59:ff:b9: f8:f1:d8:11:4d:33:7e:cc:ea:60:ae:90:01:24:25: 1c:e9:d5:27:35:bd:e3:99:fd:af:49:95:2c:ae:b3: c8:32:7c:e3:7c:3d:2b:97:3f:fb:07:65:d5:43:c1: 6d:de:66:02:2c:ed:f7:f3:59:1e:ba:32:c4:07:33: 8c:1a:38:f2:1b:3b:4d:62:d7:05:45:42:c3:95:2f: 80:ea:56:b4:16:d7:03:4e:0c:9b:35:de:ba:50:4c: b2:5e:cd:50:06:56:68:f6:b1:ee:93:8d:4f:28:fa: ab:af:92:de:6d:3b:b1:77:86:58:37:71:5d:51:fc: 0f:60:07:1d:ef:64:06:b8:e8:0c:04:c3:ad:5f:f9: 75:7b:4f:76:48:29:21:11:65:ce:94:c8:6c:65:e4: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:62:87:A3:D0:F0:6A:08:BE:A0:73:7E:7F:26:FC:92:5E:1A:66:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/123ca315-755a-32b7-a7a9-85a41620507a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:328::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7c:e1:62:25:7e:51:4d:5a:68:4a:24:25:f9:9f:61:d1:1f: da:61:70:47:90:60:16:df:eb:0a:74:57:70:f8:96:99:d5:38: a7:b7:52:94:fd:e1:19:11:ed:75:f4:04:56:36:28:bb:23:74: ed:f2:3f:d3:15:07:b5:d6:3b:83:2e:f3:16:25:32:24:f2:ed: c4:bc:ff:5d:95:7f:3e:a5:8c:90:6a:fd:99:53:bf:1e:d2:63: 9e:3c:a0:85:b5:22:05:26:d4:fe:42:b4:69:a0:22:bd:b7:e4: c0:2d:70:25:67:a9:26:78:ab:7a:53:92:c9:e9:97:5a:f0:64: ff:9a:0e:1b:c8:fb:cf:d5:3b:31:05:97:eb:7d:13:0a:74:14: 8a:28:7a:89:18:8f:dc:b3:d2:96:dc:7c:26:57:12:fd:44:5b: 93:90:db:a7:61:8c:32:0c:54:73:9d:77:82:61:fe:08:e3:2b: d8:51:c9:20:e3:b5:ee:22:85:c4:77:3e:69:14:64:c8:a5:52: e1:e0:91:a9:1e:d0:b4:3d:1d:2b:c6:b9:27:87:61:d5:ff:3f: a5:b4:a3:56:10:16:59:c8:3f:fa:8d:05:30:88:3e:4a:62:36: ea:66:ef:c7:d8:59:0e:0b:96:c4:7d:6d:e3:ee:38:17:32:5a: 04:69:5c:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8dUsE/KHzFwCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjdjYTZhMTAtYjgwOC00YjEyLWEyMjQtMmVlN2FjNTRiNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndaNPerMDMouFItuHtRA7zkQYO5zVRj6CGbU lHvXFMA/i2xizX2RCJUoFKFD5lNpjKr9hvQewRRFpBkKi+7ofwREKeu43v7+2/PD 3httV++LwIyYr6JlFN6YPw3NHuvqdICFG6NZ/7n48dgRTTN+zOpgrpABJCUc6dUn Nb3jmf2vSZUsrrPIMnzjfD0rlz/7B2XVQ8Ft3mYCLO3381keujLEBzOMGjjyGztN YtcFRULDlS+A6la0FtcDTgybNd66UEyyXs1QBlZo9rHuk41PKPqrr5LebTuxd4ZY N3FdUfwPYAcd72QGuOgMBMOtX/l1e092SCkhEWXOlMhsZeRw0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPVih6PQ8GoIvqBzfn8m/JJeGmZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTIzY2EzMTUtNzU1YS0z MmI3LWE3YTktODVhNDE2MjA1MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD184WIlflFNWmhKJCX5n2HRH9phcEeQYBbf6wp0V3D4lpnVOKe3 UpT94RkR7XX0BFY2KLsjdO3yP9MVB7XWO4Mu8xYlMiTy7cS8/12Vfz6ljJBq/ZlT vx7SY548oIW1IgUm1P5CtGmgIr235MAtcCVnqSZ4q3pTksnpl1rwZP+aDhvI+8/V OzEFl+t9Ewp0FIooeokYj9yz0pbcfCZXEv1EW5OQ26dhjDIMVHOdd4Jh/gjjK9hR ySDjte4ihcR3PmkUZMilUuHgkake0LQ9HSvGuSeHYdX/P6W0o1YQFlnIP/qNBTCI PkpiNupm78fYWQ4LlsR9bePuOBcyWgRpXMU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:19 2025 by rpki-client