$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa File: 13281c46-3186-389c-b054-cb3e08ef18e6.roa (raw, json) Hash identifier: lAv/aKpe/Aq6QEp3NRfV4W1fg61/xAnoyKUTpL4ohvU= Subject key identifier: 2A:5F:A3:68:7A:FA:D3:FD:CB:95:7B:83:7E:4C:3E:72:71:04:15:98 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EC9CD19F2BDD981172C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40138 IP address blocks: 2001:470:18d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ec:9c:d1:9f:2b:dd:98:11:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b1caeef4-7248-45f7-86db-510c9e17b2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:e7:00:f9:de:be:35:cb:68:6f:d5:71:72: a8:bd:13:4a:21:2d:af:16:0e:58:75:25:16:90:c8: 08:ec:2d:17:ad:13:1e:fd:aa:bf:44:84:90:12:84: 3e:40:cc:42:2d:06:30:89:fe:10:82:96:87:0c:95: 8a:f6:c9:4d:64:9f:f1:5a:c8:6d:81:56:a4:0d:a3: 5c:6b:61:c3:ba:8b:ea:93:46:b8:44:df:72:6d:c5: 79:b4:06:1e:33:48:cc:70:25:ce:d3:b9:77:bf:ca: 0d:3a:8d:11:00:43:11:71:c2:47:4b:6a:fe:e3:07: da:71:a8:af:c1:d7:4f:c6:9e:2b:fe:51:73:83:64: e1:b4:93:81:c1:33:bc:a6:e8:b9:8f:7f:cc:16:5d: 9d:25:e2:77:00:a5:1c:f7:f7:af:1c:8b:55:f0:34: 80:ba:1c:7c:07:1a:b1:b3:44:b6:6f:01:53:00:f1: 88:5a:d0:36:71:1f:ce:b9:e8:ba:6d:16:e2:cb:b2: b4:9e:5e:bb:25:2b:3a:29:8f:44:1a:7a:fc:1a:62: 3e:bd:c0:d2:e8:3e:3e:85:87:91:3d:8a:73:c7:e3: a2:0e:9f:d9:e1:94:69:1e:10:95:05:98:84:b1:09: 22:d3:11:b2:73:25:3b:4b:1e:fa:7f:72:f8:33:27: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:A3:68:7A:FA:D3:FD:CB:95:7B:83:7E:4C:3E:72:71:04:15:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:18d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:19:ab:23:b8:36:98:28:a7:a2:b5:10:b0:f9:a5:fd:56:0c: 81:44:74:88:90:ab:e8:9f:dc:35:21:ba:d6:5e:cf:87:68:2c: 1c:24:95:6a:28:d3:90:a4:a9:28:0c:06:14:9f:c2:52:36:50: 8e:81:41:f6:65:7b:a4:31:4d:72:b0:ab:9d:64:cd:44:51:76: a9:86:c1:63:53:51:40:92:20:21:fd:77:57:79:19:a5:a8:d5: a0:c0:c2:a2:50:5c:1a:97:5e:bc:2a:79:68:2f:9c:88:9f:09: 06:c5:b5:dd:29:ea:1a:1e:64:f7:b8:f4:78:c0:1a:80:b4:46: a2:b5:a6:49:1c:ed:49:56:ea:5e:10:a3:34:5f:e4:b0:05:75: 47:66:b4:69:0a:7b:8f:c4:6d:08:a4:3b:ab:52:97:c9:f3:4b: 84:c3:fc:8c:ed:c4:81:73:a6:0b:3d:cb:e6:0a:a8:cb:c5:54: 57:90:99:ed:65:c9:70:fa:fd:ab:bc:b4:2a:70:c4:a3:5c:d2: d0:3c:13:32:8b:e7:93:84:a1:c5:c6:cb:0d:49:49:28:63:8f: 32:44:50:84:31:b7:18:9f:64:67:80:ab:69:1d:8a:be:4c:09: 02:29:f3:cf:31:f2:fa:1e:31:52:05:fe:64:0a:ef:60:75:f6: 7a:d5:46:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+yc0Z8r3ZgRcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjFjYWVlZjQtNzI0OC00NWY3LTg2ZGItNTEwYzllMTdiMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOTnAPnevjXLaG/VcXKovRNKIS2vFg5YdSUW kMgI7C0XrRMe/aq/RISQEoQ+QMxCLQYwif4QgpaHDJWK9slNZJ/xWshtgVakDaNc a2HDuovqk0a4RN9ybcV5tAYeM0jMcCXO07l3v8oNOo0RAEMRccJHS2r+4wfacaiv wddPxp4r/lFzg2ThtJOBwTO8pui5j3/MFl2dJeJ3AKUc9/evHItV8DSAuhx8Bxqx s0S2bwFTAPGIWtA2cR/Ouei6bRbiy7K0nl67JSs6KY9EGnr8GmI+vcDS6D4+hYeR PYpzx+OiDp/Z4ZRpHhCVBZiEsQki0xGycyU7Sx76f3L4MyfZfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCpfo2h6+tP9y5V7g35MPnJxBBWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTMyODFjNDYtMzE4Ni0z ODljLWIwNTQtY2IzZTA4ZWYxOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoZqyO4Npgop6K1ELD5pf1WDIFEdIiQq+if3DUhutZez4doLBwk lWoo05CkqSgMBhSfwlI2UI6BQfZle6QxTXKwq51kzURRdqmGwWNTUUCSICH9d1d5 GaWo1aDAwqJQXBqXXrwqeWgvnIifCQbFtd0p6hoeZPe49HjAGoC0RqK1pkkc7UlW 6l4QozRf5LAFdUdmtGkKe4/EbQikO6tSl8nzS4TD/IztxIFzpgs9y+YKqMvFVFeQ me1lyXD6/au8tCpwxKNc0tA8EzKL55OEocXGyw1JSShjjzJEUIQxtxifZGeAq2kd ir5MCQIp888x8voeMVIF/mQK72B19nrVRp0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:26 2025 by rpki-client