$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa File: 134d0ff8-6e52-393f-b894-86cf8081f6d3.roa (raw, json) Hash identifier: C33mFEpPiTv0sh+ocbIpU7kKCF5HCcpNhWYpIqOh8so= Subject key identifier: 2C:F1:41:5D:CA:64:93:DA:C8:DF:02:25:A2:7C:51:00:49:73:48:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D336D784C3D99A546D90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30900 IP address blocks: 2001:470:2d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d3:36:d7:84:c3:d9:9a:54:6d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f28b9c39-0d5b-43ff-b5f5-53b81bf7516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:53:7c:ab:00:95:ab:32:94:df:64:75:8d: 33:f2:17:81:ff:a5:6b:0c:07:99:0e:ea:95:c6:ba: 67:f1:5d:8f:d2:63:d5:2c:d6:1f:ef:2c:42:79:7f: 50:5a:5f:c5:a8:97:50:07:da:b5:7e:c0:b9:d8:80: 6c:50:95:35:a7:48:0e:da:a1:e4:d2:13:78:a0:51: 04:96:10:f3:39:a5:41:3d:5c:fe:e8:fd:c4:f0:a8: e1:bd:08:bf:20:51:e9:3f:55:98:fb:e2:62:e1:fc: b4:8d:b6:c7:0b:aa:d7:99:9d:65:66:21:e2:46:be: 03:07:19:54:aa:a9:38:61:c5:61:a5:aa:66:59:32: 91:60:c6:82:46:a2:0e:09:34:aa:ca:7f:8d:09:11: b1:d7:85:f2:b0:fb:24:82:2c:2c:35:cf:86:6d:ca: 81:b3:bb:9c:5e:03:48:9b:78:81:70:bd:be:ef:e9: d9:c2:c9:0f:c0:d7:34:6e:35:7a:84:c5:d5:91:3d: 39:44:60:98:c0:23:15:4c:97:34:71:55:1d:03:09: 30:e5:df:2a:cd:a0:9a:44:2e:fe:bd:81:1a:46:b1: 4d:03:37:9d:76:7b:4c:96:83:c3:48:2a:a1:aa:a1: 40:08:1d:02:63:08:72:a3:f4:cb:23:dd:e0:f7:8d: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:41:5D:CA:64:93:DA:C8:DF:02:25:A2:7C:51:00:49:73:48:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:85:dd:8f:c9:91:1b:9a:a1:63:5e:b3:85:f9:8f:ec:13:75: aa:9b:d3:50:4f:04:33:f5:15:53:d1:b7:e9:77:e9:5e:73:cf: 8c:cc:a8:49:a3:5d:33:cc:75:1c:3b:e4:23:77:27:85:53:4a: 3b:f5:14:69:5f:ce:10:0c:a0:c0:88:03:5d:bf:5a:8a:08:a0: 49:4d:0a:e0:41:85:1e:02:71:b0:2c:0f:38:39:d8:3a:3f:c0: d0:46:9d:dc:bc:c4:a9:03:0f:80:aa:68:f4:0a:a5:ac:10:2e: 1d:58:c4:85:99:81:45:18:b2:11:17:61:63:4e:25:99:20:fa: 9f:8f:4b:ce:6a:5b:1e:e5:6e:4a:82:4b:92:f8:a7:92:6e:b0: 2e:30:1e:cd:38:80:16:90:c0:03:d2:2c:21:eb:fb:d2:90:c8: 3e:fc:e4:fa:72:dd:db:65:80:61:50:78:c4:6e:e4:a6:2f:ba: 6b:4d:df:06:71:ff:9a:4e:85:bc:27:ee:cd:e2:28:0f:a9:23: 31:fd:d5:f1:dd:39:f1:30:0e:b2:53:6e:d2:37:82:9b:c6:35: da:3f:92:f1:b4:7f:51:4f:bd:ea:0c:f0:55:36:c4:9f:cd:e1: 09:32:93:27:9a:ca:2b:ff:a8:bc:5b:17:e0:25:0d:d4:aa:57: 5f:30:40:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19M214TD2ZpUbZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjI4YjljMzktMGQ1Yi00M2ZmLWI1ZjUtNTNiODFiZjc1MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkZTfKsAlasylN9kdY0z8heB/6VrDAeZDuqV xrpn8V2P0mPVLNYf7yxCeX9QWl/FqJdQB9q1fsC52IBsUJU1p0gO2qHk0hN4oFEE lhDzOaVBPVz+6P3E8KjhvQi/IFHpP1WY++Ji4fy0jbbHC6rXmZ1lZiHiRr4DBxlU qqk4YcVhpapmWTKRYMaCRqIOCTSqyn+NCRGx14XysPskgiwsNc+GbcqBs7ucXgNI m3iBcL2+7+nZwskPwNc0bjV6hMXVkT05RGCYwCMVTJc0cVUdAwkw5d8qzaCaRC7+ vYEaRrFNAzeddntMloPDSCqhqqFACB0CYwhyo/TLI93g941cRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzxQV3KZJPayN8CJaJ8UQBJc0hFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTM0ZDBmZjgtNmU1Mi0z OTNmLWI4OTQtODZjZjgwODFmNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeF3Y/JkRuaoWNes4X5j+wTdaqb01BPBDP1FVPRt+l36V5zz4zM qEmjXTPMdRw75CN3J4VTSjv1FGlfzhAMoMCIA12/WooIoElNCuBBhR4CcbAsDzg5 2Do/wNBGndy8xKkDD4CqaPQKpawQLh1YxIWZgUUYshEXYWNOJZkg+p+PS85qWx7l bkqCS5L4p5JusC4wHs04gBaQwAPSLCHr+9KQyD785Ppy3dtlgGFQeMRu5KYvumtN 3wZx/5pOhbwn7s3iKA+pIzH91fHdOfEwDrJTbtI3gpvGNdo/kvG0f1FPveoM8FU2 xJ/N4Qkykyeayiv/qLxbF+AlDdSqV18wQAI= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:41 2025 by rpki-client