$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json) Hash identifier: nTNqPaAEu45J/Klx2Yry2Udoy67hDf7A8M0ZLu7gHww= Subject key identifier: 6F:17:7E:83:D4:84:35:2A:66:CE:EF:DC:BC:75:70:3A:38:12:6F:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F4C7B652EC45DF99A2C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 135423 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f4:c7:b6:52:ec:45:df:99:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e9ae8289-4232-4d99-aa64-4524a51740cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:11:48:49:53:a3:a0:25:91:4e:4a:66:40: 13:56:39:03:b9:c6:c1:15:0c:ce:b7:81:d4:33:f0: 0f:a5:8f:d7:fb:01:67:0c:25:97:b8:c0:db:a0:d1: 47:f7:e1:7e:91:6a:33:1b:7a:2d:bc:bd:1b:3e:72: 3c:32:2e:48:88:1c:1d:af:bf:22:be:06:c0:82:a8: 03:55:1c:00:39:0a:16:de:01:8f:37:ef:8c:ee:6b: 2a:03:47:99:85:fb:94:9b:66:28:af:f1:64:82:f5: 5d:37:37:29:90:97:8f:c9:33:88:d6:d4:c4:22:cb: 5b:4a:4a:d7:09:3c:c9:1d:09:f9:a5:36:43:e4:75: 81:7f:9a:e3:97:d7:b2:fa:b5:4e:ee:a7:12:50:97: 83:d2:33:bf:37:9f:b0:c7:2d:c9:02:52:1b:15:d0: d7:20:34:d8:f5:f6:4f:d1:09:c4:f2:c3:b2:25:8e: 55:92:42:5c:7a:e9:c9:82:2f:69:93:88:e4:c1:28: ef:ce:33:8c:30:71:3c:bf:53:cc:50:97:e1:5a:91: 19:49:5a:72:14:ae:56:40:b0:04:c8:8d:d4:8e:8d: 9b:6b:45:16:e7:13:e3:bd:ba:ef:fa:f4:ec:b3:3a: e1:7b:b3:8d:a8:5b:53:17:36:33:5a:78:1f:fa:28: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:7E:83:D4:84:35:2A:66:CE:EF:DC:BC:75:70:3A:38:12:6F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e2:7e:d7:78:9a:74:94:de:9b:15:7e:1d:eb:fd:d9:6d:31: a3:a3:1e:07:b5:e7:bc:e3:3f:c8:2b:b5:37:f6:e2:17:cf:a8: 33:cc:b8:40:4a:11:e8:f0:2a:3a:11:ef:81:2e:78:cc:dc:fb: a0:4e:e3:8d:1c:eb:81:93:c5:bd:b2:be:e1:bd:26:9c:9c:51: 1c:74:b1:01:21:8f:a4:b6:ac:04:f1:8b:40:f3:4b:ad:f1:6a: a9:4c:f7:d0:e0:f6:97:9d:91:2a:15:11:96:42:c6:55:17:2d: f9:b4:ec:c9:2e:8f:d0:a2:41:64:a6:55:aa:ba:26:c3:b0:b8: 23:fb:9b:7c:a7:dc:21:eb:0b:5e:42:4d:19:72:de:d0:05:91: f3:69:ea:e4:6a:db:68:38:e5:58:02:12:75:7f:cd:fa:df:0c: 81:af:e1:cc:3c:53:ab:22:c0:56:76:ca:07:10:40:88:81:87: de:c3:eb:c2:3b:90:77:d4:b6:ea:fb:15:b3:93:a4:86:62:f7: 08:2f:a7:0b:88:41:b5:df:5b:c2:85:62:9b:96:7d:f9:99:09: f0:38:a3:b0:2c:b0:61:6b:b5:59:70:07:cf:36:b6:0d:0f:62: ad:f2:fc:62:14:f3:43:5b:11:44:10:58:ed:cd:f3:4f:d6:67: 14:a6:a1:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/THtlLsRd+ZosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTlhZTgyODktNDIzMi00ZDk5LWFhNjQtNDUyNGE1MTc0MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCYRSElTo6AlkU5KZkATVjkDucbBFQzOt4HU M/APpY/X+wFnDCWXuMDboNFH9+F+kWozG3otvL0bPnI8Mi5IiBwdr78ivgbAgqgD VRwAOQoW3gGPN++M7msqA0eZhfuUm2Yor/FkgvVdNzcpkJePyTOI1tTEIstbSkrX CTzJHQn5pTZD5HWBf5rjl9ey+rVO7qcSUJeD0jO/N5+wxy3JAlIbFdDXIDTY9fZP 0QnE8sOyJY5VkkJceunJgi9pk4jkwSjvzjOMMHE8v1PMUJfhWpEZSVpyFK5WQLAE yI3Ujo2ba0UW5xPjvbrv+vTsszrhe7ONqFtTFzYzWngf+ih01QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8XfoPUhDUqZs7v3Lx1cDo4Em+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQyNDIxZjktODdlZi0z OTI5LTk5ZGQtZjY1ZTllOTY3MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTiftd4mnSU3psVfh3r/dltMaOjHge157zjP8grtTf24hfPqDPM uEBKEejwKjoR74EueMzc+6BO440c64GTxb2yvuG9JpycURx0sQEhj6S2rATxi0Dz S63xaqlM99Dg9pedkSoVEZZCxlUXLfm07Mkuj9CiQWSmVaq6JsOwuCP7m3yn3CHr C15CTRly3tAFkfNp6uRq22g45VgCEnV/zfrfDIGv4cw8U6siwFZ2ygcQQIiBh97D 68I7kHfUtur7FbOTpIZi9wgvpwuIQbXfW8KFYpuWffmZCfA4o7AssGFrtVlwB882 tg0PYq3y/GIU80NbEUQQWO3N80/WZxSmobA= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:30 2025 by rpki-client