$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa File: 1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa (raw, json) Hash identifier: GXeBNt7QXGPLRl5Eph08l70mZIwRWmISjrqWbdvJJ6k= Subject key identifier: DD:67:A5:C3:87:40:CB:F6:94:6D:32:0F:9C:E5:59:6F:8B:25:08:78 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C4EBB461E3B8CEACC300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 23089 IP address blocks: 2001:470:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c4:eb:b4:61:e3:b8:ce:ac:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f0db8f23-5c75-454a-9c24-11e3dce099b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:c0:5f:cf:c0:0e:a1:07:cb:fe:cf:dd:37: c5:fb:e5:4c:e4:45:86:66:ca:b0:e1:24:45:20:ac: f4:75:ab:16:4d:7c:0a:4c:38:41:26:64:ec:e9:67: 53:8e:77:e0:76:94:49:52:7c:d4:78:e5:3d:29:a7: 20:31:e0:0f:76:6a:3d:1c:1a:91:8a:dc:10:e2:1c: 7f:70:c5:5a:5b:68:89:7d:f8:fd:4b:8f:85:a5:dc: b8:af:11:19:17:e5:45:c1:3c:d9:24:a6:ac:32:5a: a7:49:3c:0c:31:fe:64:64:09:f1:f2:95:90:f5:b2: a2:06:4a:b9:8d:ff:2d:70:98:a0:6f:0b:ff:90:29: 3d:84:04:14:a0:07:4d:0f:87:09:35:d7:5e:a4:85: c1:35:f3:0c:47:50:20:22:23:4c:4c:f1:a9:32:dc: 0b:73:e0:3d:ce:46:cf:6f:d7:86:04:b3:96:84:15: 82:c2:4a:72:11:f3:9d:cd:d4:07:69:03:bc:ef:a1: 3c:ee:97:b9:56:47:84:34:57:97:74:d3:da:bf:86: ed:dd:3b:37:21:51:f5:c2:98:b4:d0:1b:44:dc:2e: fb:4e:b7:8a:f5:dd:38:ae:48:0b:e7:c2:10:6f:80: 92:c4:ff:87:7a:71:a6:76:da:87:2e:7d:56:ed:00: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:67:A5:C3:87:40:CB:F6:94:6D:32:0F:9C:E5:59:6F:8B:25:08:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c3:6c:7a:6c:88:f7:6e:52:c8:b4:c9:46:77:7e:70:3a:70: f5:49:67:a8:d9:0f:45:d5:02:22:01:48:75:6b:80:07:eb:4f: a7:30:43:09:77:b2:5d:b9:e2:93:ec:18:67:e5:27:e5:0e:f0: 7b:1a:a8:a7:d1:df:7d:81:24:4e:70:78:86:9a:4e:ac:83:35: 9b:c6:69:9f:f1:f2:4d:95:27:95:43:b8:68:ef:06:80:0a:26: 49:d9:d3:a1:52:0d:83:07:d3:ee:42:32:c2:33:ca:e2:60:9a: 7e:f5:a0:5c:e8:31:37:3a:82:d9:b4:1b:e0:d4:47:b3:87:71: 5e:22:6f:30:02:d0:01:67:cc:9f:c1:99:a3:03:8e:1e:7e:93: e1:0d:f4:a0:43:d8:3f:e2:c6:ba:5b:e1:c4:4f:0f:f0:7c:03: 12:bc:82:bd:0b:ae:41:e7:21:24:5f:cb:c8:3e:83:60:be:b9: cc:81:fe:82:bf:76:0d:1a:2e:67:47:55:a4:d8:cd:5c:84:66: 90:93:5d:71:89:34:bd:1d:04:78:a3:9a:3c:65:11:5c:27:77: e8:ee:ac:9d:9a:25:99:98:0c:d1:4a:2e:ef:69:af:7d:29:43: 5b:59:48:4e:71:58:20:6b:b2:e7:b2:26:bf:a0:cd:0e:80:0d: 96:d8:d3:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18TrtGHjuM6swwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjBkYjhmMjMtNWM3NS00NTRhLTljMjQtMTFlM2RjZTA5OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZvAX8/ADqEHy/7P3TfF++VM5EWGZsqw4SRF IKz0dasWTXwKTDhBJmTs6WdTjnfgdpRJUnzUeOU9KacgMeAPdmo9HBqRitwQ4hx/ cMVaW2iJffj9S4+Fpdy4rxEZF+VFwTzZJKasMlqnSTwMMf5kZAnx8pWQ9bKiBkq5 jf8tcJigbwv/kCk9hAQUoAdND4cJNddepIXBNfMMR1AgIiNMTPGpMtwLc+A9zkbP b9eGBLOWhBWCwkpyEfOdzdQHaQO876E87pe5VkeENFeXdNPav4bt3Ts3IVH1wpi0 0BtE3C77TreK9d04rkgL58IQb4CSxP+HenGmdtqHLn1W7QBehQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1npcOHQMv2lG0yD5zlWW+LJQh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWZiY2EwNzItNGVmYS0z ZGIzLTlmZTgtYjRlNGQxMjY4ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJvDbHpsiPduUsi0yUZ3fnA6cPVJZ6jZD0XVAiIBSHVrgAfrT6cw Qwl3sl254pPsGGflJ+UO8HsaqKfR332BJE5weIaaTqyDNZvGaZ/x8k2VJ5VDuGjv BoAKJknZ06FSDYMH0+5CMsIzyuJgmn71oFzoMTc6gtm0G+DUR7OHcV4ibzAC0AFn zJ/BmaMDjh5+k+EN9KBD2D/ixrpb4cRPD/B8AxK8gr0LrkHnISRfy8g+g2C+ucyB /oK/dg0aLmdHVaTYzVyEZpCTXXGJNL0dBHijmjxlEVwnd+jurJ2aJZmYDNFKLu9p r30pQ1tZSE5xWCBrsueyJr+gzQ6ADZbY048= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:29 2025 by rpki-client