$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa File: 21b3acb0-357c-3d95-928b-9d0c6629e02b.roa (raw, json) Hash identifier: Bo4zSJ51pQhHzCGN2PSCsHENkDKe+89GIfyl7KCFo+4= Subject key identifier: 3B:67:79:A9:EF:06:82:3C:10:0D:75:C0:E2:7D:32:2D:08:FD:B5:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D4B487DD5C0B513FED00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 23252 IP address blocks: 2001:470:2fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d4:b4:87:dd:5c:0b:51:3f:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=aea5aeb9-cd92-4c7d-9ce5-0bf086cd81db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:89:49:38:d5:1c:ed:cc:20:31:00:4e:57: e2:52:55:ed:5a:ec:1c:5b:13:42:4d:4f:4f:6b:7d: 07:4c:b1:39:fa:cd:19:b3:ee:61:2e:7b:5f:2d:e4: d8:6d:a6:9e:bc:80:56:bf:b1:3f:df:93:2a:da:20: 2b:00:44:74:50:66:a8:e2:67:8c:77:37:b5:49:58: ad:d1:33:a8:38:d0:ec:7f:90:fc:5f:0e:68:58:9b: 67:71:53:ca:74:ba:0c:a7:23:3c:f9:09:38:a9:6e: e8:37:77:c4:01:55:7c:e3:79:5c:46:65:d7:60:b7: 88:4b:ec:a0:23:8c:36:95:bb:82:21:04:e8:db:6a: b0:79:64:68:b0:13:67:48:fa:eb:ff:d6:0a:68:bb: a7:25:e9:3f:a4:be:73:e4:b9:ae:ba:4f:98:92:67: c2:c5:5e:e1:fe:fb:e6:c6:33:3e:81:ce:08:76:66: 36:89:dd:da:f1:a7:95:7e:24:2c:35:45:b3:ca:b2: a8:67:72:d0:78:44:49:ef:5d:b5:de:4d:e3:8a:24: d1:ab:85:a2:a5:f6:60:6f:ec:f7:91:0a:f6:3a:71: d9:bc:2f:c0:ca:f3:ec:b8:24:4c:cd:ec:06:68:e9: dc:c8:04:4b:68:2f:85:d1:23:c4:c5:89:6f:86:9e: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:79:A9:EF:06:82:3C:10:0D:75:C0:E2:7D:32:2D:08:FD:B5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e2:bf:64:30:c3:a8:fa:85:15:94:38:13:5c:1d:32:ab:43: f4:8b:65:2e:25:a5:b1:32:41:59:c8:05:c8:e2:69:a3:ee:f1: bf:bf:f2:c7:63:2e:b8:79:11:1b:6b:63:f5:3e:bd:88:88:22: a2:3a:11:7d:d9:75:fb:72:2b:86:9d:ad:6e:8c:0f:a2:fd:89: 15:19:8d:ab:c8:c7:4d:8f:01:7a:da:58:16:84:fe:07:27:a7: 5d:df:d1:07:a7:af:ac:9c:e6:ca:29:f0:a7:ca:56:7e:c6:e5: d3:eb:e8:7b:9d:06:49:05:c6:d2:79:e8:f3:8d:f9:2a:01:02: 1e:03:05:42:3d:72:05:bf:71:df:2e:39:20:dc:37:0d:a2:2f: 5b:04:54:15:56:cc:50:9f:a3:46:16:79:28:e8:30:12:a2:35: 63:a3:01:5c:2c:05:71:8e:e6:73:84:d1:ac:1f:5a:b1:f8:4b: c8:16:8e:0d:c9:b9:b7:5a:49:87:7e:60:80:df:d6:20:bf:68: ce:fd:a8:1b:68:11:6e:a0:40:fa:3d:a3:2a:5c:5c:00:c0:0c: aa:8d:b5:ee:68:04:37:d0:3a:8e:99:3b:1e:fb:08:49:af:41: e3:d5:75:1f:ba:0e:35:01:a1:96:23:73:c7:25:bc:92:5e:07: e0:52:07:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19S0h91cC1E/7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWVhNWFlYjktY2Q5Mi00YzdkLTljZTUtMGJmMDg2Y2Q4MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSGJSTjVHO3MIDEATlfiUlXtWuwcWxNCTU9P a30HTLE5+s0Zs+5hLntfLeTYbaaevIBWv7E/35Mq2iArAER0UGao4meMdze1SVit 0TOoONDsf5D8Xw5oWJtncVPKdLoMpyM8+Qk4qW7oN3fEAVV843lcRmXXYLeIS+yg I4w2lbuCIQTo22qweWRosBNnSPrr/9YKaLunJek/pL5z5Lmuuk+YkmfCxV7h/vvm xjM+gc4IdmY2id3a8aeVfiQsNUWzyrKoZ3LQeERJ71213k3jiiTRq4WipfZgb+z3 kQr2OnHZvC/AyvPsuCRMzewGaOncyARLaC+F0SPExYlvhp70DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtneanvBoI8EA11wOJ9Mi0I/bVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFiM2FjYjAtMzU3Yy0z ZDk1LTkyOGItOWQwYzY2MjllMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADziv2Qww6j6hRWUOBNcHTKrQ/SLZS4lpbEyQVnIBcjiaaPu8b+/ 8sdjLrh5ERtrY/U+vYiIIqI6EX3ZdftyK4adrW6MD6L9iRUZjavIx02PAXraWBaE /gcnp13f0Qenr6yc5sop8KfKVn7G5dPr6HudBkkFxtJ56PON+SoBAh4DBUI9cgW/ cd8uOSDcNw2iL1sEVBVWzFCfo0YWeSjoMBKiNWOjAVwsBXGO5nOE0awfWrH4S8gW jg3JubdaSYd+YIDf1iC/aM79qBtoEW6gQPo9oypcXADADKqNte5oBDfQOo6ZOx77 CEmvQePVdR+6DjUBoZYjc8clvJJeB+BSB1M= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:41 2025 by rpki-client