$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa File: 223a3bde-4871-384e-8a5a-b078a2c2bbba.roa (raw, json) Hash identifier: 27PnGsob8M2w2/piogfqleIW1XKa/Fb8ZslzhZrP79I= Subject key identifier: 55:8C:0C:CE:1F:59:80:90:EE:02:63:99:18:28:90:B1:D7:A7:72:2D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F8EEC442CF95CF3B5A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400765 IP address blocks: 2001:470:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f8:ee:c4:42:cf:95:cf:3b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7908fa53-21d9-4a4a-a03c-e3efe3945b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:e4:55:10:d9:5c:35:42:7e:7d:1a:06:bf: c6:84:8c:b7:d3:86:85:50:30:a7:ac:a2:da:70:62: dd:a1:02:be:10:c9:1c:86:81:8c:29:62:70:cf:ed: 7b:65:44:2c:cf:bf:60:6c:d9:30:1c:ce:2a:49:21: e6:c7:32:7d:ce:fa:7f:91:8d:62:d8:30:14:77:0c: 04:17:d2:4d:11:8a:91:d1:bd:8c:ab:87:95:7d:b3: 36:46:dd:7a:a7:61:b6:8a:ee:0a:df:90:f7:fc:09: c3:37:f6:b2:d6:0e:61:bb:e5:10:8a:4c:0a:88:72: a3:7c:d3:80:57:91:e2:c1:23:51:96:94:24:b4:22: 86:66:84:5d:93:31:a5:1c:7b:df:8b:ca:d3:d9:b5: 3f:02:f3:2c:20:df:95:8c:af:e7:d0:fc:42:89:35: 23:97:31:35:1a:f5:b5:39:30:f7:94:10:aa:f1:ec: 86:96:86:eb:0a:9f:4c:f6:87:91:61:02:a5:11:19: 23:25:dc:7c:a3:0b:78:21:03:a9:62:e3:fd:e0:4e: a7:15:3e:b4:5d:40:f0:db:28:b4:53:78:ef:ce:8d: 0d:98:a7:cb:c0:d7:9b:17:85:8e:7a:a6:f5:ae:0e: 23:58:96:fc:e2:3b:fd:89:a3:77:92:8e:91:ee:1e: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8C:0C:CE:1F:59:80:90:EE:02:63:99:18:28:90:B1:D7:A7:72:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223a3bde-4871-384e-8a5a-b078a2c2bbba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b6:e1:41:0a:c4:69:9f:64:f6:e5:82:44:9e:84:cf:93:91: db:c3:cd:69:70:7c:cf:28:b8:a7:8d:46:fe:84:38:17:95:74: 19:00:90:d5:72:74:35:82:3f:bf:dc:c3:29:d7:9d:6d:e8:c3: 88:e7:0c:91:89:06:91:fb:1f:d5:17:07:60:9e:98:c8:67:6e: da:10:d6:39:d3:8a:61:29:5b:0e:db:87:43:2e:04:94:af:55: ba:38:42:dc:4b:41:b8:c1:1e:b9:ba:c4:1d:83:94:02:de:6b: 84:ee:0c:03:f1:f8:45:44:a2:cf:fa:89:6a:75:dd:4a:2c:55: 89:a7:5f:e5:f9:7c:17:99:98:d3:06:7d:f0:f7:9a:cc:92:89: 3b:f5:97:94:1e:5b:6f:3f:f5:69:39:fc:73:21:a6:ce:1d:9f: c0:b0:a3:d4:31:d8:54:3d:ce:4b:8b:fc:27:ca:08:53:92:04: 3e:df:6a:4c:a5:ed:45:12:c1:14:39:21:e4:ea:fa:26:4c:79: b2:1e:84:88:53:7a:1f:73:00:83:4b:e0:79:f0:03:a2:7f:3f: 2f:56:35:d5:6f:ce:64:34:c0:d9:21:1c:9a:ac:c1:48:b7:98: 8f:01:85:7a:f8:40:70:7b:2a:7a:3d:75:77:2a:69:0e:1c:fa: 23:25:90:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/juxELPlc87WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzkwOGZhNTMtMjFkOS00YTRhLWEwM2MtZTNlZmUzOTQ1YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKXkVRDZXDVCfn0aBr/GhIy304aFUDCnrKLa cGLdoQK+EMkchoGMKWJwz+17ZUQsz79gbNkwHM4qSSHmxzJ9zvp/kY1i2DAUdwwE F9JNEYqR0b2Mq4eVfbM2Rt16p2G2iu4K35D3/AnDN/ay1g5hu+UQikwKiHKjfNOA V5HiwSNRlpQktCKGZoRdkzGlHHvfi8rT2bU/AvMsIN+VjK/n0PxCiTUjlzE1GvW1 OTD3lBCq8eyGlobrCp9M9oeRYQKlERkjJdx8owt4IQOpYuP94E6nFT60XUDw2yi0 U3jvzo0NmKfLwNebF4WOeqb1rg4jWJb84jv9iaN3ko6R7h4lAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFWMDM4fWYCQ7gJjmRgokLHXp3ItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjIzYTNiZGUtNDg3MS0z ODRlLThhNWEtYjA3OGEyYzJiYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABG24UEKxGmfZPblgkSehM+TkdvDzWlwfM8ouKeNRv6EOBeVdBkA kNVydDWCP7/cwynXnW3ow4jnDJGJBpH7H9UXB2CemMhnbtoQ1jnTimEpWw7bh0Mu BJSvVbo4QtxLQbjBHrm6xB2DlALea4TuDAPx+EVEos/6iWp13UosVYmnX+X5fBeZ mNMGffD3msySiTv1l5QeW28/9Wk5/HMhps4dn8Cwo9Qx2FQ9zkuL/CfKCFOSBD7f akyl7UUSwRQ5IeTq+iZMebIehIhTeh9zAINL4HnwA6J/Py9WNdVvzmQ0wNkhHJqs wUi3mI8BhXr4QHB7Kno9dXcqaQ4c+iMlkFQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:23 2025 by rpki-client