$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa File: 3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa (raw, json) Hash identifier: cNd7jolYXJhmDv9mUOJbgjOdJjN5WyHFdliz1+vEWUs= Subject key identifier: 06:10:07:CD:69:0D:79:16:92:EB:DB:49:CC:EF:4A:A4:A7:25:A7:25 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CFF8E5BF0CA8941562C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 215684 IP address blocks: 2001:470:296::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cf:f8:e5:bf:0c:a8:94:15:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5f70adc9-cbe0-46d4-8b35-34cca775287e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:5f:12:90:7b:2d:73:2f:17:04:2e:3f:b4: bd:09:c5:86:95:50:8f:d9:ba:11:08:06:1d:ef:73: ba:a7:fb:ad:33:65:45:2d:6a:55:b3:fa:b3:28:3a: 0f:01:ba:81:1b:25:fc:ac:e4:4a:5d:1c:7c:f7:db: e8:fb:c7:4f:8f:49:f5:1c:bd:98:ab:6b:85:f1:3d: 00:24:fe:b5:3d:48:48:b5:a6:dc:cc:07:db:40:68: 70:c7:86:7d:af:4d:68:85:ee:d4:92:06:78:c4:5d: cc:e4:da:1f:96:28:8d:51:99:61:74:a2:44:b0:57: 46:1d:37:2e:c0:27:75:67:a5:0a:5d:b1:8a:18:35: 29:de:03:95:f9:96:21:79:24:29:a2:ad:6c:c0:8c: 5e:7d:48:b4:89:c7:ea:ed:dd:de:ae:14:90:ac:b9: eb:17:a0:10:fc:08:e3:da:8d:37:96:eb:20:20:93: 81:53:c1:e8:56:46:25:13:72:18:1d:4e:5e:b9:23: 92:a3:82:6b:50:f6:f7:c6:f1:90:89:5f:0f:e6:19: 59:00:86:e0:a6:0e:0d:31:5f:4d:de:24:32:e2:b9: 72:d3:8d:a3:be:c8:ba:46:87:97:a6:c1:32:da:4c: c9:6c:96:3b:3f:34:d4:ce:5f:9c:3d:99:a3:9e:9d: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:10:07:CD:69:0D:79:16:92:EB:DB:49:CC:EF:4A:A4:A7:25:A7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:296::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0b:6b:07:5f:26:e4:51:d6:9a:84:1d:aa:04:77:98:4d:2a: ab:dd:e4:cb:24:20:3d:25:a0:47:74:b7:2f:3d:d3:ff:a1:f1: e3:53:9b:b7:5d:a5:77:6a:36:24:06:6a:2f:46:b5:da:96:42: 2f:54:8d:99:b7:f1:72:73:8a:8f:2a:9c:12:d8:87:0f:df:f1: c2:67:45:10:e3:12:ca:71:b0:42:7d:df:96:ec:50:04:ab:fa: eb:2b:ea:56:f6:fc:9b:53:f7:8d:5b:16:f4:7f:f8:70:eb:a3: f4:c7:23:2e:14:4b:7b:f0:c4:81:27:d2:b5:2d:70:73:71:ef: 3e:2a:49:5a:34:6a:23:bc:0a:9e:cd:2c:af:22:4b:f6:40:a3: a0:01:73:a8:fd:ce:d1:8b:b7:76:b7:1b:8c:83:ec:aa:6c:58: 46:99:0a:41:f0:0d:c4:5f:bf:ff:77:ff:29:e9:d6:cd:18:62: ca:9c:5c:f6:95:91:ba:5f:7e:3c:a1:8d:65:44:44:f7:3a:d7: e0:85:33:cb:4b:cf:08:24:ea:d0:f2:56:4b:e9:aa:68:79:7e: 7c:58:76:09:4b:f3:93:14:80:e3:1a:a7:d1:43:2a:2d:aa:6d: 4b:2a:87:99:22:5c:f3:5e:d4:2c:76:83:a0:56:b9:14:77:fa: d9:a7:cf:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18/45b8MqJQVYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWY3MGFkYzktY2JlMC00NmQ0LThiMzUtMzRjY2E3NzUyODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK5fEpB7LXMvFwQuP7S9CcWGlVCP2boRCAYd 73O6p/utM2VFLWpVs/qzKDoPAbqBGyX8rORKXRx899vo+8dPj0n1HL2Yq2uF8T0A JP61PUhItabczAfbQGhwx4Z9r01ohe7UkgZ4xF3M5NofliiNUZlhdKJEsFdGHTcu wCd1Z6UKXbGKGDUp3gOV+ZYheSQpoq1swIxefUi0icfq7d3erhSQrLnrF6AQ/Ajj 2o03lusgIJOBU8HoVkYlE3IYHU5euSOSo4JrUPb3xvGQiV8P5hlZAIbgpg4NMV9N 3iQy4rly042jvsi6RoeXpsEy2kzJbJY7PzTUzl+cPZmjnp3ZlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAYQB81pDXkWkuvbSczvSqSnJaclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzAyNmIyNDktODc0ZS0z Y2I5LTllNmMtM2JiYjRhMjgwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGELawdfJuRR1pqEHaoEd5hNKqvd5MskID0loEd0ty890/+h8eNT m7ddpXdqNiQGai9GtdqWQi9UjZm38XJzio8qnBLYhw/f8cJnRRDjEspxsEJ935bs UASr+usr6lb2/JtT941bFvR/+HDro/THIy4US3vwxIEn0rUtcHNx7z4qSVo0aiO8 Cp7NLK8iS/ZAo6ABc6j9ztGLt3a3G4yD7KpsWEaZCkHwDcRfv/93/ynp1s0YYsqc XPaVkbpffjyhjWVERPc61+CFM8tLzwgk6tDyVkvpqmh5fnxYdglL85MUgOMap9FD Ki2qbUsqh5kiXPNe1Cx2g6BWuRR3+tmnz+U= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:30 2025 by rpki-client