$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa File: 3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa (raw, json) Hash identifier: on+KXfv32hiie68OovDX6RdaZ21G/7xF8ET6+10o40U= Subject key identifier: 41:71:D8:2F:D5:39:A0:DE:4F:E2:DE:BB:8D:18:22:16:DF:E9:52:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CCE99348E15E92892140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 17408 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cc:e9:93:48:e1:5e:92:89:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=083a2d64-4e06-4688-8c44-0659e3b8edbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:cc:2d:b3:f4:b7:f3:8f:7a:9c:61:d1:2c: 0c:0a:44:54:bb:32:cf:f5:7e:cc:3f:b4:d0:db:12: 63:a1:86:12:78:d0:67:40:11:69:20:c9:f5:a3:ff: f0:b4:fe:98:62:83:1c:1a:7b:df:7b:a4:1d:6d:14: 40:3a:f9:06:18:cc:33:12:d1:d7:76:45:76:03:bc: 52:5d:a0:ec:fa:b5:1f:85:f8:b1:49:51:42:a8:b9: c2:8f:28:c4:50:4d:5f:09:e3:e5:17:8c:f7:03:4e: 19:ed:93:1e:09:ea:01:60:2a:bc:45:5a:07:8d:cc: 48:84:66:16:aa:7f:55:16:45:aa:3e:3f:81:a5:09: 91:b8:b0:61:04:36:51:e4:bf:76:95:45:88:89:f8: 6e:5d:7c:4c:05:a2:ec:75:06:d3:78:1d:60:43:13: a9:3f:c6:af:3c:f9:de:91:33:94:ad:4e:15:cf:9d: 3c:34:2d:fb:d0:e0:9e:66:1e:55:dc:7b:f4:a9:98: 9e:b5:1a:be:d7:a7:87:21:5d:a6:c1:e0:2f:aa:ce: 01:3d:b5:d1:eb:71:2b:be:41:c0:23:90:b5:2b:4a: 94:a9:7c:e2:f2:b6:c3:f7:15:38:3f:79:7e:d0:b9: aa:8f:0e:22:f8:46:60:06:b7:e9:7f:92:2a:c9:ee: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:71:D8:2F:D5:39:A0:DE:4F:E2:DE:BB:8D:18:22:16:DF:E9:52:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3188ec37-0c4c-3b29-9d2b-1a0d36957709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a9:7d:c4:c9:7b:89:b4:65:53:22:84:98:48:f6:23:cd:bb: 5a:b0:4d:0c:e6:c1:a8:dc:5d:af:57:1c:a9:a0:20:1f:a1:80: 9f:2e:92:3f:fc:f8:95:5e:8b:23:be:87:5e:2b:81:a7:4f:d6: fd:88:eb:e1:7d:1e:64:55:ff:d0:12:67:da:c9:15:4b:c8:a7: fb:04:05:7b:4b:dd:8f:53:9f:6d:3f:55:8a:1e:12:a6:9d:c5: f7:dd:47:79:f4:d9:db:3c:4d:a7:1e:27:7f:dc:0a:26:ec:fb: 79:fc:b4:29:4b:1e:b2:8f:5d:0f:f3:18:0b:aa:a1:c4:a4:5a: 39:7e:04:24:dd:79:38:b5:16:44:f6:46:c0:6d:88:d0:13:7b: 5d:5e:c8:c2:e5:91:0e:95:86:b8:97:17:8e:7a:35:2f:e1:4a: aa:e1:b8:0c:50:3d:36:93:b4:a6:9c:d4:9b:4f:aa:04:08:f8: e6:93:06:7e:91:69:fd:de:15:01:83:31:b7:7d:d5:af:33:28: 69:b4:7d:82:51:bf:6d:55:99:4e:ae:11:9b:ea:d5:3a:a6:c0: 5b:3d:b9:14:05:44:10:97:81:1e:ea:eb:25:cf:79:a4:a3:a1: ba:e7:c0:8d:fe:da:93:e3:0c:29:a0:44:09:8e:eb:a5:a9:2b: 7e:fc:0d:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18zpk0jhXpKJIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDgzYTJkNjQtNGUwNi00Njg4LThjNDQtMDY1OWUzYjhlZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHzMLbP0t/OPepxh0SwMCkRUuzLP9X7MP7TQ 2xJjoYYSeNBnQBFpIMn1o//wtP6YYoMcGnvfe6QdbRRAOvkGGMwzEtHXdkV2A7xS XaDs+rUfhfixSVFCqLnCjyjEUE1fCePlF4z3A04Z7ZMeCeoBYCq8RVoHjcxIhGYW qn9VFkWqPj+BpQmRuLBhBDZR5L92lUWIifhuXXxMBaLsdQbTeB1gQxOpP8avPPne kTOUrU4Vz508NC370OCeZh5V3Hv0qZietRq+16eHIV2mweAvqs4BPbXR63ErvkHA I5C1K0qUqXzi8rbD9xU4P3l+0Lmqjw4i+EZgBrfpf5Iqye72AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFx2C/VOaDeT+Leu40YIhbf6VIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzE4OGVjMzctMGM0Yy0z YjI5LTlkMmItMWEwZDM2OTU3NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAupfcTJe4m0ZVMihJhI9iPNu1qwTQzmwajcXa9XHKmgIB+hgJ8u kj/8+JVeiyO+h14rgadP1v2I6+F9HmRV/9ASZ9rJFUvIp/sEBXtL3Y9Tn20/VYoe EqadxffdR3n02ds8TaceJ3/cCibs+3n8tClLHrKPXQ/zGAuqocSkWjl+BCTdeTi1 FkT2RsBtiNATe11eyMLlkQ6VhriXF456NS/hSqrhuAxQPTaTtKac1JtPqgQI+OaT Bn6Raf3eFQGDMbd91a8zKGm0fYJRv21VmU6uEZvq1TqmwFs9uRQFRBCXgR7q6yXP eaSjobrnwI3+2pPjDCmgRAmO66WpK378DT0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:27 2025 by rpki-client