$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/341b3da5-d53e-34c4-a3d6-662303c3a5d7.roa File: 341b3da5-d53e-34c4-a3d6-662303c3a5d7.roa (raw, json) Hash identifier: DHdqZnPs5WiP2kWTWG2IeXylGPLuylJNt8LV3bDmZbI= Subject key identifier: 66:72:60:FB:B9:FD:08:07:DB:D6:DB:6D:DF:4B:29:DA:DD:FD:D5:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D4818F329A6DB02E8200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/341b3da5-d53e-34c4-a3d6-662303c3a5d7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400318 IP address blocks: 2001:470:2fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d4:81:8f:32:9a:6d:b0:2e:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d9aa9862-e2e0-41e2-87c2-4c105a1124de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:4d:c5:25:0f:c2:fe:39:97:8f:99:74:a9: f7:dc:28:33:2a:d2:30:41:ea:51:26:7f:86:7a:0a: 16:14:7b:56:fc:9f:df:43:a6:81:18:c1:63:21:02: 92:30:26:d1:ea:f0:dc:15:6e:86:4d:2d:f3:86:d1: 1c:b0:2c:d8:ab:0a:63:5a:8e:ab:04:01:cd:36:2d: 03:70:e7:4b:b9:d9:0c:16:d7:a4:09:5e:16:2a:51: 00:21:51:e7:80:78:9e:b0:0c:89:19:4c:cd:32:81: 74:50:c4:f0:3c:2c:da:b7:1e:cb:6b:2b:cd:96:4e: 40:93:a5:49:ad:ab:61:1a:46:e6:ba:54:69:66:f8: 2b:e6:ec:e9:fe:34:f2:cd:90:f8:a3:bb:b2:be:61: b9:61:6b:2c:ae:69:68:a8:05:19:a4:46:84:9f:7a: 45:3e:34:d6:e2:70:a4:21:95:01:38:87:70:ab:2d: 8e:78:86:1a:d1:a9:61:4c:99:13:13:fa:76:4f:92: f9:71:fb:19:7a:14:af:9d:65:ac:e1:c5:a0:60:69: 40:11:c8:e1:80:79:9a:32:ef:ac:8d:92:e3:54:59: 1b:74:84:31:20:d7:78:76:bc:0f:a7:21:d6:51:86: 48:fa:dc:48:6b:0f:1c:5f:e3:a7:85:e1:be:e2:b2: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:60:FB:B9:FD:08:07:DB:D6:DB:6D:DF:4B:29:DA:DD:FD:D5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/341b3da5-d53e-34c4-a3d6-662303c3a5d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cf:eb:8c:e7:03:02:d1:f8:a8:26:a7:80:7e:a5:fa:5c:08: f5:e8:a3:07:fe:c6:eb:0d:a3:9f:0f:d4:54:b3:9f:3c:0b:db: 3e:49:43:44:6f:8d:46:c9:74:7b:49:ad:f8:55:4f:52:8e:b2: 21:83:60:59:d9:01:ef:e6:c8:1e:f7:6f:08:96:22:71:17:f0: 44:51:8b:02:4d:2b:be:55:e6:eb:e2:e8:31:95:20:b4:97:ff: 12:2d:4e:ab:a3:0e:e3:fa:8f:b5:70:81:b3:d9:6f:dc:3a:8a: ce:43:12:aa:cc:3d:59:42:eb:7d:8e:a7:5b:27:7e:c0:18:59: b9:07:fb:22:29:bf:b5:2d:c6:1b:fc:26:72:6f:ff:f3:86:ab: d8:0e:d9:97:8e:58:84:9c:ce:49:6f:bf:39:1d:eb:90:77:ea: 6c:7b:21:6b:b0:2e:fa:ef:53:89:62:b8:1e:9c:75:4b:71:4c: 5b:50:b8:15:1a:e0:88:82:04:32:89:bf:0e:74:33:15:3b:d0: 31:b0:a6:45:1b:31:bd:55:39:29:58:e9:cb:e8:80:f8:70:6d: 56:bb:4c:b0:0f:7a:a6:48:fe:0f:f0:43:57:6a:0e:4c:35:b2: a8:7d:79:74:6f:6a:4e:2d:16:12:b9:a0:f9:38:7a:4a:4c:8a: 08:89:ee:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19SBjzKabbAuggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDlhYTk4NjItZTJlMC00MWUyLTg3YzItNGMxMDVhMTEyNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5NxSUPwv45l4+ZdKn33CgzKtIwQepRJn+G egoWFHtW/J/fQ6aBGMFjIQKSMCbR6vDcFW6GTS3zhtEcsCzYqwpjWo6rBAHNNi0D cOdLudkMFtekCV4WKlEAIVHngHiesAyJGUzNMoF0UMTwPCzatx7LayvNlk5Ak6VJ rathGkbmulRpZvgr5uzp/jTyzZD4o7uyvmG5YWssrmloqAUZpEaEn3pFPjTW4nCk IZUBOIdwqy2OeIYa0alhTJkTE/p2T5L5cfsZehSvnWWs4cWgYGlAEcjhgHmaMu+s jZLjVFkbdIQxINd4drwPpyHWUYZI+txIaw8cX+OnheG+4rJWrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZyYPu5/QgH29bbbd9LKdrd/dVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzQxYjNkYTUtZDUzZS0z NGM0LWEzZDYtNjYyMzAzYzNhNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrP64znAwLR+Kgmp4B+pfpcCPXoowf+xusNo58P1FSznzwL2z5J Q0RvjUbJdHtJrfhVT1KOsiGDYFnZAe/myB73bwiWInEX8ERRiwJNK75V5uvi6DGV ILSX/xItTqujDuP6j7VwgbPZb9w6is5DEqrMPVlC632Op1snfsAYWbkH+yIpv7Ut xhv8JnJv//OGq9gO2ZeOWISczklvvzkd65B36mx7IWuwLvrvU4liuB6cdUtxTFtQ uBUa4IiCBDKJvw50MxU70DGwpkUbMb1VOSlY6cvogPhwbVa7TLAPeqZI/g/wQ1dq Dkw1sqh9eXRvak4tFhK5oPk4ekpMigiJ7i0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:46 2025 by rpki-client