$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa File: 3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa (raw, json) Hash identifier: qz4aF1ECxaVop9RqdobMsFjbvyqALkpLCNd25rmHC6I= Subject key identifier: D1:7F:5D:C9:10:6A:B4:E5:40:93:39:A1:E6:22:C2:0D:91:86:04:BA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C9652569A29700E51B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 41529 IP address blocks: 2001:470:1d4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c9:65:25:69:a2:97:00:e5:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e468e0bf-1330-437b-8a48-a93ff2d7f8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:f9:a8:b5:63:60:46:a5:a3:56:fe:ef:95: 9b:21:98:3e:ee:9d:69:fb:f1:4a:28:57:aa:02:f6: 92:7b:8b:93:b0:67:d1:85:78:6f:a7:9d:7a:48:9e: 77:c9:6f:37:85:88:ff:bc:62:a1:5e:ab:52:c7:40: ab:b4:12:56:fb:2f:b6:6d:a4:8b:21:d3:e7:72:ba: f7:59:b7:fb:5d:95:8d:25:26:f7:76:5a:df:a4:88: 9e:31:1c:6f:73:49:7e:98:0d:55:82:84:a1:a5:1b: 04:e0:31:e3:6e:ac:f6:1b:3e:5b:94:14:0b:96:5a: 31:3f:cc:8c:f6:b4:04:a8:e4:12:9e:d5:88:21:33: a0:e5:c6:1f:57:9d:3f:5a:65:8c:c1:9b:7d:b4:56: 9c:59:11:74:6a:0d:3f:5f:2b:a5:09:3f:8d:53:49: 60:f2:a5:ee:cf:8a:11:de:b3:0a:0e:56:42:dd:dd: 3d:e9:59:d4:87:89:5d:cd:90:ef:88:1c:f6:79:64: f2:86:0e:7a:4a:b2:3d:77:67:0f:46:1d:24:31:6d: 9c:f8:da:2c:bf:5e:85:12:b3:6d:16:73:3d:15:bc: 03:b5:bb:75:3d:3b:93:17:e5:21:67:bc:ec:fe:8d: f9:63:ff:85:15:80:0e:e7:78:ac:96:39:fd:9d:d6: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7F:5D:C9:10:6A:B4:E5:40:93:39:A1:E6:22:C2:0D:91:86:04:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5a:77:4d:47:c4:31:14:77:9f:27:c5:6d:b2:f5:5c:88:6c: 54:85:d1:bb:bb:61:61:55:83:91:79:bc:11:d2:b8:e4:4b:54: a4:68:b6:d6:2c:e5:67:5a:d8:80:7f:ef:fa:6e:e1:1a:4d:09: 7d:b1:95:e5:ae:f2:61:82:dd:3c:8e:95:c6:5f:91:2b:ff:ff: a7:68:2d:78:4d:f6:62:77:d9:bf:39:21:6a:48:6c:c4:46:20: d5:82:d1:6a:27:c8:de:f1:c4:45:52:c1:33:b4:e4:06:51:a5: e7:e2:d4:ed:89:84:26:7d:35:35:19:38:44:8f:ba:c0:61:5a: 16:44:2a:92:03:55:d7:b0:9a:e1:66:8a:fc:17:4e:2f:27:e3: f7:42:ef:c8:19:d4:3d:15:2b:b0:e0:9e:d5:1c:6c:70:e9:5e: c7:5b:02:d8:7a:52:20:d6:5a:70:9d:1c:5a:f9:8e:de:df:5b: ee:07:c1:21:35:85:cb:0b:20:75:1c:4d:83:b7:96:1f:ce:18: 35:94:d2:7d:bd:bf:d8:7e:9a:b7:88:05:25:a2:3a:02:8d:8e: ce:a8:83:c2:2d:e3:75:a7:ef:7e:f2:6c:b2:dc:40:a7:c9:a3: 8e:cc:8c:a2:d2:4f:ee:93:e0:43:4b:57:ac:5d:4f:2b:8b:22: e3:7e:b4:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18llJWmilwDlG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTQ2OGUwYmYtMTMzMC00MzdiLThhNDgtYTkzZmYyZDdmOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQz5qLVjYEalo1b+75WbIZg+7p1p+/FKKFeq AvaSe4uTsGfRhXhvp516SJ53yW83hYj/vGKhXqtSx0CrtBJW+y+2baSLIdPncrr3 Wbf7XZWNJSb3dlrfpIieMRxvc0l+mA1VgoShpRsE4DHjbqz2Gz5blBQLlloxP8yM 9rQEqOQSntWIITOg5cYfV50/WmWMwZt9tFacWRF0ag0/XyulCT+NU0lg8qXuz4oR 3rMKDlZC3d096VnUh4ldzZDviBz2eWTyhg56SrI9d2cPRh0kMW2c+Nosv16FErNt FnM9FbwDtbt1PTuTF+UhZ7zs/o35Y/+FFYAO53isljn9ndaZ/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNF/XckQarTlQJM5oeYiwg2RhgS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NlZjNiODUtMWJmMC0z MWZhLTgxZTctNzZkN2EwNTNjNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJFad01HxDEUd58nxW2y9VyIbFSF0bu7YWFVg5F5vBHSuORLVKRo ttYs5Wda2IB/7/pu4RpNCX2xleWu8mGC3TyOlcZfkSv//6doLXhN9mJ32b85IWpI bMRGINWC0WonyN7xxEVSwTO05AZRpefi1O2JhCZ9NTUZOESPusBhWhZEKpIDVdew muFmivwXTi8n4/dC78gZ1D0VK7DgntUcbHDpXsdbAth6UiDWWnCdHFr5jt7fW+4H wSE1hcsLIHUcTYO3lh/OGDWU0n29v9h+mreIBSWiOgKNjs6og8It43Wn737ybLLc QKfJo47MjKLST+6T4ENLV6xdTyuLIuN+tGg= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:28 2025 by rpki-client