$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa File: 3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa (raw, json) Hash identifier: 1TarCvVHI1Yq3BjTZmEsabAdEYzlydHEqbcChtmKT3Y= Subject key identifier: F5:7E:55:5B:9A:66:9B:65:FD:A9:A0:CA:16:81:01:13:B6:D9:7E:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F24AC041921EF0B43F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 28773 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f2:4a:c0:41:92:1e:f0:b4:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2205a288-4316-4fb9-b293-afba37975b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:32:c7:61:28:e7:db:4b:39:dd:f6:7d:c8: 35:70:5e:f0:f7:46:8f:f2:5c:a8:dc:32:e8:d6:86: 85:ab:fe:23:e7:2f:71:70:54:25:c6:01:fc:cd:8b: 88:11:9a:b1:c7:3c:d7:13:58:74:59:b1:b3:1b:e5: 8d:12:10:e7:0f:65:f0:91:9d:27:ad:17:80:fc:55: af:cb:31:c8:bd:b3:87:4e:c9:59:e0:52:7a:7f:62: c5:a6:06:0c:0a:2e:b5:49:4b:26:2e:89:45:0e:13: 64:9b:21:bb:e4:65:8d:c3:18:e2:7a:1a:10:af:5d: 87:4a:48:15:73:0f:ca:8e:24:84:40:64:6c:91:a4: 60:f5:75:e1:d1:1c:a5:3e:92:73:99:4b:4a:b3:f7: c2:9c:fb:5d:0e:42:67:b7:c4:4f:be:35:ec:83:1b: 2f:ef:bf:b8:32:44:82:d4:af:21:71:63:1b:ba:36: c7:cf:b2:3f:97:8e:92:a3:31:01:bb:44:89:a8:79: d8:f4:6c:e5:5a:15:3c:ce:80:fc:e3:74:df:80:14: e0:8e:6f:db:f5:cb:10:46:30:df:3e:2f:0a:66:3e: be:a6:58:bc:f1:6b:5c:3a:0a:55:be:58:4d:fb:85: e7:76:b8:e8:3b:63:b8:e6:97:73:79:4d:f0:f3:66: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:55:5B:9A:66:9B:65:FD:A9:A0:CA:16:81:01:13:B6:D9:7E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:65:c1:87:f5:ed:94:fd:9e:67:d9:28:be:8b:1d:f5:4b:bb: b2:28:6a:fc:bc:4e:c9:e7:6b:2d:1c:29:b5:42:cb:e1:0a:06: 59:c2:b2:fb:aa:84:b5:c1:87:ca:d1:05:ce:1e:ac:84:1a:a1: f4:1f:ff:4e:a6:2f:51:49:95:8a:94:6d:fe:55:43:f9:f1:a5: 42:b0:65:9c:55:7e:80:01:99:cf:ee:b4:64:4a:cc:a3:3d:1e: 4c:98:32:4d:fb:bb:60:2e:df:3d:8e:49:7d:2e:26:34:94:18: 0a:f4:17:2a:21:20:ab:29:6c:28:85:9a:c7:3f:b3:cd:75:35: f1:02:14:38:aa:41:c7:df:eb:9b:3e:8a:f2:4e:ee:99:4d:5e: c3:45:02:cd:ea:76:69:4e:9d:e4:ad:3d:f4:5a:59:a1:98:9d: 81:b6:bd:26:58:71:a3:19:b5:ad:49:3e:fb:3f:6d:6d:9f:7f: 44:d6:98:a9:86:6a:ca:61:08:52:c9:89:af:82:00:df:50:4c: 95:f8:fb:00:c3:0f:93:22:01:08:c4:8d:31:e9:29:44:c1:9e: 42:e6:65:41:2f:fd:fa:0f:44:87:14:77:4b:8b:33:35:da:13: 78:50:f2:9e:8b:48:66:e2:17:af:eb:e3:e9:c6:99:bb:f8:0b: 82:55:a5:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/JKwEGSHvC0P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjIwNWEyODgtNDMxNi00ZmI5LWIyOTMtYWZiYTM3OTc1YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizoyx2Eo59tLOd32fcg1cF7w90aP8lyo3DLo 1oaFq/4j5y9xcFQlxgH8zYuIEZqxxzzXE1h0WbGzG+WNEhDnD2XwkZ0nrReA/FWv yzHIvbOHTslZ4FJ6f2LFpgYMCi61SUsmLolFDhNkmyG75GWNwxjiehoQr12HSkgV cw/KjiSEQGRskaRg9XXh0RylPpJzmUtKs/fCnPtdDkJnt8RPvjXsgxsv77+4MkSC 1K8hcWMbujbHz7I/l46SozEBu0SJqHnY9GzlWhU8zoD843TfgBTgjm/b9csQRjDf Pi8KZj6+pli88WtcOgpVvlhN+4XndrjoO2O45pdzeU3w82aYWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPV+VVuaZptl/amgyhaBARO22X7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2RhMzljZmItNjNjNC0z M2I5LWJkZWUtY2VmY2E5OWYxYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1lwYf17ZT9nmfZKL6LHfVLu7Ioavy8Tsnnay0cKbVCy+EKBlnC svuqhLXBh8rRBc4erIQaofQf/06mL1FJlYqUbf5VQ/nxpUKwZZxVfoABmc/utGRK zKM9HkyYMk37u2Au3z2OSX0uJjSUGAr0FyohIKspbCiFmsc/s811NfECFDiqQcff 65s+ivJO7plNXsNFAs3qdmlOneStPfRaWaGYnYG2vSZYcaMZta1JPvs/bW2ff0TW mKmGasphCFLJia+CAN9QTJX4+wDDD5MiAQjEjTHpKUTBnkLmZUEv/foPRIcUd0uL MzXaE3hQ8p6LSGbiF6/r4+nGmbv4C4JVpXo= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:11 2025 by rpki-client