$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa File: 3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa (raw, json) Hash identifier: 0S7KJRlzJ0iOPB3Y1bIPbsI6A2dxqvg029+QF5f3n00= Subject key identifier: 4B:77:44:9D:33:0C:9B:1B:CF:19:D1:89:D1:C4:FD:37:9E:C9:01:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D5D1A752E820A0659700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 23703 IP address blocks: 2001:470:314::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d5:d1:a7:52:e8:20:a0:65:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d1a0aba1-c750-40bc-9c34-75888aac1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:04:41:5a:bf:cf:8c:bb:60:53:49:a8:5a: 52:98:6c:d0:ac:f4:57:b9:22:cd:c9:a1:c3:21:74: eb:64:f5:c3:de:06:fb:1d:9a:cf:4b:02:ff:a4:a0: 58:02:46:38:49:86:8a:9f:cc:14:1a:16:a3:86:78: 6c:ee:fb:9d:90:de:e8:19:51:23:ed:fe:92:47:de: 79:a1:c4:a7:ec:71:04:c7:43:db:1a:17:6d:4f:86: 9c:19:8d:65:fc:ce:0f:3f:7f:76:55:b4:7a:3c:98: de:52:f6:82:0e:69:c0:e1:81:f0:02:67:52:9d:d7: 53:97:4b:18:ba:91:6a:b1:b6:82:4d:dd:eb:38:f7: a0:70:23:18:0e:a1:4a:6d:f2:c4:dc:07:2a:d0:67: 15:fc:cf:10:8f:e2:63:42:31:ce:78:a2:75:a5:dd: b1:8a:a4:b0:27:c3:88:b5:7d:f6:03:69:aa:86:a7: e6:84:dd:2c:89:29:c0:1d:7d:74:77:3b:fe:8a:0d: 8b:b6:89:93:0d:80:27:a1:a5:45:63:46:43:db:f1: a9:36:d4:d7:ca:d1:d2:f9:97:1d:ee:f8:cd:2b:64: b9:86:29:b7:f4:9e:26:4b:9f:8b:ed:65:37:23:0e: 03:64:fd:a8:06:e2:b0:0d:1c:1b:47:d3:30:7a:e4: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:44:9D:33:0C:9B:1B:CF:19:D1:89:D1:C4:FD:37:9E:C9:01:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:314::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b1:80:20:36:97:bd:24:76:3d:1a:41:c2:0b:c0:78:fa:f0: ff:ab:f4:d9:28:67:95:56:23:33:7a:95:ac:4f:e6:b1:aa:0f: f4:a0:c5:f8:35:34:27:0a:3c:a6:00:1f:42:b1:3a:f9:62:ef: 0e:c6:b2:6d:a0:be:c2:c2:07:a3:e6:f7:07:a7:97:ac:02:7f: c9:b5:16:38:2e:35:37:9e:d1:83:4e:7a:7c:1e:a5:36:8c:11: 9c:a3:a6:6a:97:1e:47:7f:b3:84:90:00:d6:28:07:f6:57:2a: ed:31:ba:b4:16:4b:1a:30:68:19:86:56:fe:88:a0:9c:e0:be: 22:d0:ea:68:c2:64:a9:f1:32:a5:9a:04:7c:f7:7e:da:c2:c2: 2c:29:da:0a:e8:bd:29:2f:43:3d:ad:c0:eb:e2:19:53:8e:88: 6e:18:1b:48:57:af:00:d2:75:5b:58:36:d9:92:a1:b7:13:01: fa:66:8f:76:2f:6a:84:79:20:da:f7:68:84:91:28:6d:56:56: af:52:59:95:8c:22:0f:5a:a6:53:3d:c0:0d:d0:f4:ba:46:8c: f4:9b:d0:13:36:1d:9b:01:f1:e5:1e:1d:66:78:49:f2:0e:b3: 08:5f:23:ba:86:40:82:6c:ee:1a:2d:d7:28:05:1e:87:21:53: 31:11:74:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19XRp1LoIKBllwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDFhMGFiYTEtYzc1MC00MGJjLTljMzQtNzU4ODhhYWMxZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN8EQVq/z4y7YFNJqFpSmGzQrPRXuSLNyaHD IXTrZPXD3gb7HZrPSwL/pKBYAkY4SYaKn8wUGhajhnhs7vudkN7oGVEj7f6SR955 ocSn7HEEx0PbGhdtT4acGY1l/M4PP392VbR6PJjeUvaCDmnA4YHwAmdSnddTl0sY upFqsbaCTd3rOPegcCMYDqFKbfLE3Acq0GcV/M8Qj+JjQjHOeKJ1pd2xiqSwJ8OI tX32A2mqhqfmhN0siSnAHX10dzv+ig2LtomTDYAnoaVFY0ZD2/GpNtTXytHS+Zcd 7vjNK2S5him39J4mS5+L7WU3Iw4DZP2oBuKwDRwbR9MweuQNywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEt3RJ0zDJsbzxnRidHE/TeeyQFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2U1YzMzODItZTJjYS0z MmFiLWExYTUtNGYwMTJhMDdhMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALCxgCA2l70kdj0aQcILwHj68P+r9NkoZ5VWIzN6laxP5rGqD/Sg xfg1NCcKPKYAH0KxOvli7w7Gsm2gvsLCB6Pm9wenl6wCf8m1FjguNTee0YNOenwe pTaMEZyjpmqXHkd/s4SQANYoB/ZXKu0xurQWSxowaBmGVv6IoJzgviLQ6mjCZKnx MqWaBHz3ftrCwiwp2grovSkvQz2twOviGVOOiG4YG0hXrwDSdVtYNtmSobcTAfpm j3YvaoR5INr3aISRKG1WVq9SWZWMIg9aplM9wA3Q9LpGjPSb0BM2HZsB8eUeHWZ4 SfIOswhfI7qGQIJs7hot1ygFHochUzERdKs= -----END CERTIFICATE-----Generated at Tue Nov 4 04:03:52 2025 by rpki-client