$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa File: 3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa (raw, json) Hash identifier: Y9aOrsmWlH/e5tqkXzgz8G6yvLxa/kJ9yY/rGmF+4vg= Subject key identifier: 41:AE:B7:54:5F:9F:55:6F:D6:52:A9:D7:C1:67:CC:B7:89:65:2E:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C9E96F9E70A7C0C75E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 10352 IP address blocks: 2001:470:1e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c9:e9:6f:9e:70:a7:c0:c7:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fcca1945-1d79-40bd-9b8d-9c9da403ad77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:1a:b8:62:80:c6:14:91:f0:e1:aa:16:e6: 8d:82:d6:bb:6e:7f:9d:24:74:a7:0e:27:27:af:2e: f8:c0:93:48:de:23:40:52:85:89:95:44:b9:65:67: 87:41:de:5f:08:00:0c:c2:f1:0e:81:f1:ad:ff:05: 02:cc:b9:85:92:b8:65:3c:35:3a:f1:87:f9:c0:95: 07:e5:5f:fd:0b:80:ac:3e:76:ee:8c:d3:f7:f4:96: 30:94:e8:44:67:da:3e:d0:56:86:ef:77:a1:90:17: 6a:8f:5d:d1:98:c2:c5:9d:66:2b:09:84:de:a3:4e: 85:8b:eb:ec:0c:2d:b8:f8:13:a0:d4:1f:b6:07:0c: 4e:2d:25:c5:3f:fa:28:b9:c9:ac:c2:70:a8:b9:73: 1d:cb:7b:04:21:dc:a0:af:73:80:10:ed:c9:61:8e: 90:6b:5d:f0:80:ba:97:dd:78:c9:c3:4d:67:09:9e: fb:71:72:42:3c:b1:74:0d:55:16:1a:8e:6d:43:e9: d1:b4:81:f4:1e:36:ec:96:c3:43:0b:a5:8d:76:f0: 1e:d3:ee:10:cf:fc:67:c8:9c:7a:24:d3:78:73:e9: bb:a9:23:34:9f:0b:ef:2c:e2:2e:e0:e8:b8:e5:cd: 46:f2:d9:81:81:e8:90:1c:de:c9:46:29:e2:32:95: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:B7:54:5F:9F:55:6F:D6:52:A9:D7:C1:67:CC:B7:89:65:2E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed4523c-db19-3b30-97d3-4a19acdbc86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f1:77:62:54:0e:eb:e8:4b:8e:f9:47:b2:e9:dd:43:8b:2d: 65:92:51:aa:61:94:eb:d4:91:a1:d3:30:f9:ba:91:63:de:e2: e7:a3:78:ae:33:7e:1e:98:41:a9:d8:e2:ee:95:a4:17:2a:81: c2:fc:72:17:4e:46:85:90:02:df:e5:da:49:07:91:ff:1d:76: 87:0e:2e:eb:7a:82:9b:6a:7f:53:ca:4c:ff:c0:9a:8d:ec:7f: c9:83:52:33:e5:ed:3d:c5:9b:81:f8:f5:82:bf:2b:d6:cf:e7: ae:9c:60:76:8a:c2:a0:52:1f:7f:d6:7e:c5:df:b9:00:0a:5f: a6:03:13:3c:c3:36:87:7e:9a:44:d1:b3:7f:8d:74:a0:7f:98: 0d:20:fd:e3:06:3d:00:b6:47:a4:b1:a8:43:6e:53:5e:2a:e7: 3e:76:b6:3c:5a:5f:d3:34:6b:91:77:02:6b:53:19:14:46:25: 3a:a2:1c:7a:a1:4c:d5:ae:30:e4:be:1b:44:21:63:7c:45:2a: 11:07:19:84:c7:c7:bc:dc:c0:03:de:3f:fd:4a:4b:2d:07:81: cd:7b:3b:80:06:af:4e:35:6b:39:cf:a8:c9:da:5d:4e:5f:ef: 15:0e:71:7b:7e:45:02:9f:c8:fe:d0:89:1a:c4:ba:d7:5a:66: f1:f5:4a:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18npb55wp8DHXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmNjYTE5NDUtMWQ3OS00MGJkLTliOGQtOWM5ZGE0MDNhZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaUauGKAxhSR8OGqFuaNgta7bn+dJHSnDicn ry74wJNI3iNAUoWJlUS5ZWeHQd5fCAAMwvEOgfGt/wUCzLmFkrhlPDU68Yf5wJUH 5V/9C4CsPnbujNP39JYwlOhEZ9o+0FaG73ehkBdqj13RmMLFnWYrCYTeo06Fi+vs DC24+BOg1B+2BwxOLSXFP/ooucmswnCouXMdy3sEIdygr3OAEO3JYY6Qa13wgLqX 3XjJw01nCZ77cXJCPLF0DVUWGo5tQ+nRtIH0HjbslsNDC6WNdvAe0+4Qz/xnyJx6 JNN4c+m7qSM0nwvvLOIu4Oi45c1G8tmBgeiQHN7JRiniMpVNvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGut1Rfn1Vv1lKp18FnzLeJZS4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VkNDUyM2MtZGIxOS0z YjMwLTk3ZDMtNGExOWFjZGJjODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/xd2JUDuvoS475R7Lp3UOLLWWSUaphlOvUkaHTMPm6kWPe4uej eK4zfh6YQanY4u6VpBcqgcL8chdORoWQAt/l2kkHkf8ddocOLut6gptqf1PKTP/A mo3sf8mDUjPl7T3Fm4H49YK/K9bP566cYHaKwqBSH3/WfsXfuQAKX6YDEzzDNod+ mkTRs3+NdKB/mA0g/eMGPQC2R6SxqENuU14q5z52tjxaX9M0a5F3AmtTGRRGJTqi HHqhTNWuMOS+G0QhY3xFKhEHGYTHx7zcwAPeP/1KSy0Hgc17O4AGr041aznPqMna XU5f7xUOcXt+RQKfyP7QiRrEutdaZvH1Sgo= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:21 2025 by rpki-client