$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa File: 3ed8c690-7bf1-3d35-a609-35654298ea78.roa (raw, json) Hash identifier: X6qQaJZTt96/K7WWgC/KIBF5hTnMqaMlVCHyRnK0xf8= Subject key identifier: ED:91:7F:82:9F:7B:EC:F6:88:DC:B6:C9:FA:90:EE:EF:59:ED:2E:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D180D9D45DE439DF1800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 62206 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d1:80:d9:d4:5d:e4:39:df:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ff1d189c-8a9e-4ae0-bc74-ae85f57ad5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:ff:a7:6a:80:a8:62:a7:87:7e:cb:50:51: 3b:a0:d1:83:ec:53:7a:fc:2f:c6:38:b9:01:cd:6d: a0:bc:0f:9e:03:32:a5:48:8d:c3:83:7d:6e:70:aa: 6c:70:d9:45:f7:c7:b1:89:71:d7:b3:2b:23:ef:16: 35:9f:d4:05:50:b2:26:11:1e:c6:06:c9:5e:dd:e9: d3:a3:37:7d:e1:88:50:79:12:6a:07:19:94:b5:f3: 86:c9:73:a0:7d:39:17:73:bf:b5:fb:cb:5f:93:b5: 81:54:80:00:a7:05:80:58:59:82:01:64:43:8f:93: 89:f7:29:29:d2:62:cb:21:4a:4c:e4:da:d1:be:55: c0:36:e7:79:1a:8a:96:22:bc:bf:e0:42:71:d4:d0: eb:11:bb:d3:7b:9c:77:18:a4:00:24:3a:92:bf:ca: fa:96:12:86:dc:6d:a6:de:21:4b:8b:54:cb:28:ae: 0b:3f:5f:d4:59:d1:bd:18:01:05:7d:a5:8e:af:9e: 9a:82:a4:b3:38:fd:86:39:df:6e:bf:f4:c1:38:2a: c3:a5:e4:db:b6:d6:ad:7b:0d:1c:f6:75:ea:37:52: e4:f1:66:f7:b3:c0:59:c4:be:b1:2a:ce:22:2c:0c: fb:bb:23:ca:e4:8d:ee:92:8d:08:ae:fc:33:b5:bd: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:91:7F:82:9F:7B:EC:F6:88:DC:B6:C9:FA:90:EE:EF:59:ED:2E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed8c690-7bf1-3d35-a609-35654298ea78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fe:ae:9c:58:10:20:9a:80:25:29:6e:a0:0c:ba:b1:1b:15: f5:c8:be:56:f6:3e:1e:c8:bc:f9:95:83:d6:98:a9:66:3f:de: 09:d4:68:5b:dc:bf:44:8e:23:8a:2a:cd:8d:c8:36:8a:33:5f: 97:79:65:9f:ef:a5:52:84:dc:5c:b8:85:89:33:c0:1a:47:19: 75:c5:dc:5c:39:0d:dd:2b:38:a0:c7:c0:d4:de:0b:0d:46:ae: 9c:b9:69:42:d5:8a:b8:3a:01:b3:a4:36:cd:1d:c4:b7:be:1b: 7a:02:17:ff:a9:d5:3f:f8:8d:5b:9f:85:fb:d1:24:d5:7a:ab: 34:62:64:0c:b1:d5:c3:be:64:5e:b7:00:84:7d:57:24:69:c8: d9:2d:66:f7:a8:74:76:5d:8b:24:8f:dd:5a:3f:79:66:7a:d0: c4:28:b6:82:5a:fc:06:8b:27:9a:e0:0c:48:e6:fc:6b:4f:da: f8:06:09:6c:89:96:d4:d1:59:89:0e:23:1c:5b:04:6d:b0:93: 1a:79:ec:c3:5b:2e:e1:44:5e:15:85:e3:88:b4:88:4b:d0:46: cf:0d:88:fd:93:1a:79:d4:3a:43:2a:0a:d1:c0:83:c9:d6:fa: 7f:ad:29:12:90:c7:9a:f0:7d:a2:7c:d0:cc:7e:de:d4:ed:a5: 0f:ca:ab:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19GA2dRd5DnfGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmYxZDE4OWMtOGE5ZS00YWUwLWJjNzQtYWU4NWY1N2FkNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaz/p2qAqGKnh37LUFE7oNGD7FN6/C/GOLkB zW2gvA+eAzKlSI3Dg31ucKpscNlF98exiXHXsysj7xY1n9QFULImER7GBsle3enT ozd94YhQeRJqBxmUtfOGyXOgfTkXc7+1+8tfk7WBVIAApwWAWFmCAWRDj5OJ9ykp 0mLLIUpM5NrRvlXANud5GoqWIry/4EJx1NDrEbvTe5x3GKQAJDqSv8r6lhKG3G2m 3iFLi1TLKK4LP1/UWdG9GAEFfaWOr56agqSzOP2GOd9uv/TBOCrDpeTbttatew0c 9nXqN1Lk8Wb3s8BZxL6xKs4iLAz7uyPK5I3uko0Irvwztb1AUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO2Rf4Kfe+z2iNy2yfqQ7u9Z7S6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VkOGM2OTAtN2JmMS0z ZDM1LWE2MDktMzU2NTQyOThlYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIT+rpxYECCagCUpbqAMurEbFfXIvlb2Ph7IvPmVg9aYqWY/3gnU aFvcv0SOI4oqzY3INoozX5d5ZZ/vpVKE3Fy4hYkzwBpHGXXF3Fw5Dd0rOKDHwNTe Cw1Grpy5aULVirg6AbOkNs0dxLe+G3oCF/+p1T/4jVufhfvRJNV6qzRiZAyx1cO+ ZF63AIR9VyRpyNktZveodHZdiySP3Vo/eWZ60MQotoJa/AaLJ5rgDEjm/GtP2vgG CWyJltTRWYkOIxxbBG2wkxp57MNbLuFEXhWF44i0iEvQRs8NiP2TGnnUOkMqCtHA g8nW+n+tKRKQx5rwfaJ80Mx+3tTtpQ/Kq0E= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:30 2025 by rpki-client