$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f945356-0dff-3179-91a9-90d854754d70.roa File: 3f945356-0dff-3179-91a9-90d854754d70.roa (raw, json) Hash identifier: Gyy+BEKjkUyc6kwFkCGgplYnmHAWbj2C4maIkqPoaiE= Subject key identifier: 77:79:4A:C7:13:02:25:8E:7A:07:70:6F:19:4D:63:21:41:A0:67:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7ED51E363F0A7E9BD4EC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f945356-0dff-3179-91a9-90d854754d70.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54133 IP address blocks: 2001:470:1ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ed:51:e3:63:f0:a7:e9:bd:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=14d3618c-e91b-42cd-a96b-b614e4742ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:35:3a:49:df:1d:7c:e9:04:17:47:ff:65: 91:cc:ad:d0:2a:6b:da:20:3b:fa:4d:4f:7a:6a:2f: b3:f2:ab:fc:71:ba:b3:7d:94:c7:9a:09:f0:7a:c8: 7b:0c:03:8d:2e:34:f3:54:1d:bb:14:67:4b:e9:cc: 5a:e0:3c:19:be:80:38:6e:88:db:da:6b:5e:d1:8f: fe:75:9f:f9:08:08:26:4b:03:ef:f8:81:18:c6:cd: a4:c9:cc:6e:27:a5:01:13:bb:ed:58:35:d3:8a:c2: 79:51:96:19:b2:7d:65:5c:cf:62:32:4a:6f:83:60: 9b:94:95:c8:3b:b8:d0:07:1b:5c:52:af:89:13:93: ae:99:a2:ab:2f:34:b0:b4:f6:60:69:fd:db:ff:0f: d1:1e:d3:6b:b8:30:90:49:18:41:b6:03:2d:ec:31: 32:f4:1b:35:bf:39:b0:b4:9c:96:f0:65:b2:72:64: 4d:b9:4c:91:b8:50:08:76:21:b6:df:99:f1:d7:89: 19:c7:90:8b:4a:64:6a:74:36:91:1b:7a:de:fe:32: ba:71:e6:53:b7:56:18:51:6a:fe:11:f0:86:68:26: 28:60:ae:95:a3:b7:82:27:a0:dd:06:05:3e:f6:e2: 5d:1c:66:c5:8b:65:cb:ea:6b:55:78:1d:b6:80:14: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:4A:C7:13:02:25:8E:7A:07:70:6F:19:4D:63:21:41:A0:67:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f945356-0dff-3179-91a9-90d854754d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:d6:42:d8:9d:23:be:af:28:76:06:92:6f:84:ba:60:2a:69: 95:6d:6e:79:64:8f:3b:9c:ff:40:ae:7e:93:9b:a4:79:c0:07: 9d:a0:ee:bb:b6:4c:24:47:ce:44:d6:30:99:4a:5f:e6:22:0a: d4:40:93:e5:9c:1a:84:90:46:68:82:f1:44:c3:4d:95:eb:ec: dc:43:15:e3:8d:17:fa:74:b3:e5:49:9f:a2:fd:ac:0b:24:81: f7:a6:a8:67:5e:38:63:3f:28:f3:4c:91:7c:94:62:c6:98:c4: 3f:2e:0a:6b:e7:2c:c2:c9:55:ca:5c:98:93:91:d0:3b:bd:df: b8:ce:1b:44:a7:e6:81:88:4c:f0:89:7e:62:11:cc:fc:95:78: a5:37:af:c1:9e:58:b0:d3:42:ea:e5:c0:77:f1:cb:2b:4f:4c: e7:6c:1a:1f:91:d6:96:b9:a3:a4:5e:f8:62:9f:77:0b:e1:14: 4c:a3:21:5d:d4:14:7a:ee:34:9b:b4:2e:ac:8e:55:12:c8:f1: 2a:22:79:0b:a4:a2:db:6b:85:40:35:4d:19:23:e7:70:51:72: 72:08:53:1c:6c:84:ac:79:bb:6c:32:12:82:0e:b5:e8:51:21: 91:e4:72:f1:ff:af:51:84:37:fa:cc:3e:87:6b:5f:f7:92:ea: cf:b1:ee:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+1R42Pwp+m9TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTRkMzYxOGMtZTkxYi00MmNkLWE5NmItYjYxNGU0NzQyY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslo1OknfHXzpBBdH/2WRzK3QKmvaIDv6TU96 ai+z8qv8cbqzfZTHmgnwesh7DAONLjTzVB27FGdL6cxa4DwZvoA4bojb2mte0Y/+ dZ/5CAgmSwPv+IEYxs2kycxuJ6UBE7vtWDXTisJ5UZYZsn1lXM9iMkpvg2CblJXI O7jQBxtcUq+JE5OumaKrLzSwtPZgaf3b/w/RHtNruDCQSRhBtgMt7DEy9Bs1vzmw tJyW8GWycmRNuUyRuFAIdiG235nx14kZx5CLSmRqdDaRG3re/jK6ceZTt1YYUWr+ EfCGaCYoYK6Vo7eCJ6DdBgU+9uJdHGbFi2XL6mtVeB22gBR77QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHd5SscTAiWOegdwbxlNYyFBoGfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2Y5NDUzNTYtMGRmZi0z MTc5LTkxYTktOTBkODU0NzU0ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMXWQtidI76vKHYGkm+EumAqaZVtbnlkjzuc/0CufpObpHnAB52g 7ru2TCRHzkTWMJlKX+YiCtRAk+WcGoSQRmiC8UTDTZXr7NxDFeONF/p0s+VJn6L9 rAskgfemqGdeOGM/KPNMkXyUYsaYxD8uCmvnLMLJVcpcmJOR0Du937jOG0Sn5oGI TPCJfmIRzPyVeKU3r8GeWLDTQurlwHfxyytPTOdsGh+R1pa5o6Re+GKfdwvhFEyj IV3UFHruNJu0LqyOVRLI8SoieQukottrhUA1TRkj53BRcnIIUxxshKx5u2wyEoIO tehRIZHkcvH/r1GEN/rMPodrX/eS6s+x7kU= -----END CERTIFICATE-----Generated at Thu Oct 30 03:18:59 2025 by rpki-client