$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa File: 40c0a776-c145-3a93-b32c-e24909188dcc.roa (raw, json) Hash identifier: s2zyZno84DgRFL3bEnYlfUXIoAojMXcDeF+rSjoVvO4= Subject key identifier: 7A:65:A6:BF:55:B3:EF:68:E0:D7:74:AA:07:04:BA:6B:89:15:D3:AF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C42F0648A455BFCAA6C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22296 IP address blocks: 2001:470:8f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c4:2f:06:48:a4:55:bf:ca:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=20461c2d-1151-4be3-b8de-831df896a7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:58:7d:1f:99:8d:34:23:ae:62:e5:f4:b0: dc:10:99:7e:d0:39:be:4b:7c:af:f8:b0:62:63:8b: f9:70:8b:9d:19:9e:f2:43:2c:ac:7d:b2:80:29:63: df:46:16:49:7a:22:74:bb:3b:6b:6e:f6:aa:a5:fd: ab:bc:0b:d8:41:34:60:d4:14:b9:b8:62:5e:10:82: 7a:ce:c9:9c:d8:77:b8:34:a8:d2:9e:01:c4:7c:91: 26:e2:12:50:0a:5f:50:de:90:47:7f:27:eb:c9:2c: 36:f5:fa:04:fc:18:b4:c3:e9:72:44:77:7a:3b:6d: 09:72:c8:e7:93:b9:7d:21:74:69:eb:90:84:ee:b3: 24:79:13:1d:50:10:f0:9d:a3:bf:08:77:48:18:33: 5b:80:46:59:ac:bd:bd:35:06:b9:9c:38:77:b9:f7: fb:a7:b4:eb:4a:97:91:c2:73:c3:27:7d:c1:9f:f8: 2e:5e:fb:b9:74:45:0a:aa:1c:42:95:56:e7:07:47: 82:8c:28:f8:5b:5c:f8:5a:43:1d:62:58:ca:11:eb: d4:7e:32:e4:7d:08:78:82:92:53:40:f2:db:35:ee: ed:be:51:e7:45:74:d0:69:1a:47:a8:da:c6:a1:20: 78:89:77:17:26:24:c7:44:fa:d7:68:1b:a9:68:29: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:A6:BF:55:B3:EF:68:E0:D7:74:AA:07:04:BA:6B:89:15:D3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:32:43:9e:e9:f3:ab:ad:97:8e:f4:62:70:cb:f5:54:0d:b8: 66:c6:ca:4a:05:43:46:4f:75:02:29:de:d9:84:b1:8f:36:2b: 38:de:45:f9:39:b3:7a:b1:bd:39:d9:63:8a:15:2d:a9:50:5e: 24:b6:b2:40:b0:73:0a:54:f1:c6:db:cd:3f:b9:61:cc:9d:1e: 85:92:9f:c4:55:9a:e4:07:52:98:a4:e8:57:bd:5e:1e:8f:be: 76:1b:38:79:76:cc:4f:97:1c:a0:61:94:2f:7a:d9:47:8e:fd: 99:11:bc:27:91:ec:f5:2e:26:64:d5:0b:c1:c6:1a:e5:7c:32: 4c:75:ac:e8:6d:6a:ca:c8:a7:98:f3:ad:5f:07:e2:f8:b6:73: 73:27:f7:6d:8f:55:13:6d:da:ef:25:41:79:bd:99:ce:1f:5a: e4:db:c0:b8:0a:09:21:bf:f3:70:81:10:9a:04:d5:d2:31:3a: d6:bc:47:6c:7a:03:9c:aa:61:2e:bc:72:de:04:72:f4:87:38: ec:7d:c1:52:90:48:19:1c:bc:e6:9b:6c:2c:aa:a0:93:9f:68: 9a:23:68:54:b8:bf:40:70:5e:c3:fd:2e:4e:a1:0f:c1:a0:c3: 64:61:09:a2:7c:89:02:5d:82:01:00:b2:b5:86:55:b2:0c:1b: f4:b8:c2:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18QvBkikVb/KpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjA0NjFjMmQtMTE1MS00YmUzLWI4ZGUtODMxZGY4OTZhN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6RYfR+ZjTQjrmLl9LDcEJl+0Dm+S3yv+LBi Y4v5cIudGZ7yQyysfbKAKWPfRhZJeiJ0uztrbvaqpf2rvAvYQTRg1BS5uGJeEIJ6 zsmc2He4NKjSngHEfJEm4hJQCl9Q3pBHfyfrySw29foE/Bi0w+lyRHd6O20Jcsjn k7l9IXRp65CE7rMkeRMdUBDwnaO/CHdIGDNbgEZZrL29NQa5nDh3uff7p7TrSpeR wnPDJ33Bn/guXvu5dEUKqhxClVbnB0eCjCj4W1z4WkMdYljKEevUfjLkfQh4gpJT QPLbNe7tvlHnRXTQaRpHqNrGoSB4iXcXJiTHRPrXaBupaCmPxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHplpr9Vs+9o4Nd0qgcEumuJFdOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBjMGE3NzYtYzE0NS0z YTkzLWIzMmMtZTI0OTA5MTg4ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADcyQ57p86utl470YnDL9VQNuGbGykoFQ0ZPdQIp3tmEsY82Kzje Rfk5s3qxvTnZY4oVLalQXiS2skCwcwpU8cbbzT+5YcydHoWSn8RVmuQHUpik6Fe9 Xh6PvnYbOHl2zE+XHKBhlC962UeO/ZkRvCeR7PUuJmTVC8HGGuV8Mkx1rOhtasrI p5jzrV8H4vi2c3Mn922PVRNt2u8lQXm9mc4fWuTbwLgKCSG/83CBEJoE1dIxOta8 R2x6A5yqYS68ct4EcvSHOOx9wVKQSBkcvOabbCyqoJOfaJojaFS4v0BwXsP9Lk6h D8Ggw2RhCaJ8iQJdggEAsrWGVbIMG/S4wiQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:24 2025 by rpki-client