$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa File: 43228dc2-fee6-3213-85b8-367652bd3ae7.roa (raw, json) Hash identifier: b/C4JjmvOGbwF4rh6n9MA3B+c/xp5W2CEPFbWyZ2opI= Subject key identifier: D9:37:D8:2B:FC:60:A2:38:BC:95:92:D8:17:3C:62:81:53:F9:E9:DF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C461F853A312B7DBAF60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 217 IP address blocks: 2001:470:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c4:61:f8:53:a3:12:b7:db:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=efa49e7c-243d-45da-aa21-61ca188d7a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:18:a5:a6:e0:a3:74:2f:bb:7e:25:f2:cb: 30:b8:e4:76:95:21:96:b6:32:19:94:e7:a7:5e:9b: a4:03:d4:05:f5:de:33:0a:d2:73:0f:db:e5:2d:41: 8d:d4:62:67:c9:4c:0e:74:4e:5e:a8:8d:e4:13:e6: 03:da:71:12:7e:80:39:df:ea:74:60:ae:2a:04:19: ae:73:e7:47:74:ba:6a:1d:fb:f5:6d:f4:d6:75:ba: 54:51:c7:53:40:eb:9b:5f:5b:13:04:f1:3f:8a:02: 0c:a9:5f:37:8b:2d:5d:7f:92:0f:4a:fd:33:9b:7e: cd:b9:0b:dd:04:29:64:ec:ef:70:ab:ed:d7:6f:46: cb:e7:9c:c5:e2:44:d5:58:26:4e:cf:a9:eb:bc:c0: f7:14:92:b4:64:36:e0:cb:b4:c4:5c:c1:d4:15:e6: 5f:e7:45:a6:6c:ff:22:e0:ab:72:ef:5e:20:8d:6a: b6:86:e2:62:19:a6:9b:dd:8f:e2:05:1e:fa:ab:8f: 53:22:00:79:3d:c7:cb:bf:ab:1c:af:72:dc:22:33: 79:c2:20:56:94:e2:91:e6:dc:11:0e:01:7b:33:af: a4:25:28:77:75:e6:40:66:eb:9e:6b:00:aa:33:e8: 8f:9e:64:0b:5a:bd:42:6f:bc:03:4a:b3:56:fe:12: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:D8:2B:FC:60:A2:38:BC:95:92:D8:17:3C:62:81:53:F9:E9:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8d:1a:c8:ee:5c:f8:34:17:6e:98:11:71:97:f2:2a:b2:19: 7c:8d:8c:38:9e:86:aa:ad:c4:16:5a:81:f8:a2:11:d9:b9:a5: 11:93:3c:e5:8a:b9:0c:29:ef:f9:00:3b:c7:1e:21:fd:8c:c9: ac:10:a1:98:aa:20:f2:e9:e6:7e:eb:09:4a:17:5d:c6:e4:c3: e6:87:d5:ab:09:e1:d2:32:41:e2:f4:5e:2b:f8:da:6c:db:82: 34:b7:86:e4:3f:c5:0b:11:25:ac:22:8e:8b:14:1b:c7:16:27: dc:bd:6f:34:ed:e2:de:29:0e:0a:4e:63:16:c0:58:b6:0e:fc: f6:c4:7b:2b:26:d0:b3:96:1f:89:64:12:c9:28:8d:a7:a0:d6: d1:b1:dd:2f:51:a4:13:a1:8b:e1:d0:03:87:0d:83:d2:0e:20: f9:ca:88:5a:19:11:8d:48:0d:30:d0:54:ee:f3:0e:50:c0:8c: db:ac:82:cb:d5:03:2b:47:39:1a:e8:e3:77:35:a9:1d:bd:83: c4:66:0e:3c:f7:bc:ed:9e:15:de:37:1a:01:04:07:4e:03:86: 13:77:b5:1c:57:57:0a:1d:8e:15:b9:4d:2c:2d:7f:36:52:e1: f8:1d:1e:42:d5:bb:89:5c:27:7e:e5:36:60:cf:bc:f9:b0:63: 26:22:02:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18Rh+FOjErfbr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWZhNDllN2MtMjQzZC00NWRhLWFhMjEtNjFjYTE4OGQ3YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUUYpabgo3Qvu34l8sswuOR2lSGWtjIZlOen XpukA9QF9d4zCtJzD9vlLUGN1GJnyUwOdE5eqI3kE+YD2nESfoA53+p0YK4qBBmu c+dHdLpqHfv1bfTWdbpUUcdTQOubX1sTBPE/igIMqV83iy1df5IPSv0zm37NuQvd BClk7O9wq+3Xb0bL55zF4kTVWCZOz6nrvMD3FJK0ZDbgy7TEXMHUFeZf50WmbP8i 4Kty714gjWq2huJiGaab3Y/iBR76q49TIgB5PcfLv6scr3LcIjN5wiBWlOKR5twR DgF7M6+kJSh3deZAZuueawCqM+iPnmQLWr1Cb7wDSrNW/hKOiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNk32Cv8YKI4vJWS2Bc8YoFT+enfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMyMjhkYzItZmVlNi0z MjEzLTg1YjgtMzY3NjUyYmQzYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJuNGsjuXPg0F26YEXGX8iqyGXyNjDiehqqtxBZagfiiEdm5pRGT POWKuQwp7/kAO8ceIf2MyawQoZiqIPLp5n7rCUoXXcbkw+aH1asJ4dIyQeL0Xiv4 2mzbgjS3huQ/xQsRJawijosUG8cWJ9y9bzTt4t4pDgpOYxbAWLYO/PbEeysm0LOW H4lkEskojaeg1tGx3S9RpBOhi+HQA4cNg9IOIPnKiFoZEY1IDTDQVO7zDlDAjNus gsvVAytHORro43c1qR29g8RmDjz3vO2eFd43GgEEB04DhhN3tRxXVwodjhW5TSwt fzZS4fgdHkLVu4lcJ37lNmDPvPmwYyYiAqQ= -----END CERTIFICATE-----Generated at Sun Oct 26 23:52:52 2025 by rpki-client