$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa File: 45277be7-95a4-3769-ae49-68fd90408ca3.roa (raw, json) Hash identifier: uiz7oMHuZw11tzKZibERZmBchEvstWjcMYspIx5ObNk= Subject key identifier: 08:65:E8:F3:1E:71:25:FC:81:B0:E9:00:5B:0D:DF:E8:BC:B4:5B:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C5C6B7CFA8FE2A482280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33763 IP address blocks: 2001:470:178::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c5:c6:b7:cf:a8:fe:2a:48:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=86011fdf-2f4c-41ce-8da7-12a0f5c3861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:c3:fc:19:79:45:3f:1c:66:3a:ec:38:8a: e4:6e:6b:45:20:b1:fd:a4:24:f3:32:67:61:bb:31: 55:10:20:68:fc:21:bb:0f:c0:ab:5f:98:1d:9d:20: b7:d6:4c:53:15:b3:78:2b:91:1a:ad:69:50:a8:c2: 03:7b:a7:a5:cb:c9:70:b3:82:28:73:17:89:3e:d4: 1a:36:71:d2:f3:66:06:ba:41:0d:30:46:71:8d:ba: ca:45:12:2c:6c:b5:97:07:79:57:2d:f3:19:93:bc: bb:e1:d9:5a:de:8f:3d:cb:bb:d4:66:52:e0:62:c7: d4:94:a0:c3:d4:df:5a:74:55:95:41:4f:d7:6a:80: 24:7f:40:02:2b:d6:31:84:43:33:22:19:48:56:e9: 5b:c5:b6:2f:47:e1:1e:cf:86:fd:f9:70:ab:cd:02: 1a:b1:fd:97:bb:e0:8c:6c:e0:55:86:d6:e3:6d:7f: 62:a0:59:dc:ef:08:f4:2a:8b:d7:9d:3c:f3:f6:c3: 07:91:fb:10:36:93:fb:a4:ef:4c:45:fd:64:a9:c5: 57:f3:8a:99:22:58:61:5a:37:cd:17:43:7c:41:77: 2d:0f:90:b0:47:8c:df:5c:9b:54:24:c7:94:4f:bf: 28:40:e3:ec:73:c5:33:9b:c4:5d:c4:91:65:dc:f3: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:65:E8:F3:1E:71:25:FC:81:B0:E9:00:5B:0D:DF:E8:BC:B4:5B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45277be7-95a4-3769-ae49-68fd90408ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:178::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:51:a6:24:0f:af:7f:6d:8e:af:7e:8c:f1:ee:8c:ff:06:4c: 53:1a:4b:44:fa:1f:73:5a:f8:6b:e5:1f:01:9c:b5:7f:67:98: 1c:9a:67:a9:09:60:b5:b9:d2:ac:5a:5f:2e:c8:0d:5c:ba:a5: fb:60:d3:79:ca:ef:97:b8:21:b1:c8:3d:31:6c:30:09:f8:46: c0:1f:33:fb:82:43:4d:0f:c3:8c:f6:a7:44:21:31:be:e4:e4: cc:64:78:44:9e:5d:68:ac:7f:27:1b:81:5c:10:4f:58:bf:62: 75:74:18:cb:b3:97:61:1f:ac:a7:de:e5:a8:69:b7:c9:10:a3: 77:39:3b:64:3c:42:9b:0c:bd:1f:d0:ee:79:b5:cc:bb:30:0b: 5f:b3:9d:40:26:66:82:dd:e7:e9:9c:b0:00:6f:31:7f:90:5b: a8:6b:67:17:09:f3:11:3d:b2:6b:a2:8d:4d:ea:7d:a9:83:42: e6:2a:38:8f:db:61:5a:6c:4e:2e:54:65:ea:a2:58:ac:d3:33: 64:63:f9:c8:8d:c1:44:5e:85:dc:28:e5:fc:19:f7:40:3c:07: 9e:67:bc:c8:30:d6:73:ff:b5:13:92:68:d6:2f:9f:55:7a:d2: 54:23:25:0d:31:81:2f:57:4a:13:f8:c9:b0:7f:38:52:6e:93: de:f4:5a:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18XGt8+o/ipIIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODYwMTFmZGYtMmY0Yy00MWNlLThkYTctMTJhMGY1YzM4NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjfD/Bl5RT8cZjrsOIrkbmtFILH9pCTzMmdh uzFVECBo/CG7D8CrX5gdnSC31kxTFbN4K5EarWlQqMIDe6ely8lws4IocxeJPtQa NnHS82YGukENMEZxjbrKRRIsbLWXB3lXLfMZk7y74dla3o89y7vUZlLgYsfUlKDD 1N9adFWVQU/XaoAkf0ACK9YxhEMzIhlIVulbxbYvR+Eez4b9+XCrzQIasf2Xu+CM bOBVhtbjbX9ioFnc7wj0KovXnTzz9sMHkfsQNpP7pO9MRf1kqcVX84qZIlhhWjfN F0N8QXctD5CwR4zfXJtUJMeUT78oQOPsc8Uzm8RdxJFl3POWnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhl6PMecSX8gbDpAFsN3+i8tFuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDUyNzdiZTctOTVhNC0z NzY5LWFlNDktNjhmZDkwNDA4Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNRpiQPr39tjq9+jPHujP8GTFMaS0T6H3Na+GvlHwGctX9nmBya Z6kJYLW50qxaXy7IDVy6pftg03nK75e4IbHIPTFsMAn4RsAfM/uCQ00Pw4z2p0Qh Mb7k5MxkeESeXWisfycbgVwQT1i/YnV0GMuzl2EfrKfe5ahpt8kQo3c5O2Q8QpsM vR/Q7nm1zLswC1+znUAmZoLd5+mcsABvMX+QW6hrZxcJ8xE9smuijU3qfamDQuYq OI/bYVpsTi5UZeqiWKzTM2Rj+ciNwURehdwo5fwZ90A8B55nvMgw1nP/tROSaNYv n1V60lQjJQ0xgS9XShP4ybB/OFJuk970WqU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:28 2025 by rpki-client