$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa File: 4b952ef9-faec-3e07-b32f-9b84be027354.roa (raw, json) Hash identifier: PwY/KeRGdlepCWBz8tGgMEDPjqZimWSa92LnRm1aiDA= Subject key identifier: 84:F0:29:DD:A6:7C:F8:9F:6D:7D:AD:E5:02:F3:F8:BE:35:5C:61:2D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EE6911F8816E804E92C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400725 IP address blocks: 2001:470:1ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ee:69:11:f8:81:6e:80:4e:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7d7b9f85-315e-4f31-9a94-c2ce6fb148aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:b0:ab:d3:55:39:15:38:ed:cf:27:c3:da: 62:d5:fa:ed:e6:72:a5:77:9e:0e:bb:0d:92:e5:38: 10:b1:98:98:ce:0b:31:e1:aa:51:05:10:28:3d:c3: 7b:96:68:c4:2b:07:48:d8:1c:fe:ea:47:e5:f2:b1: 71:4d:b5:84:1b:ad:b8:fb:a7:85:ae:ee:60:96:3c: 72:46:31:91:d9:0d:83:34:82:b5:c8:fc:df:58:b2: 13:07:83:16:88:80:8d:b0:55:9f:bf:e1:07:01:c1: 1e:75:b3:81:82:49:17:91:8f:00:9f:d8:65:25:32: e5:33:ea:07:44:a1:c7:b9:a8:63:60:31:9b:44:16: 57:89:ae:53:21:8e:4c:7b:43:24:49:2a:70:55:ba: 05:04:08:d4:5b:f1:eb:cf:03:35:ca:ee:53:39:73: fd:30:96:8f:7d:0f:4b:27:f6:0f:35:b8:78:7e:3f: cf:53:ff:5e:52:f6:53:44:36:d3:8f:68:96:10:ca: 8a:4c:59:b9:ab:5a:f9:80:57:e1:de:ea:04:d2:27: 31:18:53:d9:56:72:f1:2c:ce:23:2e:60:b7:a7:a6: ad:85:57:60:18:15:0d:e4:bc:2a:b7:1b:d9:7c:d6: ef:b8:e2:54:18:99:ba:49:0b:8b:5e:60:f2:17:a9: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F0:29:DD:A6:7C:F8:9F:6D:7D:AD:E5:02:F3:F8:BE:35:5C:61:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b952ef9-faec-3e07-b32f-9b84be027354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:78:4f:4f:b0:f4:01:fe:8a:a4:1c:e2:71:8c:a1:08:99:ad: bb:f4:38:25:6c:6f:ba:95:77:7c:e4:36:56:81:f2:a6:91:68: 01:5d:de:dd:2b:0a:c1:57:26:cb:c9:73:76:f9:cd:51:d6:41: 0b:a9:70:e3:dd:9a:11:21:9b:66:63:07:4c:ef:70:e5:e3:9b: f8:a8:52:b8:c2:97:35:5b:ab:38:85:ed:5f:cf:ab:c2:26:44: 7d:a7:f6:ee:9e:5e:22:b4:47:cc:c3:38:e6:54:1a:f4:8d:a1: 6b:9f:51:d3:46:1c:31:b3:0d:b4:31:c8:a8:3b:c4:72:23:15: e0:f0:dd:c8:09:da:6f:98:70:55:55:d3:0e:3e:26:03:41:b6: 0a:ac:09:df:68:ab:97:7c:20:86:36:29:c3:85:b3:22:d2:de: e9:3a:0f:58:52:03:de:03:fe:08:60:cf:a0:5a:cc:e9:16:1f: 36:51:b2:44:e1:b7:86:43:7a:74:81:98:51:5f:1f:6e:c6:bf: 80:62:c3:30:7d:23:8c:84:9f:b4:2e:c8:16:19:92:04:6b:cf: 62:78:35:d4:9f:d7:af:1d:02:c6:96:a2:cf:ca:44:c9:dd:68: 8b:8f:d2:8f:d8:bf:c2:dc:f1:b2:d2:da:f4:cb:b3:25:ec:32: 76:10:26:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+5pEfiBboBOksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk N2Q3YjlmODUtMzE1ZS00ZjMxLTlhOTQtYzJjZTZmYjE0OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl2wq9NVORU47c8nw9pi1frt5nKld54Ouw2S 5TgQsZiYzgsx4apRBRAoPcN7lmjEKwdI2Bz+6kfl8rFxTbWEG624+6eFru5gljxy RjGR2Q2DNIK1yPzfWLITB4MWiICNsFWfv+EHAcEedbOBgkkXkY8An9hlJTLlM+oH RKHHuahjYDGbRBZXia5TIY5Me0MkSSpwVboFBAjUW/HrzwM1yu5TOXP9MJaPfQ9L J/YPNbh4fj/PU/9eUvZTRDbTj2iWEMqKTFm5q1r5gFfh3uoE0icxGFPZVnLxLM4j LmC3p6athVdgGBUN5LwqtxvZfNbvuOJUGJm6SQuLXmDyF6l5dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFITwKd2mfPifbX2t5QLz+L41XGEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI5NTJlZjktZmFlYy0z ZTA3LWIzMmYtOWI4NGJlMDI3MzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAx4T0+w9AH+iqQc4nGMoQiZrbv0OCVsb7qVd3zkNlaB8qaRaAFd 3t0rCsFXJsvJc3b5zVHWQQupcOPdmhEhm2ZjB0zvcOXjm/ioUrjClzVbqziF7V/P q8ImRH2n9u6eXiK0R8zDOOZUGvSNoWufUdNGHDGzDbQxyKg7xHIjFeDw3cgJ2m+Y cFVV0w4+JgNBtgqsCd9oq5d8IIY2KcOFsyLS3uk6D1hSA94D/ghgz6BazOkWHzZR skTht4ZDenSBmFFfH27Gv4BiwzB9I4yEn7QuyBYZkgRrz2J4NdSf168dAsaWos/K RMndaIuP0o/Yv8Lc8bLS2vTLsyXsMnYQJos= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:28 2025 by rpki-client