$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ba0b7c7-fa35-36ed-a38a-2386559eba67.roa File: 4ba0b7c7-fa35-36ed-a38a-2386559eba67.roa (raw, json) Hash identifier: WaE02BbKkNR8LTHRMVSykjDhXnQ3SmCLCLOyRC4U4M8= Subject key identifier: 8A:19:65:35:44:38:2F:6E:2F:DF:B1:DB:DD:69:55:01:A3:23:5F:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F487BF55F42B0494C180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ba0b7c7-fa35-36ed-a38a-2386559eba67.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 15577 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f4:87:bf:55:f4:2b:04:94:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5649cf20-7743-4635-9a86-3488f2a183b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:4a:b9:75:c7:d9:7b:43:a0:30:f9:95:4f: 0e:a4:08:a9:aa:5f:32:f8:b1:14:42:db:46:b6:4e: fb:57:f6:db:9b:96:3c:0b:1a:d6:bf:29:63:69:42: 9c:1e:7a:08:54:95:f9:c4:91:71:47:cf:44:87:fa: 4f:5b:96:62:5f:a7:ab:76:d9:53:3d:49:50:13:27: 60:a4:18:51:2c:c2:48:7f:db:81:84:0f:6c:c3:df: ce:1c:ed:cd:b6:50:2a:21:b7:60:ee:55:16:98:a5: dc:af:fb:e0:fa:ba:ad:d0:33:64:f9:55:fe:aa:01: f2:e8:2e:5d:95:7d:23:22:20:1b:4f:e7:28:0f:df: 35:93:18:77:ba:57:9e:21:85:2b:ba:2b:97:fc:ba: f2:7b:1d:d7:1c:39:50:7d:81:26:b6:13:6e:64:eb: da:a6:41:9c:39:52:f7:40:ce:c5:51:b9:c7:c3:4c: ed:25:b0:e7:96:43:cb:95:76:5a:42:3d:4a:0a:80: eb:a0:bb:63:d6:f4:9c:ee:31:06:c7:8f:9c:84:e6: 17:b3:aa:bc:9a:80:06:07:d5:27:a5:cc:74:da:44: 14:9c:3c:9c:62:87:55:5b:f2:95:5e:f6:4d:1e:47: a3:f4:73:16:73:81:47:fe:ac:6b:e0:03:ed:94:98: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:19:65:35:44:38:2F:6E:2F:DF:B1:DB:DD:69:55:01:A3:23:5F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ba0b7c7-fa35-36ed-a38a-2386559eba67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:42:6a:9f:4d:5c:1e:a2:52:58:89:20:d2:b3:a2:a8:84:81: dd:9e:6d:4e:08:d9:c1:da:a9:31:cf:18:1d:90:30:a1:42:dc: 31:aa:68:65:1b:40:36:0c:51:a0:14:6c:ae:cd:07:5d:77:97: bf:67:1c:79:3b:6c:96:d1:ed:d7:3f:0d:dc:fe:95:bd:db:29: 73:30:b6:96:10:c9:88:f9:47:9d:22:e8:a5:d7:ba:90:6a:af: 10:e1:7e:db:55:4d:d1:a2:f2:34:da:33:66:bc:03:27:2d:f1: d0:d4:ad:16:59:65:1f:1d:25:68:ce:35:84:bb:c9:68:38:69: f1:32:4d:58:27:f4:c8:d2:ef:e2:78:d9:56:17:56:ae:ce:50: e1:35:06:81:44:3e:e2:a0:a2:9a:8f:de:f2:be:7c:65:4b:3f: 02:6e:0a:80:e7:35:ef:ae:6f:b3:ef:7a:e5:75:6f:81:5b:68: ac:54:51:e1:72:2c:bb:37:c5:96:20:cc:69:b8:59:0c:53:cb: 44:c3:e3:4f:cd:b4:46:74:ce:9c:67:02:fe:15:2b:26:4c:6a: d3:62:29:ad:a7:04:9e:0a:24:3f:07:2c:8a:c2:e1:a3:86:6f: c9:e6:c5:da:91:62:02:f5:fa:a2:17:d1:6d:a3:fa:49:a7:e6: 17:1d:e5:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/SHv1X0KwSUwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTY0OWNmMjAtNzc0My00NjM1LTlhODYtMzQ4OGYyYTE4M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZKuXXH2XtDoDD5lU8OpAipql8y+LEUQttG tk77V/bbm5Y8CxrWvyljaUKcHnoIVJX5xJFxR89Eh/pPW5ZiX6erdtlTPUlQEydg pBhRLMJIf9uBhA9sw9/OHO3NtlAqIbdg7lUWmKXcr/vg+rqt0DNk+VX+qgHy6C5d lX0jIiAbT+coD981kxh3uleeIYUruiuX/Lryex3XHDlQfYEmthNuZOvapkGcOVL3 QM7FUbnHw0ztJbDnlkPLlXZaQj1KCoDroLtj1vSc7jEGx4+chOYXs6q8moAGB9Un pcx02kQUnDycYodVW/KVXvZNHkej9HMWc4FH/qxr4APtlJgUhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoZZTVEOC9uL9+x291pVQGjI19tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGJhMGI3YzctZmEzNS0z NmVkLWEzOGEtMjM4NjU1OWViYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1Cap9NXB6iUliJINKzoqiEgd2ebU4I2cHaqTHPGB2QMKFC3DGq aGUbQDYMUaAUbK7NB113l79nHHk7bJbR7dc/Ddz+lb3bKXMwtpYQyYj5R50i6KXX upBqrxDhfttVTdGi8jTaM2a8Ayct8dDUrRZZZR8dJWjONYS7yWg4afEyTVgn9MjS 7+J42VYXVq7OUOE1BoFEPuKgopqP3vK+fGVLPwJuCoDnNe+ub7PveuV1b4FbaKxU UeFyLLs3xZYgzGm4WQxTy0TD40/NtEZ0zpxnAv4VKyZMatNiKa2nBJ4KJD8HLIrC 4aOGb8nmxdqRYgL1+qIX0W2j+kmn5hcd5fs= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:25 2025 by rpki-client