$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa File: 4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa (raw, json) Hash identifier: tSPMSh9ghM0qACX+fk/ThPr/LrS22JFTtykrbHLSXK0= Subject key identifier: 04:5E:E6:7A:8A:A0:2B:F6:10:5F:82:D2:08:2A:DA:2E:2B:22:1C:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F3793BA48EE4399FFB40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399784 IP address blocks: 2001:470:153::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f3:79:3b:a4:8e:e4:39:9f:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b5128e5e-26a2-48a2-be8c-9f290f1aa225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:8c:ea:3d:0e:6e:19:ef:5f:8c:79:91:4d: f7:77:8a:a0:dd:13:48:54:ad:34:ff:24:3e:29:e0: 3a:ef:88:72:c3:37:05:8f:b2:6a:ae:d8:4c:87:63: fe:7c:9b:16:34:b4:a1:ff:24:88:cd:88:41:80:33: c7:1c:53:75:3d:6d:c7:02:08:76:ca:e6:12:b2:07: 5f:79:88:c8:cd:5a:5c:70:55:fb:96:e0:fe:c7:7d: ba:8f:d8:dc:96:84:a0:5e:12:cb:1c:57:21:5e:ac: 8f:c4:2f:17:92:46:5a:d4:3d:b0:54:b6:03:33:0b: 6a:6b:77:f5:75:56:0b:bb:4a:6d:72:0c:1b:4c:a0: 2d:37:91:04:c2:50:19:31:bc:8a:f5:fa:ae:f6:ec: 80:d7:44:79:83:3a:a0:80:30:e5:d3:e6:c5:45:ac: 44:5f:7e:31:99:2a:02:be:ad:bf:b2:d9:37:76:3c: ae:fa:1c:2d:93:1c:36:0f:76:65:f2:49:b0:10:4f: 43:ab:48:04:88:f7:b2:01:c0:45:cc:57:94:fa:25: d0:46:90:d0:48:40:fe:ed:df:c0:43:f8:26:ae:e9: 4e:11:6f:35:52:f5:6f:b7:99:d2:c9:84:0a:4e:c1: 2a:9a:c9:b0:0e:c6:35:e6:06:f9:af:60:1c:a1:19: 41:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:E6:7A:8A:A0:2B:F6:10:5F:82:D2:08:2A:DA:2E:2B:22:1C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c4ae3df-10f2-37b1-98f9-ce605cc38867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:153::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:51:0f:4f:f2:03:07:3a:66:c6:ac:7f:36:d6:8f:de:25:1a: 62:1f:00:30:c8:07:58:40:b6:63:49:42:68:ff:1a:e9:48:f7: 7a:93:d9:07:23:6c:80:45:54:4f:27:a3:9e:87:cc:65:7d:7c: eb:95:e7:cd:fa:b2:2f:92:b5:f4:e2:2e:46:0e:b1:f5:11:c4: 57:1e:f7:04:10:35:76:1f:cc:60:89:19:aa:02:16:4b:dc:4c: ec:25:66:0f:1b:97:ff:75:26:c9:71:dd:c3:5a:0d:0a:0f:af: ff:e3:30:6d:42:d0:5d:03:5f:0a:13:93:ab:27:26:26:10:1c: 29:9d:0a:91:33:f9:5f:57:f1:a5:ca:70:30:10:57:2c:91:5d: 64:08:a7:7f:98:1b:75:ac:19:58:1d:c8:34:13:aa:3e:d5:bf: b0:f4:e6:00:43:fe:b6:4e:de:dc:62:12:1b:2a:dc:d0:04:ed: e8:5c:59:87:ae:50:56:d7:48:84:6d:f7:03:4c:c4:ba:73:a3: 35:1c:9b:90:64:d1:85:23:d1:75:43:52:87:80:f5:c5:a2:36: fb:4b:bd:12:aa:ea:1d:00:86:a1:38:d4:f3:97:6f:2e:de:37: ee:92:63:ad:d9:f7:98:fb:50:d4:ea:59:c7:fb:9b:ec:cb:45: 31:92:90:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/N5O6SO5Dmf+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjUxMjhlNWUtMjZhMi00OGEyLWJlOGMtOWYyOTBmMWFhMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKyM6j0ObhnvX4x5kU33d4qg3RNIVK00/yQ+ KeA674hywzcFj7JqrthMh2P+fJsWNLSh/ySIzYhBgDPHHFN1PW3HAgh2yuYSsgdf eYjIzVpccFX7luD+x326j9jcloSgXhLLHFchXqyPxC8XkkZa1D2wVLYDMwtqa3f1 dVYLu0ptcgwbTKAtN5EEwlAZMbyK9fqu9uyA10R5gzqggDDl0+bFRaxEX34xmSoC vq2/stk3djyu+hwtkxw2D3Zl8kmwEE9Dq0gEiPeyAcBFzFeU+iXQRpDQSED+7d/A Q/gmrulOEW81UvVvt5nSyYQKTsEqmsmwDsY15gb5r2AcoRlB/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARe5nqKoCv2EF+C0ggq2i4rIhwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGM0YWUzZGYtMTBmMi0z N2IxLTk4ZjktY2U2MDVjYzM4ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJRD0/yAwc6ZsasfzbWj94lGmIfADDIB1hAtmNJQmj/GulI93qT 2QcjbIBFVE8no56HzGV9fOuV5836si+StfTiLkYOsfURxFce9wQQNXYfzGCJGaoC FkvcTOwlZg8bl/91Jslx3cNaDQoPr//jMG1C0F0DXwoTk6snJiYQHCmdCpEz+V9X 8aXKcDAQVyyRXWQIp3+YG3WsGVgdyDQTqj7Vv7D05gBD/rZO3txiEhsq3NAE7ehc WYeuUFbXSIRt9wNMxLpzozUcm5Bk0YUj0XVDUoeA9cWiNvtLvRKq6h0AhqE41POX by7eN+6SY63Z95j7UNTqWcf7m+zLRTGSkKw= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:29 2025 by rpki-client