$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa File: 4e39d175-b539-3151-8b49-cda017c92f62.roa (raw, json) Hash identifier: cnE+t/2lMTlxPoH54LA98d8fjxpIPbFlgCF7WKZWnGY= Subject key identifier: 7E:18:DD:D3:A5:D2:FF:C1:86:13:A5:FA:EC:6C:A7:00:20:C3:76:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F10F3B0ED3067260BF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 199518 IP address blocks: 2001:470:232::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f1:0f:3b:0e:d3:06:72:60:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=edd4518f-ea10-4beb-853b-85fa5ccaf6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:35:4f:bc:1b:db:68:eb:f9:00:fd:5e:be: 82:bf:a3:6a:36:1e:2a:ba:ed:30:35:90:3e:0e:fb: af:e1:5d:49:56:78:8d:c8:90:cd:7a:12:9d:fd:fe: 27:8a:55:10:d5:2d:ec:ae:99:d6:45:70:22:f2:bd: f9:52:62:e8:c0:79:b6:c4:f1:10:4c:f1:e2:b6:c0: a4:cd:52:80:38:48:d2:09:e4:be:56:ad:42:ae:14: 23:6e:fa:92:ae:d4:72:71:64:15:d7:df:b2:aa:60: f3:a2:b4:44:6e:e7:40:9b:7e:e9:70:02:79:30:9b: b4:33:79:19:36:df:f2:bd:c5:fe:e7:94:82:31:cb: 21:ce:d4:a5:0d:94:fd:99:5d:d7:9e:64:12:0e:39: e9:72:e9:11:67:3d:4d:0b:e9:b0:07:f5:f3:f1:76: 14:31:33:b5:5d:ca:5b:f9:e1:ad:6b:ee:7e:c1:c7: 21:e4:de:46:81:29:76:1c:3e:0d:e5:78:8f:50:2c: 73:66:a1:c8:35:3c:5e:37:d0:fb:25:0f:8a:df:30: 51:c0:11:f4:2b:b9:9d:69:9c:22:2b:e3:97:7e:b3: 96:50:eb:fe:57:e5:04:3d:a9:1a:a2:c8:c7:7f:48: f8:61:06:55:ec:b7:37:5c:0d:9d:0b:9f:62:db:53: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:18:DD:D3:A5:D2:FF:C1:86:13:A5:FA:EC:6C:A7:00:20:C3:76:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:232::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c7:67:46:4f:42:64:45:da:43:57:55:bc:b2:1e:bd:06:65: fe:78:6b:6b:3b:c3:ca:9c:de:d1:c8:db:b4:1c:0e:32:fc:97: e4:ee:0d:a2:4f:a2:4d:de:56:b5:71:4a:be:19:9a:5b:06:a6: ba:94:0f:86:1c:dc:02:48:71:29:b5:e3:dc:36:0c:fc:00:c7: 5b:36:50:40:d8:97:f5:0d:9d:28:f7:21:ed:b6:c8:c0:a0:83: a9:70:df:51:6d:3d:34:f8:36:5c:30:d0:d4:74:ec:b2:42:a3: d5:ad:d4:d6:73:40:fc:0e:2c:2d:a7:0c:15:e9:4f:06:8b:9c: 3d:a4:0c:1d:99:29:08:b4:85:6c:87:89:73:b6:dd:e4:25:d1: ab:b1:a7:6b:bd:fb:63:56:06:2b:90:5e:62:ed:79:11:f3:fa: b0:ea:3d:64:81:3b:ad:b4:82:a6:5b:75:d2:e8:9f:22:38:26: c0:26:b5:49:8d:c2:1c:92:1d:90:a8:83:21:b6:d6:ce:10:da: 28:75:5c:f1:e3:15:f1:2c:f2:66:97:a1:0a:f5:62:ec:2d:ce: 47:75:83:20:1b:bb:f9:15:b0:3c:eb:4b:b5:a5:91:40:83:ac: 64:59:db:ff:f9:0b:bf:68:05:ff:8d:04:e3:3b:31:8d:bd:f1: 1a:f0:fb:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/EPOw7TBnJgv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWRkNDUxOGYtZWExMC00YmViLTg1M2ItODVmYTVjY2FmNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+w1T7wb22jr+QD9Xr6Cv6NqNh4quu0wNZA+ Dvuv4V1JVniNyJDNehKd/f4nilUQ1S3srpnWRXAi8r35UmLowHm2xPEQTPHitsCk zVKAOEjSCeS+Vq1CrhQjbvqSrtRycWQV19+yqmDzorREbudAm37pcAJ5MJu0M3kZ Nt/yvcX+55SCMcshztSlDZT9mV3XnmQSDjnpcukRZz1NC+mwB/Xz8XYUMTO1Xcpb +eGta+5+wcch5N5GgSl2HD4N5XiPUCxzZqHINTxeN9D7JQ+K3zBRwBH0K7mdaZwi K+OXfrOWUOv+V+UEPakaosjHf0j4YQZV7Lc3XA2dC59i21OPmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH4Y3dOl0v/BhhOl+uxspwAgw3ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGUzOWQxNzUtYjUzOS0z MTUxLThiNDktY2RhMDE3YzkyZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJnHZ0ZPQmRF2kNXVbyyHr0GZf54a2s7w8qc3tHI27QcDjL8l+Tu DaJPok3eVrVxSr4ZmlsGprqUD4Yc3AJIcSm149w2DPwAx1s2UEDYl/UNnSj3Ie22 yMCgg6lw31FtPTT4Nlww0NR07LJCo9Wt1NZzQPwOLC2nDBXpTwaLnD2kDB2ZKQi0 hWyHiXO23eQl0auxp2u9+2NWBiuQXmLteRHz+rDqPWSBO620gqZbddLonyI4JsAm tUmNwhySHZCogyG21s4Q2ih1XPHjFfEs8maXoQr1Yuwtzkd1gyAbu/kVsDzrS7Wl kUCDrGRZ2//5C79oBf+NBOM7MY298Rrw+9Y= -----END CERTIFICATE-----Generated at Thu Oct 23 09:24:53 2025 by rpki-client