$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa File: 523b0bc4-df4e-3208-8cdf-04020832b3b3.roa (raw, json) Hash identifier: 40zHsA9TdN3Zwj3MGBRd51GHHZn108O/HeLnQH/Zbgc= Subject key identifier: 77:8D:26:24:67:35:12:F5:46:98:95:C8:10:CA:5A:60:DB:A1:DA:A2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D2E6A902C473818EC180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400790 IP address blocks: 2001:470:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d2:e6:a9:02:c4:73:81:8e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=781dcc82-0ef0-493b-ad54-08eedc178bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:83:3f:1c:8b:ef:d6:c5:5d:a8:c6:d7:77:ac: 2b:92:41:73:3f:a7:86:ed:12:81:03:cc:88:e9:5c: 2d:e2:ea:ff:4a:60:d1:bd:fc:8d:23:1e:32:ac:83: 5f:61:ae:94:dd:2e:4a:47:2d:c5:6c:26:53:ce:14: 28:36:f4:70:bd:ee:17:1f:e9:01:75:cc:a7:d1:06: 90:f4:13:56:be:22:cd:d2:13:65:76:56:d7:a0:43: b6:05:d2:60:3b:96:00:e7:62:7f:50:8e:84:f1:ac: 1e:88:a8:7c:f7:67:c5:3e:03:e5:99:69:d7:bd:4d: 5c:bc:b0:19:a5:18:f7:cb:9b:bb:64:01:a2:c9:df: 0c:08:68:a2:52:33:7c:15:7e:a3:b0:2f:6d:b1:f0: de:08:e4:c6:da:44:91:c6:77:cf:dc:03:76:dd:4e: 64:bc:ca:5d:67:76:30:28:ec:a9:66:91:6f:e4:ec: 38:ef:59:f8:cf:d9:cc:74:0b:74:9f:33:79:c3:93: 0f:a7:62:15:82:74:e3:6c:76:11:ae:42:48:48:a1: 29:60:7d:e1:e5:21:bf:a0:a2:cb:05:4e:cd:9f:fa: 31:0f:72:a0:5e:1d:a6:88:9b:07:0e:b4:b6:2e:b2: 08:81:ad:27:ca:02:dd:76:a7:65:82:9e:ce:46:92: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8D:26:24:67:35:12:F5:46:98:95:C8:10:CA:5A:60:DB:A1:DA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/523b0bc4-df4e-3208-8cdf-04020832b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:12:b5:ba:14:55:25:17:11:ac:e7:ea:f0:fd:cd:cd:3c:4b: c7:7e:2c:95:c1:d8:f6:d9:d3:5f:9b:8d:7d:ef:b7:dc:3b:49: 10:49:7e:89:b8:6e:b8:58:0f:32:e1:b3:bc:bd:5b:cf:c1:61: 1e:e5:01:89:bc:52:f7:fa:e2:5e:cb:2d:fd:41:d9:91:13:99: 19:fb:d8:8d:56:37:f4:ed:2a:14:79:aa:69:bc:ab:66:ac:5f: dc:94:ae:a1:d6:39:92:0c:72:80:48:46:34:ff:93:68:1e:05: 46:e9:78:7b:4a:67:ee:5d:f9:e6:c8:e4:43:ab:3e:db:5f:20: 17:6b:df:98:98:dd:c9:f4:d8:7c:0f:bc:a1:9b:c4:ba:6e:24: 5e:79:f4:b9:e7:49:2d:89:81:9b:43:a0:97:8f:36:29:50:3e: 20:74:a8:10:aa:2f:18:28:88:ae:fd:63:e0:25:4b:4c:a1:96: d2:22:70:6b:24:91:9d:4f:57:6b:95:ce:c6:95:52:9b:87:a7: 8f:c0:ce:fc:48:fc:aa:4c:b1:c2:c8:fa:77:0d:2e:8c:e0:8f: f0:66:1e:05:fc:61:ba:2c:48:66:78:88:e5:5e:be:82:05:8d: ea:e3:43:f5:b7:68:ea:84:be:87:56:1e:f2:25:19:00:f4:ba: 68:96:49:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19LmqQLEc4GOwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzgxZGNjODItMGVmMC00OTNiLWFkNTQtMDhlZWRjMTc4YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oM/HIvv1sVdqMbXd6wrkkFzP6eG7RKBA8yI 6Vwt4ur/SmDRvfyNIx4yrINfYa6U3S5KRy3FbCZTzhQoNvRwve4XH+kBdcyn0QaQ 9BNWviLN0hNldlbXoEO2BdJgO5YA52J/UI6E8aweiKh892fFPgPlmWnXvU1cvLAZ pRj3y5u7ZAGiyd8MCGiiUjN8FX6jsC9tsfDeCOTG2kSRxnfP3AN23U5kvMpdZ3Yw KOypZpFv5Ow471n4z9nMdAt0nzN5w5MPp2IVgnTjbHYRrkJISKEpYH3h5SG/oKLL BU7Nn/oxD3KgXh2miJsHDrS2LrIIga0nygLddqdlgp7ORpLuJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHeNJiRnNRL1RpiVyBDKWmDbodqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIzYjBiYzQtZGY0ZS0z MjA4LThjZGYtMDQwMjA4MzJiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAStboUVSUXEazn6vD9zc08S8d+LJXB2PbZ01+bjX3vt9w7SRBJ fom4brhYDzLhs7y9W8/BYR7lAYm8Uvf64l7LLf1B2ZETmRn72I1WN/TtKhR5qmm8 q2asX9yUrqHWOZIMcoBIRjT/k2geBUbpeHtKZ+5d+ebI5EOrPttfIBdr35iY3cn0 2HwPvKGbxLpuJF559LnnSS2JgZtDoJePNilQPiB0qBCqLxgoiK79Y+AlS0yhltIi cGskkZ1PV2uVzsaVUpuHp4/AzvxI/KpMscLI+ncNLozgj/BmHgX8YbosSGZ4iOVe voIFjerjQ/W3aOqEvodWHvIlGQD0umiWSZ4= -----END CERTIFICATE-----Generated at Mon Oct 27 22:36:03 2025 by rpki-client