$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa File: 556b8f33-4bbe-3abd-8898-2311a1125dee.roa (raw, json) Hash identifier: /tmUbzyuOdVXSOChxK0epyG3kfyXrwQUBT50qapforY= Subject key identifier: F8:91:BB:B5:9D:0F:E8:91:F7:E3:5C:81:65:98:47:72:24:F8:AF:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BABFCFC6952B51416A2508400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 38077 IP address blocks: 2001:470:1f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fc:69:52:b5:14:16:a2:50:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=5636b637-a333-46ba-835e-ebf58c81e0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:73:f7:a1:f4:32:b3:34:04:ec:ae:3b:cf: 86:6f:fb:55:fb:ba:96:00:7b:c8:d4:2a:43:b0:93: 38:2c:a3:e6:ea:d8:50:8f:7f:11:17:f9:2a:b4:b6: 01:04:d1:6f:2b:1e:1d:a6:08:7a:46:c8:8e:66:5c: 53:39:43:76:bc:0b:8f:95:05:17:db:c3:74:10:f8: b0:04:70:14:2e:a1:55:e7:8a:c2:3d:6b:96:4e:53: 03:f1:d0:b2:3a:0f:1f:99:31:1e:6c:78:a5:98:53: 0d:30:33:e8:94:7a:61:29:99:13:9f:21:d7:c9:0c: 00:55:17:24:8a:c0:40:9c:45:cf:39:01:88:38:c4: e7:2a:a2:6d:ec:00:5e:90:3b:28:df:81:e3:7e:30: 09:8f:b7:ec:8b:ee:23:20:80:ac:47:e7:40:e3:51: 96:e0:9f:94:11:20:e5:6b:8a:34:ae:90:a5:be:23: f2:66:47:e7:5b:01:26:18:5c:85:7d:86:79:27:d8: 1f:d7:a5:01:41:0b:3b:c5:9c:bb:e3:68:cb:34:fa: b3:6d:99:02:51:91:76:a5:3d:87:2b:c7:c2:35:86: 9e:98:6f:f6:4a:5c:2f:43:1f:41:8e:df:db:17:4b: 19:26:5b:de:7b:4e:02:ce:31:dc:cb:e7:6b:05:15: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:91:BB:B5:9D:0F:E8:91:F7:E3:5C:81:65:98:47:72:24:F8:AF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/556b8f33-4bbe-3abd-8898-2311a1125dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:0e:05:b3:98:94:7d:2d:5e:0f:0c:6f:2d:19:cf:1e:00:ce: 97:0f:6b:e3:9a:28:75:d6:04:40:72:a0:46:4e:5a:2f:1e:cb: b7:f2:72:24:fb:34:e8:ac:ec:b1:3c:23:eb:08:4b:44:68:77: 1d:69:96:61:d1:85:68:b4:bf:a8:02:67:6e:95:d3:71:e0:e7: 25:33:37:af:33:0c:57:d5:e8:b2:fe:55:35:67:63:ce:ad:91: 5c:70:d7:9a:f5:9f:81:99:4a:04:47:93:26:df:79:0f:d0:3c: cd:0d:b9:bf:08:7a:8b:be:3e:71:dd:b1:dc:98:c6:f9:a1:c3: 0b:d2:7c:5a:b9:f6:1e:50:cb:75:ed:25:74:31:33:48:68:0c: 42:63:ab:15:4e:31:90:06:dd:df:3e:42:98:e8:b2:3d:03:bf: 20:48:04:18:f6:f7:8a:96:14:09:11:fd:65:7d:e8:10:14:8a: 5b:f2:0d:5e:69:a8:f1:92:87:de:e6:ec:c2:d0:02:66:25:17: 94:51:e0:13:b3:92:e8:42:e2:c6:be:45:78:50:95:0c:df:c5: 71:32:ea:bd:d9:14:4e:44:ec:39:50:8f:3a:19:d2:16:ec:7f: 26:05:f6:fc:83:ec:74:2c:90:3d:f5:9b:0d:55:12:e8:65:be: 6c:5c:ba:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/PxpUrUUFqJQhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTYzNmI2MzctYTMzMy00NmJhLTgzNWUtZWJmNThjODFlMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXVz96H0MrM0BOyuO8+Gb/tV+7qWAHvI1CpD sJM4LKPm6thQj38RF/kqtLYBBNFvKx4dpgh6RsiOZlxTOUN2vAuPlQUX28N0EPiw BHAULqFV54rCPWuWTlMD8dCyOg8fmTEebHilmFMNMDPolHphKZkTnyHXyQwAVRck isBAnEXPOQGIOMTnKqJt7ABekDso34HjfjAJj7fsi+4jIICsR+dA41GW4J+UESDl a4o0rpClviPyZkfnWwEmGFyFfYZ5J9gf16UBQQs7xZy742jLNPqzbZkCUZF2pT2H K8fCNYaemG/2SlwvQx9Bjt/bF0sZJlvee04CzjHcy+drBRUSewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPiRu7WdD+iR9+NcgWWYR3Ik+K8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTU2YjhmMzMtNGJiZS0z YWJkLTg4OTgtMjMxMWExMTI1ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIOBbOYlH0tXg8Mby0Zzx4AzpcPa+OaKHXWBEByoEZOWi8ey7fy ciT7NOis7LE8I+sIS0Rodx1plmHRhWi0v6gCZ26V03Hg5yUzN68zDFfV6LL+VTVn Y86tkVxw15r1n4GZSgRHkybfeQ/QPM0Nub8Ieou+PnHdsdyYxvmhwwvSfFq59h5Q y3XtJXQxM0hoDEJjqxVOMZAG3d8+Qpjosj0DvyBIBBj294qWFAkR/WV96BAUilvy DV5pqPGSh97m7MLQAmYlF5RR4BOzkuhC4sa+RXhQlQzfxXEy6r3ZFE5E7DlQjzoZ 0hbsfyYF9vyD7HQskD31mw1VEuhlvmxcuvM= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:42 2025 by rpki-client