$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa File: 5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa (raw, json) Hash identifier: lqlRVsTiBHgJLKoOtSS6OrBAZMqe2IAPINABeZX7q9E= Subject key identifier: 84:C5:C3:3F:EB:FC:D8:28:C5:51:B8:DC:95:D8:6A:6E:72:97:B8:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EC295D5FF59AC8085880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 28757 IP address blocks: 2001:470:163::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ec:29:5d:5f:f5:9a:c8:08:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ac0473a5-2538-4371-9a90-2a7577f87924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:06:d9:a0:8b:26:e2:da:c8:db:ee:74:3e: a9:b7:bc:8c:07:d8:05:90:12:ea:15:dc:04:34:3d: 56:5a:14:de:6d:05:96:76:15:cd:63:69:e8:b8:fe: f9:d0:d8:71:72:85:bd:66:b2:0a:e8:50:03:58:bd: ed:e5:87:da:ed:60:5f:17:c1:e2:22:ff:05:ba:1c: 32:9d:2e:dc:44:ea:48:d8:21:55:42:91:a6:f1:8d: c3:ac:3d:f8:26:2e:9d:9f:14:19:a5:13:00:3b:dc: b1:33:7d:ba:c2:79:a8:cb:0f:6b:ca:85:be:f1:7e: 0d:de:18:f3:2d:10:e0:1f:8f:89:97:4a:b7:14:4f: b6:0c:ea:5e:c6:bb:b5:41:c6:72:9b:9a:50:5a:65: 7d:e6:33:87:8e:bf:85:9b:4b:85:36:14:b7:d7:7a: e9:75:c6:78:e8:dc:5f:e4:1f:77:15:f0:20:2b:78: d3:32:a6:07:76:e8:ea:f9:ee:9b:e0:5c:54:02:5a: 98:6c:59:61:e6:d9:30:48:d9:33:3c:14:b9:cb:67: 6a:c3:2c:a3:ea:27:19:63:dd:3b:c5:a6:00:c6:d2: 34:db:fa:d2:77:bd:05:26:93:71:4a:3a:d3:8b:c1: 6d:b9:84:55:ae:db:2e:fc:42:97:89:ba:75:1b:0c: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C5:C3:3F:EB:FC:D8:28:C5:51:B8:DC:95:D8:6A:6E:72:97:B8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ef70c62-e60f-3e5b-829a-9cbd4b082139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:163::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:43:3b:fc:dc:88:37:ae:d7:6e:ec:d8:82:ea:d3:b6:86:95: 7a:98:aa:57:38:bc:16:ce:03:ef:5d:1b:81:32:57:34:1b:0a: ba:88:79:37:04:30:61:35:f0:02:69:57:e4:09:59:8a:2d:b4: cb:42:4a:de:1e:24:b1:cd:24:72:01:84:75:0e:e5:05:90:d4: 6c:28:af:a4:da:51:9e:02:b5:e5:de:0e:ea:bd:cc:c5:c6:92: 26:f2:05:ce:ab:d4:dd:0f:16:d6:f2:a0:d4:f6:88:06:a9:e5: 01:39:54:b0:ee:48:88:49:1b:4b:0d:41:36:ea:1b:4f:9f:b4: d3:f0:b8:bc:71:2d:8a:ed:95:5c:3a:c4:e6:f1:8a:f9:fb:dd: e4:29:43:1d:6f:99:7b:6f:84:14:6d:eb:d0:22:0d:70:6f:42: 1e:ba:12:ce:97:36:59:ed:8f:9d:3e:77:21:3f:92:36:a8:0f: 42:bc:1b:1b:ae:8d:92:46:7f:56:f5:df:10:59:15:92:ee:86: a0:48:1a:2f:41:c0:87:ff:85:73:37:60:42:90:83:bf:32:97: 56:d9:72:60:1d:38:ec:17:54:cb:13:f6:bf:1c:03:0b:28:98: ba:c9:08:27:bb:19:67:9e:53:94:fd:d6:21:d7:30:0c:57:8f: 6e:a2:eb:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+wpXV/1msgIWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWMwNDczYTUtMjUzOC00MzcxLTlhOTAtMmE3NTc3Zjg3OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwG2aCLJuLayNvudD6pt7yMB9gFkBLqFdwE ND1WWhTebQWWdhXNY2nouP750NhxcoW9ZrIK6FADWL3t5Yfa7WBfF8HiIv8Fuhwy nS7cROpI2CFVQpGm8Y3DrD34Ji6dnxQZpRMAO9yxM326wnmoyw9ryoW+8X4N3hjz LRDgH4+Jl0q3FE+2DOpexru1QcZym5pQWmV95jOHjr+Fm0uFNhS313rpdcZ46Nxf 5B93FfAgK3jTMqYHdujq+e6b4FxUAlqYbFlh5tkwSNkzPBS5y2dqwyyj6icZY907 xaYAxtI02/rSd70FJpNxSjrTi8FtuYRVrtsu/EKXibp1GwzF/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFITFwz/r/NgoxVG43JXYam5yl7iRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWVmNzBjNjItZTYwZi0z ZTViLTgyOWEtOWNiZDRiMDgyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRDO/zciDeu127s2ILq07aGlXqYqlc4vBbOA+9dG4EyVzQbCrqI eTcEMGE18AJpV+QJWYottMtCSt4eJLHNJHIBhHUO5QWQ1Gwor6TaUZ4CteXeDuq9 zMXGkibyBc6r1N0PFtbyoNT2iAap5QE5VLDuSIhJG0sNQTbqG0+ftNPwuLxxLYrt lVw6xObxivn73eQpQx1vmXtvhBRt69AiDXBvQh66Es6XNlntj50+dyE/kjaoD0K8 GxuujZJGf1b13xBZFZLuhqBIGi9BwIf/hXM3YEKQg78yl1bZcmAdOOwXVMsT9r8c AwsomLrJCCe7GWeeU5T91iHXMAxXj26i6/E= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:54 2025 by rpki-client