$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72002e68-0ffc-3420-87d1-8b3f66bf091a.roa File: 72002e68-0ffc-3420-87d1-8b3f66bf091a.roa (raw, json) Hash identifier: 3COxPb80LriBf25vI0dxNgPqI6ivQYCaLSz/SXTn9bM= Subject key identifier: 35:2A:E7:E4:53:79:7E:E1:A7:BD:1C:B1:12:17:F5:9E:AE:C3:B1:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E85F03ADA1F32A17B300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72002e68-0ffc-3420-87d1-8b3f66bf091a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 25948 IP address blocks: 2001:470:156::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e8:5f:03:ad:a1:f3:2a:17:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=561ae5ac-a0f7-4ce6-97a2-0ca11f59ddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:06:2a:1a:8f:8a:e4:7c:0b:d8:9d:ed:45: 84:8f:a0:1c:4f:39:93:41:07:73:43:1e:23:80:aa: dc:31:12:db:32:df:36:8a:d3:0b:be:0d:71:f0:c5: b8:91:25:eb:09:a5:f4:66:82:01:c0:6c:e4:01:d2: 66:0e:b9:d3:87:64:d0:44:7f:ef:02:dc:04:ab:b1: cc:28:5d:1b:f2:02:5f:6d:c2:bf:b8:c4:4f:49:20: 08:3a:34:1e:90:8b:14:55:2d:bc:12:a5:3c:b7:bb: 26:98:89:59:51:63:33:36:77:fe:57:8e:03:8c:8f: ec:91:86:c6:ae:9e:91:06:9a:a0:71:35:f1:3f:aa: 10:55:0c:08:c2:63:7b:9b:61:4e:03:ae:32:d9:2c: c8:2d:82:f9:f1:51:bb:74:72:85:cd:29:c5:74:12: 8e:d9:7a:d8:cd:d5:dc:60:cc:61:bb:c1:73:9c:33: 97:b1:d3:4d:55:03:3f:a5:5a:b1:28:e1:49:af:30: 3b:c3:3f:e5:31:59:14:50:dd:99:71:b2:8a:b3:c3: 78:02:9e:3a:0f:48:db:9f:c8:9d:c9:e7:c8:03:32: 9c:78:5d:04:b0:7f:9a:28:bc:a1:1f:61:43:ad:04: 70:6b:72:0c:ab:af:e4:b5:93:f4:48:88:ef:fb:32: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:E7:E4:53:79:7E:E1:A7:BD:1C:B1:12:17:F5:9E:AE:C3:B1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72002e68-0ffc-3420-87d1-8b3f66bf091a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:156::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:90:5d:7b:8b:62:b9:42:cb:ec:29:ec:4c:0f:a3:7f:c2:fe: 5a:42:de:9d:22:6a:8a:80:41:40:bf:74:e1:cb:a0:d3:aa:6e: bf:56:9a:94:af:7b:63:39:f2:f4:84:85:b0:b3:45:ea:17:42: 1b:b5:0d:c5:91:61:88:63:84:db:6e:26:23:5d:a4:e3:dc:5b: 59:8f:ff:95:3a:29:d5:4e:b0:36:2a:da:d4:b4:a1:53:73:af: 33:ac:d5:8d:2b:c1:e9:90:9a:79:ad:64:b3:4b:b9:01:f4:a8: ad:0d:6d:c0:af:ae:71:45:93:13:10:41:ff:a4:94:5e:0c:75: 1e:b5:dd:85:fa:2c:c4:82:08:2e:b1:5c:27:23:30:c5:ea:5f: 25:6b:29:8d:20:f1:5f:32:7c:76:d6:06:65:9b:3f:9a:e3:2d: 4b:d1:2c:ba:e8:71:5b:95:8e:ef:e0:cc:a2:4a:ff:98:3f:df: f5:5f:e0:c6:6e:c6:7a:ee:02:32:53:eb:68:08:ea:f9:fc:d3: da:1f:94:e2:12:32:cb:98:a4:e5:d2:15:d2:aa:d9:77:f7:4f: e6:d2:a9:bf:70:b4:97:05:af:4f:04:a1:f1:e1:6b:95:6d:d9: 92:84:60:3f:9b:68:ff:4e:e3:b2:9a:f4:02:fb:33:b1:03:36: d1:38:61:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+hfA62h8yoXswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTYxYWU1YWMtYTBmNy00Y2U2LTk3YTItMGNhMTFmNTlkZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj4GKhqPiuR8C9id7UWEj6AcTzmTQQdzQx4j gKrcMRLbMt82itMLvg1x8MW4kSXrCaX0ZoIBwGzkAdJmDrnTh2TQRH/vAtwEq7HM KF0b8gJfbcK/uMRPSSAIOjQekIsUVS28EqU8t7smmIlZUWMzNnf+V44DjI/skYbG rp6RBpqgcTXxP6oQVQwIwmN7m2FOA64y2SzILYL58VG7dHKFzSnFdBKO2XrYzdXc YMxhu8FznDOXsdNNVQM/pVqxKOFJrzA7wz/lMVkUUN2ZcbKKs8N4Ap46D0jbn8id yefIAzKceF0EsH+aKLyhH2FDrQRwa3IMq6/ktZP0SIjv+zImtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUq5+RTeX7hp70csRIX9Z6uw7GqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzIwMDJlNjgtMGZmYy0z NDIwLTg3ZDEtOGIzZjY2YmYwOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeQXXuLYrlCy+wp7EwPo3/C/lpC3p0iaoqAQUC/dOHLoNOqbr9W mpSve2M58vSEhbCzReoXQhu1DcWRYYhjhNtuJiNdpOPcW1mP/5U6KdVOsDYq2tS0 oVNzrzOs1Y0rwemQmnmtZLNLuQH0qK0NbcCvrnFFkxMQQf+klF4MdR613YX6LMSC CC6xXCcjMMXqXyVrKY0g8V8yfHbWBmWbP5rjLUvRLLrocVuVju/gzKJK/5g/3/Vf 4MZuxnruAjJT62gI6vn809oflOISMsuYpOXSFdKq2Xf3T+bSqb9wtJcFr08EofHh a5Vt2ZKEYD+baP9O47Ka9AL7M7EDNtE4Yek= -----END CERTIFICATE-----Generated at Wed Oct 22 09:54:54 2025 by rpki-client