$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa File: 720391a4-507c-3987-b98a-c0b826af42f1.roa (raw, json) Hash identifier: Ytsx9D9KKWwDc5Vz6Jdljp0cLZjNAzkoKCxituBNEso= Subject key identifier: 4A:34:8A:89:26:A3:4D:11:80:72:1E:CB:AA:70:DE:16:BA:97:E0:A2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F64A3D9ACDF899E97300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 50607 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f6:4a:3d:9a:cd:f8:99:e9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=78ee1fcb-fd2e-4e08-8c46-2cba1ee6d18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:cb:7b:16:f2:d6:13:3e:76:d8:3a:cc:d2: b9:34:30:a0:85:98:8a:10:1e:d8:2d:59:4d:0b:77: b9:8b:56:f6:55:55:6e:96:1b:35:45:4b:8e:2d:f8: 83:cb:80:40:c0:0e:20:0f:0d:03:41:36:01:25:3e: 99:ee:c0:29:7f:7e:9c:e5:9e:15:b1:7a:82:f8:29: 4a:46:32:81:9f:86:6a:5d:a3:6d:d2:0b:c8:b0:cf: f6:01:5e:b0:74:e6:5d:e1:6c:90:90:04:b0:5f:aa: 26:13:25:6a:b6:d0:9f:45:17:8a:96:ee:c7:01:4d: de:f7:c3:cf:73:05:8f:d2:21:a3:42:06:5f:34:56: a4:f8:6a:7e:20:25:49:ea:db:51:d4:32:65:6e:55: 97:93:01:5f:a5:cf:4b:0d:25:a6:8d:c9:b9:2a:28: 88:8c:1b:59:9f:e7:50:af:87:76:ad:aa:ff:ef:04: c2:b0:50:ce:7e:5d:12:9a:13:9b:a1:b1:2d:ba:10: 46:35:2a:f6:17:6c:f8:a7:f3:8c:dd:92:f1:f3:8f: 4f:1a:f9:3b:1b:e4:08:2d:78:36:d7:93:f6:5a:fd: 2e:5b:e0:18:b4:4b:e6:d3:b3:3f:a0:0c:cc:cd:09: 92:7a:e7:45:ef:f2:99:1c:68:8a:19:ba:f3:5d:36: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:8A:89:26:A3:4D:11:80:72:1E:CB:AA:70:DE:16:BA:97:E0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/720391a4-507c-3987-b98a-c0b826af42f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1b:5a:8a:84:42:6d:be:56:38:8c:11:65:b6:f0:7a:3f:3d: 48:6e:36:b9:4a:86:dd:a1:36:42:31:aa:ec:b0:0d:da:a8:78: c6:fa:32:39:89:25:27:ea:b0:c4:25:21:4c:a1:18:8d:8b:69: 48:11:ce:12:1d:ab:f1:57:f4:3b:e4:90:35:bd:4e:3f:c4:7b: 6d:86:f3:18:06:7b:85:8c:5f:d0:7a:a6:ab:27:82:55:52:85: cc:d2:3b:cd:a9:85:66:d5:b2:3f:2e:52:96:49:42:53:6d:e0: 0c:cc:ca:95:d5:85:b4:8a:9a:73:10:0f:5f:d8:6c:59:ad:69: 1b:46:1b:65:7f:cd:cd:30:ae:c4:cb:01:62:32:1f:56:db:4a: a0:2d:ba:b5:a1:6f:e5:ed:31:ad:0c:c3:75:84:94:81:93:3f: 24:fd:91:84:a6:78:00:36:db:f7:6b:79:1e:c5:3e:2f:f2:8d: 30:5f:8f:de:db:cf:19:0a:f9:e2:1c:f2:1f:04:fd:37:05:a1: a3:dd:75:41:26:3b:e3:30:87:af:48:93:4b:4e:e4:dd:37:66: 10:f1:b8:59:1a:6f:4e:74:dd:77:1d:5b:eb:52:71:24:d9:ac: a7:3e:95:4c:98:be:82:ab:ae:c9:02:4b:93:b6:3a:9a:37:44: d0:0b:2a:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/ZKPZrN+JnpcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzhlZTFmY2ItZmQyZS00ZTA4LThjNDYtMmNiYTFlZTZkMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur3Lexby1hM+dtg6zNK5NDCghZiKEB7YLVlN C3e5i1b2VVVulhs1RUuOLfiDy4BAwA4gDw0DQTYBJT6Z7sApf36c5Z4VsXqC+ClK RjKBn4ZqXaNt0gvIsM/2AV6wdOZd4WyQkASwX6omEyVqttCfRReKlu7HAU3e98PP cwWP0iGjQgZfNFak+Gp+ICVJ6ttR1DJlblWXkwFfpc9LDSWmjcm5KiiIjBtZn+dQ r4d2rar/7wTCsFDOfl0SmhObobEtuhBGNSr2F2z4p/OM3ZLx849PGvk7G+QILXg2 15P2Wv0uW+AYtEvm07M/oAzMzQmSeudF7/KZHGiKGbrzXTZLQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEo0iokmo00RgHIey6pw3ha6l+CiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzIwMzkxYTQtNTA3Yy0z OTg3LWI5OGEtYzBiODI2YWY0MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMbWoqEQm2+VjiMEWW28Ho/PUhuNrlKht2hNkIxquywDdqoeMb6 MjmJJSfqsMQlIUyhGI2LaUgRzhIdq/FX9DvkkDW9Tj/Ee22G8xgGe4WMX9B6pqsn glVShczSO82phWbVsj8uUpZJQlNt4AzMypXVhbSKmnMQD1/YbFmtaRtGG2V/zc0w rsTLAWIyH1bbSqAturWhb+XtMa0Mw3WElIGTPyT9kYSmeAA22/dreR7FPi/yjTBf j97bzxkK+eIc8h8E/TcFoaPddUEmO+Mwh69Ik0tO5N03ZhDxuFkab0503XcdW+tS cSTZrKc+lUyYvoKrrskCS5O2Opo3RNALKts= -----END CERTIFICATE-----Generated at Tue Nov 4 04:13:58 2025 by rpki-client