$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa File: 7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa (raw, json) Hash identifier: oiBFu4qeKXsf3X5B9ek37/HBfSBM/RDjF/9YbRs96Ys= Subject key identifier: BF:CE:8E:63:B2:21:82:BE:A6:23:98:99:7C:60:A6:7F:83:81:54:13 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F13392E783D6A7A4D080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 983 IP address blocks: 2001:470:21e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f1:33:92:e7:83:d6:a7:a4:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=43d6ed94-4ba4-424e-bd85-7c331e389b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:a4:1c:bc:5b:8b:43:57:bd:a7:61:57:6e: b5:70:3b:43:b5:13:08:5d:fb:43:79:5e:f3:3a:65: 26:df:7c:23:c3:5c:bb:cd:b6:f0:2f:02:a1:d7:ee: 0b:21:e3:cf:87:5e:af:fe:51:77:44:a2:b7:70:14: a9:9d:45:ad:f7:40:ed:c0:70:58:a8:be:d4:20:2e: 52:1e:2a:79:73:45:f5:16:41:c2:5d:35:59:c0:e2: 71:98:6c:12:df:ff:9f:21:4d:5e:8e:06:11:27:34: f0:2b:ec:88:f1:68:0c:61:af:d3:09:6f:76:b4:d1: 9a:ae:7e:dc:ca:d3:e0:b7:cf:bc:ee:e1:42:f2:79: 41:94:cd:f6:44:2a:ec:0b:19:0e:53:2e:32:04:51: 76:85:e1:70:51:48:6e:f5:b5:af:82:14:a6:49:b8: 75:fc:b4:05:bc:41:53:53:56:ff:cf:3f:d1:6d:cc: a4:a0:58:55:64:fa:29:d3:40:c9:37:17:9c:1c:fe: 67:58:c2:e0:9f:39:6a:e6:fb:16:9c:68:83:b9:61: b1:ce:c2:2d:1d:21:34:85:2a:f0:16:42:49:e2:7a: 0d:50:03:80:d5:5b:a5:ff:d7:74:2d:8f:c7:b1:b0: 23:ff:f5:c9:04:fd:2c:24:55:5e:e7:44:e2:b3:0d: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:8E:63:B2:21:82:BE:A6:23:98:99:7C:60:A6:7F:83:81:54:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:16:9c:c2:d0:cf:e3:1b:5d:99:57:27:97:6a:f9:27:e3:f5: f1:94:67:ef:cd:bc:de:5a:bf:6b:08:5c:84:33:73:a8:08:25: ad:c3:cc:f8:c3:09:16:a5:f2:af:63:d2:a2:db:42:1a:7c:07: ad:90:dd:8d:22:1c:e9:c1:5d:8e:49:25:1e:87:3b:d3:94:97: 0c:83:98:00:e6:de:9c:96:bb:48:c4:e4:1d:19:cc:2b:85:b7: f4:c4:0c:c0:6e:6f:d1:fb:d5:30:af:ba:69:c7:72:ed:a6:f2: 8f:76:56:b6:d4:a6:18:77:1e:ba:96:46:d1:00:26:37:9a:60: af:c6:77:ce:37:c4:d2:47:17:6f:f5:61:dc:d7:26:d8:f0:1d: 6b:b3:07:f2:22:86:2e:d6:73:2d:0d:e7:0c:7c:b4:5c:d2:06: 18:d1:f6:83:5f:dd:fb:34:c6:47:bd:a5:31:0b:e4:ff:06:de: 49:fc:6e:b0:1b:59:76:16:71:42:61:e2:55:aa:2b:61:96:8a: bf:fa:12:63:f0:12:a6:9a:35:01:0f:a6:32:87:5d:5c:71:23: 23:be:dc:79:6a:bc:22:fb:2b:37:6a:41:60:73:64:36:9c:2f: 03:64:aa:ad:fa:4d:f8:6a:8a:f5:c6:8c:c5:d5:3e:c2:1f:45: 16:9f:f6:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/EzkueD1qek0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDNkNmVkOTQtNGJhNC00MjRlLWJkODUtN2MzMzFlMzg5YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3GkHLxbi0NXvadhV261cDtDtRMIXftDeV7z OmUm33wjw1y7zbbwLwKh1+4LIePPh16v/lF3RKK3cBSpnUWt90DtwHBYqL7UIC5S Hip5c0X1FkHCXTVZwOJxmGwS3/+fIU1ejgYRJzTwK+yI8WgMYa/TCW92tNGarn7c ytPgt8+87uFC8nlBlM32RCrsCxkOUy4yBFF2heFwUUhu9bWvghSmSbh1/LQFvEFT U1b/zz/RbcykoFhVZPop00DJNxecHP5nWMLgnzlq5vsWnGiDuWGxzsItHSE0hSrw FkJJ4noNUAOA1Vul/9d0LY/HsbAj//XJBP0sJFVe50Tisw2qVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/OjmOyIYK+piOYmXxgpn+DgVQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2VhZDk1ZmMtZWRiYS0z ODEyLWIxYzItYzdjZDRjZjFkZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIWnMLQz+MbXZlXJ5dq+Sfj9fGUZ+/NvN5av2sIXIQzc6gIJa3D zPjDCRal8q9j0qLbQhp8B62Q3Y0iHOnBXY5JJR6HO9OUlwyDmADm3pyWu0jE5B0Z zCuFt/TEDMBub9H71TCvumnHcu2m8o92VrbUphh3HrqWRtEAJjeaYK/Gd843xNJH F2/1YdzXJtjwHWuzB/Iihi7Wcy0N5wx8tFzSBhjR9oNf3fs0xke9pTEL5P8G3kn8 brAbWXYWcUJh4lWqK2GWir/6EmPwEqaaNQEPpjKHXVxxIyO+3HlqvCL7KzdqQWBz ZDacLwNkqq36TfhqivXGjMXVPsIfRRaf9pE= -----END CERTIFICATE-----Generated at Sat Oct 25 20:09:38 2025 by rpki-client