$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json) Hash identifier: u9G1gWuGKsd8jRHWwg9R+6qGU0wAhY2KqTIg7QjW6eg= Subject key identifier: B5:49:1F:2F:73:7D:A2:E8:55:E7:77:49:CF:44:01:4C:51:ED:46:61 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F36A9D278A8036988E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 151374 IP address blocks: 2001:470:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f3:6a:9d:27:8a:80:36:98:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9c4ffb55-c23f-4072-916a-6915c1f8fc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:3e:a7:ce:1f:a0:77:ba:90:6c:9f:44:13: be:41:3e:38:8d:18:5f:0d:95:11:93:7d:e7:96:92: 8e:69:ac:de:3a:1a:1d:95:5f:aa:15:ae:ae:e7:06: b5:76:c8:40:ad:e0:de:05:ec:42:bf:51:18:6a:0e: 04:3b:97:dc:a8:b9:e3:8a:f5:e7:12:9d:eb:41:ff: 2d:d4:30:18:de:d5:17:3e:3f:f9:e7:73:ab:6c:08: 00:46:33:17:cb:e9:df:1f:29:2d:9b:55:40:e6:47: 20:46:a9:0f:60:82:d7:ab:10:bd:74:51:95:86:25: aa:87:34:75:2e:9c:84:e1:b2:ec:40:0f:f4:43:44: bf:79:b1:64:c4:11:74:28:74:46:37:2b:c1:ad:fc: 56:a4:2e:3d:74:a7:fe:e5:c0:8a:02:17:98:b3:a8: 04:7c:00:4f:b4:26:0c:25:bd:6e:04:8e:dd:22:20: 51:16:bf:fc:56:a7:50:12:66:f8:27:84:3e:e7:09: 90:f8:4e:d0:9d:a2:1b:f3:b4:29:56:e3:24:8a:2f: 8c:95:67:2b:bb:69:eb:a5:8a:45:16:fa:72:20:ea: 5a:bc:82:ca:13:ca:28:1d:c6:6a:b5:f9:48:ff:ad: 81:ca:f1:eb:82:14:fa:9f:cd:a6:81:61:bc:60:37: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:1F:2F:73:7D:A2:E8:55:E7:77:49:CF:44:01:4C:51:ED:46:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:17:da:7d:b8:cf:03:57:03:01:bd:d5:78:f3:cd:07:2d:f7: f1:6b:31:24:ac:04:5b:f5:75:18:0a:97:55:46:6a:f0:a6:a9: 2b:7a:d6:ef:61:d0:2b:8a:00:67:df:57:c6:96:01:cf:fe:d2: e2:83:0d:43:f2:a2:ae:67:1c:6c:4f:a6:fc:e3:a5:c6:52:65: de:ec:9f:4d:43:65:0f:57:17:0f:4e:14:6e:36:54:21:4c:28: 2a:b3:c4:03:ad:84:05:87:f0:88:1e:d2:bd:bc:f5:cf:9f:02: 6c:6e:34:a8:ac:f9:5d:0d:2f:7e:d7:a1:28:cb:c4:d2:6d:d2: 3b:d1:57:89:0b:c6:8c:75:6b:13:a4:c2:ba:32:e2:2f:7b:cf: 91:ef:97:fd:46:b8:d9:c9:24:bf:33:c0:43:ed:e0:0a:7b:84: 4b:9f:42:2f:00:32:30:c1:af:29:05:b4:9a:74:76:d4:df:1c: 08:3b:b6:f6:d7:cb:66:8a:10:24:d8:17:e8:8e:4b:55:c5:96: 45:a9:60:f8:f7:d8:ba:c7:a5:9f:83:26:53:af:d7:62:7c:6b: 17:d5:96:cf:88:56:f9:07:4d:99:04:be:fe:94:27:33:cf:83: d2:b1:0d:e8:26:4f:22:6b:11:d4:2d:06:86:5c:10:6f:13:7e: 89:38:3d:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/NqnSeKgDaYjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWM0ZmZiNTUtYzIzZi00MDcyLTkxNmEtNjkxNWMxZjhmYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw4+p84foHe6kGyfRBO+QT44jRhfDZURk33n lpKOaazeOhodlV+qFa6u5wa1dshAreDeBexCv1EYag4EO5fcqLnjivXnEp3rQf8t 1DAY3tUXPj/553OrbAgARjMXy+nfHyktm1VA5kcgRqkPYILXqxC9dFGVhiWqhzR1 LpyE4bLsQA/0Q0S/ebFkxBF0KHRGNyvBrfxWpC49dKf+5cCKAheYs6gEfABPtCYM Jb1uBI7dIiBRFr/8VqdQEmb4J4Q+5wmQ+E7QnaIb87QpVuMkii+MlWcru2nrpYpF FvpyIOpavILKE8ooHcZqtflI/62ByvHrghT6n82mgWG8YDeeXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVJHy9zfaLoVed3Sc9EAUxR7UZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ0NTcwYzctMWM1Yy0z MzBjLThjZjQtNGIyMGMzYTJhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4X2n24zwNXAwG91XjzzQct9/FrMSSsBFv1dRgKl1VGavCmqSt6 1u9h0CuKAGffV8aWAc/+0uKDDUPyoq5nHGxPpvzjpcZSZd7sn01DZQ9XFw9OFG42 VCFMKCqzxAOthAWH8Ige0r289c+fAmxuNKis+V0NL37XoSjLxNJt0jvRV4kLxox1 axOkwroy4i97z5Hvl/1GuNnJJL8zwEPt4Ap7hEufQi8AMjDBrykFtJp0dtTfHAg7 tvbXy2aKECTYF+iOS1XFlkWpYPj32LrHpZ+DJlOv12J8axfVls+IVvkHTZkEvv6U JzPPg9KxDegmTyJrEdQtBoZcEG8Tfok4PWg= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:06 2025 by rpki-client