
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bc4288f-6ec5-3b29-a17a-c0fc9b80a8a4.roa
File:                     8bc4288f-6ec5-3b29-a17a-c0fc9b80a8a4.roa (raw, json)
Hash identifier:          RgXCrcYPMLP6XPfgsbifjQSJBJ5bdV1h+Obd7eZZx8U=
Subject key identifier:   A9:4A:1B:10:FD:B0:61:B3:68:EB:9D:C0:E3:7F:3E:5A:B1:30:8D:58
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7FA8B4D90BBF9DEF66340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bc4288f-6ec5-3b29-a17a-c0fc9b80a8a4.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     23028
IP address blocks:        2001:470:2c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:fa:8b:4d:90:bb:f9:de:f6:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=9d048758-13ba-434d-990c-8080b66e4e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:ec:33:97:95:33:02:79:b1:cd:9d:99:fd:
                    e9:77:55:13:65:c1:8f:bd:67:dd:d0:20:d7:8e:68:
                    0c:8a:a3:82:43:4f:ff:fb:45:02:9b:b8:14:d3:8f:
                    cc:55:3b:77:a3:ae:8d:a4:9e:6d:bb:7b:27:9b:af:
                    02:b8:9d:c4:30:bd:f5:ed:50:2a:52:1f:5b:41:1f:
                    7f:bd:16:9b:08:cc:c3:5a:88:9a:a2:c4:6e:c7:03:
                    c2:4b:a1:c7:ab:83:05:01:80:73:8e:f5:0d:58:1b:
                    dc:d7:5a:77:4c:4e:4e:a4:21:c0:b8:bb:9b:47:e6:
                    6c:aa:33:11:66:65:c8:e9:70:e2:e4:d3:ff:1e:63:
                    6c:87:c4:b2:25:ff:2e:24:60:d0:7b:05:fa:1f:87:
                    c7:ea:01:94:d4:04:49:e4:2b:40:c6:f6:99:95:ef:
                    ea:a7:00:58:0f:2d:c6:ab:19:d4:3d:ce:c9:1f:fb:
                    c5:ae:f9:9d:a3:d5:31:35:53:9f:c6:e9:fd:2b:99:
                    7c:97:66:34:46:42:50:22:17:24:e6:28:e1:18:61:
                    41:75:d2:0c:7e:b9:8a:9c:b6:7d:08:06:b3:71:22:
                    f1:08:41:e6:2c:9a:38:76:aa:ab:61:00:0a:c7:7a:
                    30:bf:c7:7b:f3:00:71:27:01:93:ea:ee:89:cb:03:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:1B:10:FD:B0:61:B3:68:EB:9D:C0:E3:7F:3E:5A:B1:30:8D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bc4288f-6ec5-3b29-a17a-c0fc9b80a8a4.roa
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c1::/48
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html
    Signature Algorithm: sha256WithRSAEncryption
         ab:5e:7c:7c:db:08:35:99:8f:08:03:c8:0f:32:54:92:c1:eb:
         c9:29:98:cf:49:c6:c9:eb:18:a8:f6:fe:65:d5:97:7b:cc:45:
         0b:a3:3b:41:8f:d7:bf:52:b1:84:16:2f:0e:21:f3:8d:b2:55:
         3a:e9:42:8c:3c:b1:67:b6:e7:c2:a2:a8:f7:4c:91:b3:43:a6:
         0a:40:15:46:64:84:ac:74:2c:7b:7c:65:1e:8c:bd:ed:d3:b5:
         c6:c8:f5:c5:d2:a4:c0:84:a9:ab:4b:09:f7:71:7b:d6:58:a5:
         08:fc:af:f1:07:72:d3:2b:c8:3f:ec:db:ae:11:58:b1:7d:72:
         59:5c:a2:e1:ff:ad:3f:10:1e:1c:e1:53:43:51:62:0d:16:36:
         03:56:fb:e6:89:aa:1a:66:9d:f0:12:e4:aa:15:6e:b2:96:57:
         86:ba:51:78:dc:41:f9:81:98:9c:55:7f:32:61:1b:1b:af:0e:
         7d:ff:de:d6:c4:ff:cb:0a:c0:f1:83:2b:15:ca:7a:9f:2b:cd:
         0f:4b:d2:c4:bf:45:9c:c1:54:10:b8:32:56:4c:dd:7b:c9:52:
         2c:e8:30:97:61:87:99:65:96:dc:bd:82:16:af:ec:c0:c8:9e:
         45:fb:a4:43:8c:d0:f1:d6:cf:24:a2:a1:a4:67:42:2f:39:0d:
         ab:99:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 03:59:08 2025 by rpki-client