$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9087499b-1427-3639-abd3-a57a3cc2b217.roa File: 9087499b-1427-3639-abd3-a57a3cc2b217.roa (raw, json) Hash identifier: GHbFD7WRSqpT8Q0P+SOJegoFpOypKHUUJw3LoEhMWe8= Subject key identifier: CC:8E:41:04:E6:FF:45:70:95:B2:59:FB:A8:E5:DF:41:5C:92:0B:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CFD8F1C422C0F319C100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9087499b-1427-3639-abd3-a57a3cc2b217.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 201933 IP address blocks: 2001:470:2a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cf:d8:f1:c4:22:c0:f3:19:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1bbb789f-f437-4abb-bbe2-3b1b6bf770c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:0a:38:38:ea:a8:5d:06:35:9e:51:62:62: 6b:8a:63:fb:3e:fd:ff:b3:65:78:a6:ed:72:8f:a9: 6f:11:f5:e8:f4:63:e6:0d:c8:57:d8:f3:f5:7a:f3: 73:ff:1b:91:7f:d0:6b:b3:eb:28:e8:ca:e7:68:da: 5e:f5:ce:c2:b5:b0:15:16:04:d8:91:b3:d4:4c:3f: ad:70:97:4c:cf:23:e5:0f:22:13:5a:c5:0b:33:64: 48:88:ed:9b:20:51:aa:d3:8c:c3:75:19:36:ec:55: 5b:be:bf:b8:47:47:b1:bb:53:e3:1a:ae:76:6c:68: 34:a9:17:cd:21:e8:a7:9e:61:7b:86:c9:83:83:4c: 1d:cd:7d:f0:10:fa:fb:f6:81:47:40:86:14:2c:42: 5c:df:f2:52:d0:99:c1:e1:12:03:75:58:ba:4f:aa: 98:96:34:72:d9:d1:46:5e:41:ee:d3:d3:21:b3:c3: 01:66:40:1c:73:22:73:c5:27:fa:02:d6:12:7d:fa: 3d:2c:ee:ee:2d:40:c2:6b:c6:3f:94:77:01:72:a5: 2a:16:f9:d5:ca:c5:f8:f1:cb:96:c7:6a:dd:5e:55: ba:38:e2:ac:10:2e:a9:bc:36:53:5e:d1:b4:84:a5: 27:c2:65:cb:3a:42:98:9f:13:e1:a4:b1:0a:dd:53: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:41:04:E6:FF:45:70:95:B2:59:FB:A8:E5:DF:41:5C:92:0B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9087499b-1427-3639-abd3-a57a3cc2b217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:49:ae:48:d6:62:8f:62:cb:76:1a:0d:cc:a4:7e:4e:d4:f0: 65:c0:6e:59:c6:2e:30:ac:0a:27:2f:5a:c8:0b:fe:3f:73:01: ae:5c:0a:5c:c3:ac:31:4a:4f:a8:94:8a:44:62:50:31:71:f0: 87:7a:80:95:81:04:29:7e:34:60:e7:08:6f:ce:39:d5:a4:55: fb:df:f7:8c:c0:f2:f8:54:d1:07:6a:ba:50:1c:19:c7:65:66: 54:85:23:11:08:64:2a:16:3e:23:a4:cb:d0:7a:da:30:c2:72: ca:0c:e2:ab:ce:b0:48:27:55:f2:5c:63:aa:fe:68:8b:ca:20: 0b:04:92:40:06:65:9f:d5:59:80:64:53:b5:4f:4c:81:09:a9: 65:e3:0f:41:a3:fd:47:74:81:fb:64:c9:58:2c:e1:8e:f6:d0: 7c:16:ef:7b:55:4e:38:f6:86:c3:d9:86:71:c7:21:a0:62:9f: b5:22:a5:5a:54:76:29:d6:b2:fe:95:c0:08:73:fb:1d:ed:de: 0c:7b:34:a6:cd:c0:ad:4a:85:c7:84:9b:4b:4d:3a:56:10:40: e1:00:c6:5a:c1:30:38:79:26:95:27:e4:08:cd:d0:df:19:6f: 65:c9:31:b1:7d:89:17:cb:1b:06:c6:85:e4:46:8f:8c:21:8a: de:24:44:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18/Y8cQiwPMZwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWJiYjc4OWYtZjQzNy00YWJiLWJiZTItM2IxYjZiZjc3MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpkKODjqqF0GNZ5RYmJrimP7Pv3/s2V4pu1y j6lvEfXo9GPmDchX2PP1evNz/xuRf9Brs+so6MrnaNpe9c7CtbAVFgTYkbPUTD+t cJdMzyPlDyITWsULM2RIiO2bIFGq04zDdRk27FVbvr+4R0exu1PjGq52bGg0qRfN IeinnmF7hsmDg0wdzX3wEPr79oFHQIYULEJc3/JS0JnB4RIDdVi6T6qYljRy2dFG XkHu09Mhs8MBZkAccyJzxSf6AtYSffo9LO7uLUDCa8Y/lHcBcqUqFvnVysX48cuW x2rdXlW6OOKsEC6pvDZTXtG0hKUnwmXLOkKYnxPhpLEK3VNSJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyOQQTm/0VwlbJZ+6jl30FckguxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTA4NzQ5OWItMTQyNy0z NjM5LWFiZDMtYTU3YTNjYzJiMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdJrkjWYo9iy3YaDcykfk7U8GXAblnGLjCsCicvWsgL/j9zAa5c ClzDrDFKT6iUikRiUDFx8Id6gJWBBCl+NGDnCG/OOdWkVfvf94zA8vhU0QdqulAc GcdlZlSFIxEIZCoWPiOky9B62jDCcsoM4qvOsEgnVfJcY6r+aIvKIAsEkkAGZZ/V WYBkU7VPTIEJqWXjD0Gj/Ud0gftkyVgs4Y720HwW73tVTjj2hsPZhnHHIaBin7Ui pVpUdinWsv6VwAhz+x3t3gx7NKbNwK1KhceEm0tNOlYQQOEAxlrBMDh5JpUn5AjN 0N8Zb2XJMbF9iRfLGwbGheRGj4whit4kRAU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:40 2025 by rpki-client