$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa File: 9372f1da-2319-36ef-b51a-176cc6e0a58d.roa (raw, json) Hash identifier: dUWWSujPyAkHmpblH62HhgnJE3jJQfbPbEBSscYIpCM= Subject key identifier: 8F:82:20:B5:6E:C1:22:C7:87:C9:7A:59:A4:29:C9:52:72:F8:A8:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F5F401B5B62C39204F18 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 43633 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f5:f4:01:b5:b6:2c:39:20:4f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=cedd8dd7-bd2c-417e-b982-51ccf8844b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:00:97:57:92:05:ca:ee:05:42:9e:1f:aa: d7:92:58:31:30:42:57:7b:47:61:08:3f:b2:29:07: 7e:3d:df:a8:8d:ee:e7:a5:e6:fe:df:6f:ba:05:40: 9b:57:76:7d:c8:87:e0:2a:0c:87:ed:2a:2d:6b:fa: ff:05:01:82:c7:d3:e5:57:89:79:9f:40:fa:d9:4b: 87:83:3a:67:52:7b:ab:c4:f4:06:6a:77:9c:16:e2: f8:93:b2:4d:9d:3a:a6:8f:60:0c:29:60:d2:d3:cd: aa:77:a8:0d:84:24:26:3c:54:62:a2:7f:23:0b:56: e9:1b:75:d9:34:51:8b:6c:e5:02:df:5a:c6:73:67: a1:0b:a4:97:36:8c:33:d0:fb:fe:69:00:ee:a6:2f: 3c:2f:b5:a3:08:b2:28:28:6a:4d:e5:f0:b6:a4:82: 7e:5a:25:35:2b:d4:75:1a:cd:6b:df:82:af:d5:83: 76:00:13:76:ac:a5:9f:cb:6d:46:93:98:87:01:54: 28:6d:88:f1:e4:ed:a0:4e:fb:3f:98:07:31:93:1c: 6d:db:9d:19:3c:cd:f3:62:6d:3d:ec:b3:80:80:20: 18:76:b9:af:17:78:1b:ce:0d:8e:62:6d:08:7b:5c: e1:3e:7b:95:56:34:d3:ae:12:37:e1:ad:d2:f8:08: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:82:20:B5:6E:C1:22:C7:87:C9:7A:59:A4:29:C9:52:72:F8:A8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6d:4b:a4:87:27:2a:43:95:d5:30:b3:84:0a:12:06:4e:c7: 45:b1:19:e8:2f:6d:8f:d7:81:56:99:2f:30:18:69:15:45:b3: 58:4c:dd:5a:76:9c:07:8d:0c:53:ba:aa:c8:c7:c4:f6:65:ec: fa:b5:f8:69:40:9b:63:fb:4b:24:47:29:ad:01:d7:39:ec:13: 4a:e7:46:37:d4:b7:4f:2e:9a:fd:d9:d8:94:ad:a8:43:af:ec: 82:f8:b6:1c:97:b6:da:4d:e3:84:37:43:2e:87:c5:69:13:79: 84:80:90:29:07:ad:89:ed:3c:f3:3a:cd:e0:07:5f:0b:2e:d3: 40:fe:d1:12:8d:fa:b8:b0:7a:70:bd:a9:6f:a7:97:0d:0b:d7: 26:2d:1d:6f:df:8f:60:49:e8:33:27:7b:6f:8f:86:65:57:c4: 1a:38:44:ad:b6:8f:4b:39:da:cd:58:d8:a0:29:c7:6c:70:52: 43:d0:19:0a:69:2b:b8:2d:48:ff:e2:4d:00:f0:d8:af:fa:c4: 15:d8:57:ba:0b:c7:d8:4a:7b:54:c3:03:cb:20:3a:d6:0a:d3: ef:9f:e6:aa:10:6c:60:11:2d:5e:84:cd:b8:cb:47:73:d2:fd: 88:7a:a4:e7:7d:b0:f0:8d:e9:f0:6b:16:62:e5:65:43:71:97: 99:de:ee:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/X0AbW2LDkgTxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2VkZDhkZDctYmQyYy00MTdlLWI5ODItNTFjY2Y4ODQ0YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBcAl1eSBcruBUKeH6rXklgxMEJXe0dhCD+y KQd+Pd+oje7npeb+32+6BUCbV3Z9yIfgKgyH7Sota/r/BQGCx9PlV4l5n0D62UuH gzpnUnurxPQGanecFuL4k7JNnTqmj2AMKWDS082qd6gNhCQmPFRion8jC1bpG3XZ NFGLbOUC31rGc2ehC6SXNowz0Pv+aQDupi88L7WjCLIoKGpN5fC2pIJ+WiU1K9R1 Gs1r34Kv1YN2ABN2rKWfy21Gk5iHAVQobYjx5O2gTvs/mAcxkxxt250ZPM3zYm09 7LOAgCAYdrmvF3gbzg2OYm0Ie1zhPnuVVjTTrhI34a3S+AhW+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+CILVuwSLHh8l6WaQpyVJy+KhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTM3MmYxZGEtMjMxOS0z NmVmLWI1MWEtMTc2Y2M2ZTBhNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIttS6SHJypDldUws4QKEgZOx0WxGegvbY/XgVaZLzAYaRVFs1hM 3Vp2nAeNDFO6qsjHxPZl7Pq1+GlAm2P7SyRHKa0B1znsE0rnRjfUt08umv3Z2JSt qEOv7IL4thyXttpN44Q3Qy6HxWkTeYSAkCkHrYntPPM6zeAHXwsu00D+0RKN+riw enC9qW+nlw0L1yYtHW/fj2BJ6DMne2+PhmVXxBo4RK22j0s52s1Y2KApx2xwUkPQ GQppK7gtSP/iTQDw2K/6xBXYV7oLx9hKe1TDA8sgOtYK0++f5qoQbGARLV6EzbjL R3PS/Yh6pOd9sPCN6fBrFmLlZUNxl5ne7q4= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:21 2025 by rpki-client