$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa File: 95226b10-52b4-371f-bcca-b8292556b99e.roa (raw, json) Hash identifier: 8x2ak5MNOy2ahh1bwfNcb+7MAgmi47mwIoEC8lWkA/8= Subject key identifier: 9F:2B:A9:44:7C:A5:1D:11:01:AA:6D:EF:60:F9:F8:4E:41:BA:FF:31 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BBEE7422CCEFB50ADAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395681 IP address blocks: 2001:470:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bb:ee:74:22:cc:ef:b5:0a:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=72423ed1-8cee-4aad-9ba8-5c9cb9f63600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:27:a9:31:72:8f:2b:56:fb:84:d5:b9:c5: e4:1b:92:24:ab:1c:67:ae:e7:38:6c:70:4a:ca:1e: ec:55:e5:89:e7:ed:4c:b8:c8:3a:92:93:e9:c4:fa: 92:88:e3:b9:7c:59:43:88:6a:12:0a:cb:82:a6:be: c2:6c:16:38:3e:68:9f:eb:cf:29:f7:7b:5c:4b:d1: e0:66:5d:6a:cf:32:2d:6c:35:77:f3:ea:e6:1d:7d: f8:f6:93:f8:74:ef:52:d8:0c:31:4d:04:e0:c1:f6: ef:b3:6f:5c:9b:35:27:da:61:54:48:23:ca:ee:c8: c3:8a:bb:9a:3a:3b:5b:fb:a6:89:5f:64:69:5f:d7: 40:c5:21:04:7b:6b:58:e2:d0:40:49:59:ad:28:37: d6:38:66:7f:ed:bc:80:55:b9:51:c0:68:dc:06:e3: ea:4b:32:77:7c:73:ee:1c:7f:e9:d0:41:df:94:70: 0d:02:b9:a0:ca:f4:43:8d:07:ed:56:df:da:4e:83: ad:7f:e9:72:c3:3d:eb:e7:3b:1a:a8:19:14:b1:21: 2a:bf:86:65:54:6c:25:fa:b9:2d:c3:dd:65:f0:9f: d7:24:b0:e5:ad:12:68:6a:8b:21:de:d1:e9:3b:e5: dd:30:26:8f:d5:3b:41:e7:aa:77:77:87:76:74:d1: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:A9:44:7C:A5:1D:11:01:AA:6D:EF:60:F9:F8:4E:41:BA:FF:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95226b10-52b4-371f-bcca-b8292556b99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:49:b2:29:d5:1e:10:3c:ac:54:07:0f:93:27:7a:45:3b:b7: 47:2b:78:ed:61:36:32:a2:65:0a:8b:62:4e:1d:cb:90:cb:5b: b7:3d:9e:68:2e:d7:f8:59:5f:00:db:a6:0d:be:c3:3a:83:a1: 1e:10:77:5b:1f:82:1e:9c:61:86:89:99:72:89:f9:71:76:ac: 54:87:b4:59:5a:b0:84:7c:83:38:0f:ab:c7:cf:8a:1d:a6:98: 94:59:8d:6e:d9:a4:a6:96:5b:71:77:89:23:a7:03:dd:11:25: 07:94:bb:56:b6:63:45:8a:00:69:fe:58:f1:70:b6:f3:ea:50: 68:e1:5e:97:e6:71:49:c9:0c:46:98:b2:93:ac:1e:ca:49:f6: 86:c4:56:c5:f1:07:4f:97:04:3d:5a:de:2d:34:38:9f:d8:58: 75:e7:fe:cd:bb:f9:fe:75:0b:2c:a1:a5:49:47:ba:5a:04:a4: 87:5c:dc:e0:15:7a:1c:7e:41:19:b0:48:61:6e:05:b9:a3:d2: df:c1:d5:67:ea:e2:45:8d:78:0e:f9:65:51:b6:dc:20:d6:5b: b0:16:61:32:20:d9:4f:bc:4b:6c:16:bb:47:c3:5e:ce:f1:51: d3:c0:6f:9e:11:41:87:f5:34:9d:75:32:18:ab:65:68:33:d6: c6:fa:ad:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17vudCLM77UK2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzI0MjNlZDEtOGNlZS00YWFkLTliYTgtNWM5Y2I5ZjYzNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp4nqTFyjytW+4TVucXkG5Ikqxxnruc4bHBK yh7sVeWJ5+1MuMg6kpPpxPqSiOO5fFlDiGoSCsuCpr7CbBY4Pmif688p93tcS9Hg Zl1qzzItbDV38+rmHX349pP4dO9S2AwxTQTgwfbvs29cmzUn2mFUSCPK7sjDirua Ojtb+6aJX2RpX9dAxSEEe2tY4tBASVmtKDfWOGZ/7byAVblRwGjcBuPqSzJ3fHPu HH/p0EHflHANArmgyvRDjQftVt/aToOtf+lywz3r5zsaqBkUsSEqv4ZlVGwl+rkt w91l8J/XJLDlrRJoaosh3tHpO+XdMCaP1TtB56p3d4d2dNEA5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8rqUR8pR0RAapt72D5+E5Buv8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTUyMjZiMTAtNTJiNC0z NzFmLWJjY2EtYjgyOTI1NTZiOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtJsinVHhA8rFQHD5MnekU7t0creO1hNjKiZQqLYk4dy5DLW7c9 nmgu1/hZXwDbpg2+wzqDoR4Qd1sfgh6cYYaJmXKJ+XF2rFSHtFlasIR8gzgPq8fP ih2mmJRZjW7ZpKaWW3F3iSOnA90RJQeUu1a2Y0WKAGn+WPFwtvPqUGjhXpfmcUnJ DEaYspOsHspJ9obEVsXxB0+XBD1a3i00OJ/YWHXn/s27+f51CyyhpUlHuloEpIdc 3OAVehx+QRmwSGFuBbmj0t/B1Wfq4kWNeA75ZVG23CDWW7AWYTIg2U+8S2wWu0fD Xs7xUdPAb54RQYf1NJ11MhirZWgz1sb6rUU= -----END CERTIFICATE-----Generated at Sat Oct 25 05:32:34 2025 by rpki-client