$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa File: 9abe08a3-894f-3656-a420-d1dae8ad45e6.roa (raw, json) Hash identifier: yLnYKKwIjdsQkB/UL4Hve17EaiWIlmDDMXiGF54uQF0= Subject key identifier: B4:96:50:7D:91:55:A3:44:71:BC:71:55:91:D8:7E:62:61:1D:B7:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CEC69AFCEE5B8766E7E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30886 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ce:c6:9a:fc:ee:5b:87:66:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f1adfc79-21ce-490e-886b-b42eca2e7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:7f:4d:65:28:bd:66:70:97:a1:f5:b0:01: 40:cc:fc:cd:27:c2:54:0b:39:3c:9b:bc:f6:18:04: 64:72:4e:32:90:4d:38:fb:ee:5c:d1:d0:0b:c5:d4: 1c:39:2a:5f:e5:4d:e6:06:04:b5:6d:52:5e:12:96: 0b:63:a1:ec:17:d5:ed:f7:a4:cb:7d:32:82:c0:9e: 83:a2:18:5f:63:15:8e:3a:1b:af:b8:d8:42:64:3c: f0:59:76:bc:f9:10:69:4b:19:49:ce:a7:c7:ce:bd: a2:b2:ef:3a:1f:3d:55:8d:74:74:7b:5a:6e:15:b4: cd:57:a8:35:a7:b1:5c:b5:67:f3:36:59:80:da:06: 78:e3:52:57:27:e6:1e:65:39:a4:14:eb:ac:10:3b: eb:31:b2:b8:fe:c8:53:6c:70:4e:11:0a:19:7f:c2: c3:de:da:52:09:80:55:a0:6b:f5:9e:18:e8:db:3f: 3b:ef:2c:b5:29:61:cc:2a:17:a9:30:47:db:7d:a3: fa:ae:7b:92:fe:f1:4f:de:fb:07:f0:83:f8:af:3f: dd:1f:fb:66:44:4e:03:eb:90:e5:7f:ad:9b:33:bb: d1:2b:34:64:52:67:3b:10:82:11:aa:5c:48:60:60: 23:35:05:98:07:4d:9b:a9:87:dd:fd:b8:48:8d:b6: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:50:7D:91:55:A3:44:71:BC:71:55:91:D8:7E:62:61:1D:B7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:13:e0:c3:b4:e0:21:88:70:cf:1b:e6:36:ae:93:9a:af:57: a2:1f:34:20:9b:c4:bf:9e:8a:d0:a3:dc:24:44:d5:a0:8c:ae: 31:a0:5c:57:1e:9e:b9:9d:53:f1:ba:af:4e:53:61:65:8b:04: 15:33:03:17:45:a7:c7:bf:c0:52:82:47:cf:c1:9a:c5:1f:f9: a9:7f:57:76:28:9e:42:8e:78:91:ce:06:8c:ab:99:1f:cb:b2: d6:55:69:f2:c6:08:c8:82:99:7a:13:c0:cd:de:0b:21:f9:4f: 5b:84:e2:af:8d:e7:84:d4:a9:45:4b:e0:69:14:ed:4a:df:f1: 46:cb:04:55:b7:93:2f:08:5b:96:b7:74:c6:85:6a:a1:1c:1c: 9b:f6:a1:13:7f:b1:de:8e:6b:f8:6f:54:f4:d7:50:03:8c:35: 7c:1d:bf:d9:d1:5d:2e:2f:ce:9f:d7:6b:6b:40:ed:06:52:71: 50:4e:e1:03:15:cc:e1:b5:c3:df:7c:7a:47:1f:52:40:20:17: ec:c8:4b:d2:cf:d1:30:64:7e:c0:cb:47:ec:bd:6f:99:f2:64: d7:20:1b:31:7a:70:36:29:61:0e:da:2a:04:12:49:03:61:eb: 4a:d9:09:b2:d2:e5:14:91:3f:b3:ba:01:84:18:56:4b:23:78: fc:c6:f6:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ187GmvzuW4dm5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjFhZGZjNzktMjFjZS00OTBlLTg4NmItYjQyZWNhMmU3NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZ/TWUovWZwl6H1sAFAzPzNJ8JUCzk8m7z2 GARkck4ykE04++5c0dALxdQcOSpf5U3mBgS1bVJeEpYLY6HsF9Xt96TLfTKCwJ6D ohhfYxWOOhuvuNhCZDzwWXa8+RBpSxlJzqfHzr2isu86Hz1VjXR0e1puFbTNV6g1 p7FctWfzNlmA2gZ441JXJ+YeZTmkFOusEDvrMbK4/shTbHBOEQoZf8LD3tpSCYBV oGv1nhjo2z877yy1KWHMKhepMEfbfaP6rnuS/vFP3vsH8IP4rz/dH/tmRE4D65Dl f62bM7vRKzRkUmc7EIIRqlxIYGAjNQWYB02bqYfd/bhIjbbiEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSWUH2RVaNEcbxxVZHYfmJhHbeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWFiZTA4YTMtODk0Zi0z NjU2LWE0MjAtZDFkYWU4YWQ0NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJwT4MO04CGIcM8b5jauk5qvV6IfNCCbxL+eitCj3CRE1aCMrjGg XFcenrmdU/G6r05TYWWLBBUzAxdFp8e/wFKCR8/BmsUf+al/V3YonkKOeJHOBoyr mR/LstZVafLGCMiCmXoTwM3eCyH5T1uE4q+N54TUqUVL4GkU7Urf8UbLBFW3ky8I W5a3dMaFaqEcHJv2oRN/sd6Oa/hvVPTXUAOMNXwdv9nRXS4vzp/Xa2tA7QZScVBO 4QMVzOG1w998ekcfUkAgF+zIS9LP0TBkfsDLR+y9b5nyZNcgGzF6cDYpYQ7aKgQS SQNh60rZCbLS5RSRP7O6AYQYVksjePzG9jc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:42 2025 by rpki-client