$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa File: a0a5fafb-9602-388d-b21b-0ba4f6937692.roa (raw, json) Hash identifier: vytIYgqEg9gzw4e7gsInoXK9eV8Kz0mnbmBhPbIjOfk= Subject key identifier: 7E:31:82:10:D0:02:0D:72:88:07:DA:7D:3C:18:CF:FA:15:90:C3:E5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB19285FC337497B6800E1C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 18821 IP address blocks: 2001:470:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:85:fc:33:74:97:b6:80:0e:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c0ae21f0-30a3-45b1-862a-331b30c07ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:80:6d:a2:27:d3:ee:fc:a1:5b:6d:05:54: de:5d:3c:db:13:a9:81:e7:fb:5c:8c:4c:f0:b8:3b: 98:8f:cd:a1:2b:86:37:db:b0:1c:f2:ad:fe:d5:21: 85:6a:bf:89:6a:7a:1a:31:43:07:ca:9c:0a:9d:02: 8a:ab:f2:e1:b0:db:95:c0:ec:aa:e2:73:df:39:f6: 4c:b8:2d:88:60:78:d1:a1:f3:a4:39:eb:8e:3c:f9: 2d:39:02:f7:42:01:ef:e9:75:07:dd:ff:d7:ba:12: b4:17:d1:e3:72:fe:37:59:2e:11:75:cd:04:22:57: 73:4b:89:a2:23:a7:3f:28:53:a7:12:5a:1e:38:91: cb:99:3b:9d:a1:29:b4:37:9f:bb:82:c9:9c:86:78: 71:c1:e1:07:13:b3:a7:2d:c7:27:f2:0a:da:d4:6e: 60:64:25:cd:df:00:2c:a9:06:a0:b9:ad:28:7f:14: d0:6e:7c:eb:48:39:15:a8:03:58:e3:3b:fa:ad:86: 3e:b8:54:18:96:47:c7:9b:8d:c9:b5:c8:d7:0c:85: 5c:df:14:62:12:95:26:b1:1c:99:36:62:3d:09:6b: 3d:26:17:4a:b1:15:42:38:ff:91:0a:2d:68:2c:66: d0:53:3a:0a:74:ae:34:01:62:5f:a0:5a:80:b0:65: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:31:82:10:D0:02:0D:72:88:07:DA:7D:3C:18:CF:FA:15:90:C3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:da:66:ac:75:cf:21:51:73:99:01:46:3c:75:26:87:20:e3: 5b:4a:b0:d8:82:ce:9e:90:2e:95:3b:ec:80:04:16:5e:ae:99: 45:fc:ef:3e:9c:01:1f:d3:ef:52:c7:6d:a4:3a:d2:0c:78:64: 82:76:7a:33:1c:6e:b5:b7:26:c7:dc:8c:82:db:96:45:8a:20: 5a:a4:85:9e:98:11:88:f9:bc:c7:3a:8a:4e:ee:92:92:c6:b0: a1:61:44:60:b7:cc:bf:35:d1:b0:6e:09:76:69:69:92:4a:bf: e5:b1:c8:33:fa:94:14:76:c3:26:c9:bd:dc:50:f5:09:be:ce: c7:a4:22:ce:57:4a:06:67:fb:dc:44:65:0f:70:23:b0:78:33: 46:ef:37:b8:b3:36:fd:0a:bc:e5:90:74:98:77:9b:eb:71:b4: f3:67:b6:00:d4:cf:f3:36:c2:fd:48:8c:08:bf:fc:aa:5d:e3: ab:af:72:6e:40:cc:88:c0:c3:56:35:34:0c:9f:e3:0a:f5:b2: 31:39:c3:b1:c2:8f:29:56:1f:fc:a3:28:81:38:f3:fc:26:8f: 97:ff:88:49:6c:01:57:d3:93:03:82:84:f5:76:a7:cb:b6:79: 9b:38:55:00:4e:a2:51:fe:5b:f5:4b:43:7a:e1:79:f9:bd:29: 71:83:1f:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkoX8M3SXtoAOHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzBhZTIxZjAtMzBhMy00NWIxLTg2MmEtMzMxYjMwYzA3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5SAbaIn0+78oVttBVTeXTzbE6mB5/tcjEzw uDuYj82hK4Y327Ac8q3+1SGFar+JanoaMUMHypwKnQKKq/LhsNuVwOyq4nPfOfZM uC2IYHjRofOkOeuOPPktOQL3QgHv6XUH3f/XuhK0F9Hjcv43WS4Rdc0EIldzS4mi I6c/KFOnEloeOJHLmTudoSm0N5+7gsmchnhxweEHE7OnLccn8gra1G5gZCXN3wAs qQagua0ofxTQbnzrSDkVqANY4zv6rYY+uFQYlkfHm43JtcjXDIVc3xRiEpUmsRyZ NmI9CWs9JhdKsRVCOP+RCi1oLGbQUzoKdK40AWJfoFqAsGUxDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH4xghDQAg1yiAfafTwYz/oVkMPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBhNWZhZmItOTYwMi0z ODhkLWIyMWItMGJhNGY2OTM3NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfaZqx1zyFRc5kBRjx1Jocg41tKsNiCzp6QLpU77IAEFl6umUX8 7z6cAR/T71LHbaQ60gx4ZIJ2ejMcbrW3JsfcjILblkWKIFqkhZ6YEYj5vMc6ik7u kpLGsKFhRGC3zL810bBuCXZpaZJKv+WxyDP6lBR2wybJvdxQ9Qm+zsekIs5XSgZn +9xEZQ9wI7B4M0bvN7izNv0KvOWQdJh3m+txtPNntgDUz/M2wv1IjAi//Kpd46uv cm5AzIjAw1Y1NAyf4wr1sjE5w7HCjylWH/yjKIE48/wmj5f/iElsAVfTkwOChPV2 p8u2eZs4VQBOolH+W/VLQ3rhefm9KXGDHzw= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:40 2025 by rpki-client