$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa File: a91ca0b2-1292-32f5-b167-dc9a75614b82.roa (raw, json) Hash identifier: 39mBEQsQwUlPvj8EMq50HVfx0X5OnOstODqvEZnphro= Subject key identifier: 61:1C:CE:C4:55:83:DA:1B:51:A4:97:0B:26:27:75:C4:E4:F3:2A:D8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D503A22BC4E79880ABE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 55184 IP address blocks: 2001:470:fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d5:03:a2:2b:c4:e7:98:80:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2e453b53-603b-46ca-bd5f-ac92d74db9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:50:dc:36:50:09:4f:ef:1c:f2:e3:38:2b: fb:38:17:cd:08:bf:16:78:43:85:5a:2e:6b:d9:86: 8e:25:eb:eb:4b:0d:60:3b:f3:eb:86:bb:a8:1e:0e: 91:2b:c7:9c:66:4b:ec:9c:74:7d:49:63:94:ad:69: 44:e7:47:40:9f:ec:24:b7:1d:57:8d:fb:50:1c:3e: 1f:2b:07:e4:f3:be:2a:8c:f2:ff:6d:07:c0:bb:79: fd:6a:f1:d0:e4:74:0d:e6:29:ca:d0:40:6e:0a:75: 6c:5f:90:f0:46:59:01:9f:8d:10:f9:8f:0e:54:36: 2e:04:bb:09:c4:bc:1a:29:1f:a0:36:e4:ef:15:84: e1:1b:9b:2d:34:56:4d:09:29:d7:0e:b5:7f:9e:33: f2:15:81:3f:a0:58:e0:b1:0a:94:0d:ba:55:90:26: 19:f4:d6:58:d7:d1:e3:46:8e:ff:b8:e5:54:df:f6: 33:e9:83:83:27:1f:27:40:67:b5:d5:52:90:b6:82: 38:9b:e3:41:0e:f5:c3:de:4f:08:76:c4:fc:bc:be: a2:67:96:75:ee:32:ac:07:89:46:23:16:37:8b:6e: 59:b0:e2:9b:44:52:e1:43:a1:eb:28:4b:03:fc:9d: 9f:4d:c7:16:d3:9c:8f:25:02:7e:ee:2b:e0:26:80: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:CE:C4:55:83:DA:1B:51:A4:97:0B:26:27:75:C4:E4:F3:2A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a91ca0b2-1292-32f5-b167-dc9a75614b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:50:75:88:44:91:ff:12:fb:96:a9:61:b1:1e:4f:eb:a9:73: 00:33:f8:bb:b8:8d:e2:18:36:6c:cf:5b:c1:84:18:c7:8d:d6: 46:6c:63:16:e2:f1:2d:5a:7e:82:bf:ba:1f:31:cf:d0:f6:c2: 3f:7c:32:b4:69:7a:5a:68:82:83:4e:7f:37:0c:47:22:7a:50: 82:d1:87:5e:c0:48:3e:f1:5d:ab:2d:f9:c2:9a:ef:f0:49:da: 0a:d0:4c:98:b4:11:e2:e6:a4:f5:78:73:56:a9:b9:f1:42:95: ed:cb:1d:3e:a8:2b:68:f6:20:2a:b5:6d:c1:2f:c5:93:de:ab: ac:42:fa:9a:fe:cc:05:82:1e:57:0c:88:2a:46:76:c8:6d:5f: 61:e5:10:52:51:80:32:28:e4:ac:12:99:18:bb:8b:1a:33:ee: 6d:35:f4:3b:2f:9b:aa:a8:e9:ca:ab:39:25:16:7f:86:17:47: ab:3a:1a:2a:34:8d:e3:b6:eb:72:7c:6a:d3:2c:1d:d0:1b:ea: 23:0c:d7:fe:67:c2:7a:23:c3:51:7f:c7:71:ab:34:bc:55:16: a5:22:3c:6c:02:cc:f7:18:27:4d:89:e0:79:75:a0:b3:f1:74: 83:d2:52:62:b0:13:ee:75:de:48:7a:c2:36:25:fe:75:48:29: 66:62:fb:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19UDoivE55iAq+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmU0NTNiNTMtNjAzYi00NmNhLWJkNWYtYWM5MmQ3NGRiOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZQ3DZQCU/vHPLjOCv7OBfNCL8WeEOFWi5r 2YaOJevrSw1gO/PrhruoHg6RK8ecZkvsnHR9SWOUrWlE50dAn+wktx1XjftQHD4f Kwfk874qjPL/bQfAu3n9avHQ5HQN5inK0EBuCnVsX5DwRlkBn40Q+Y8OVDYuBLsJ xLwaKR+gNuTvFYThG5stNFZNCSnXDrV/njPyFYE/oFjgsQqUDbpVkCYZ9NZY19Hj Ro7/uOVU3/Yz6YODJx8nQGe11VKQtoI4m+NBDvXD3k8IdsT8vL6iZ5Z17jKsB4lG IxY3i25ZsOKbRFLhQ6HrKEsD/J2fTccW05yPJQJ+7ivgJoC+gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEczsRVg9obUaSXCyYndcTk8yrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTkxY2EwYjItMTI5Mi0z MmY1LWIxNjctZGM5YTc1NjE0YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZQdYhEkf8S+5apYbEeT+upcwAz+Lu4jeIYNmzPW8GEGMeN1kZs Yxbi8S1afoK/uh8xz9D2wj98MrRpelpogoNOfzcMRyJ6UILRh17ASD7xXast+cKa 7/BJ2grQTJi0EeLmpPV4c1apufFCle3LHT6oK2j2ICq1bcEvxZPeq6xC+pr+zAWC HlcMiCpGdshtX2HlEFJRgDIo5KwSmRi7ixoz7m019Dsvm6qo6cqrOSUWf4YXR6s6 Gio0jeO263J8atMsHdAb6iMM1/5nwnojw1F/x3GrNLxVFqUiPGwCzPcYJ02J4Hl1 oLPxdIPSUmKwE+513kh6wjYl/nVIKWZi+00= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:15 2025 by rpki-client