$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b987d205-1332-391b-928a-6b7aa63ce4ce.roa File: b987d205-1332-391b-928a-6b7aa63ce4ce.roa (raw, json) Hash identifier: IP3xLqBZUnuyat2IV9OUI4SBa5Htm9FXOwzq1xDIdxY= Subject key identifier: A6:04:D0:9F:B8:7D:80:C7:27:C4:7A:BC:39:2E:54:86:A3:C9:38:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D18F752C05934241E0E4 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b987d205-1332-391b-928a-6b7aa63ce4ce.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 15461 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d1:8f:75:2c:05:93:42:41:e0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e3ff2ad9-cf30-408a-9428-3b42af9987f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:df:3b:64:16:db:3b:fc:2d:b4:7d:f0:3f: 03:0b:1a:75:03:a1:02:fe:37:7e:be:2a:a1:d5:82: 40:7c:cb:1f:6f:dd:83:ed:d3:52:36:1f:19:49:4f: 13:54:de:a0:05:07:dc:23:62:05:82:ef:15:e9:69: c0:09:47:35:aa:1d:ab:c6:23:83:76:de:6d:cf:92: c7:be:7a:62:d1:79:55:f7:32:24:ea:1a:8d:e7:2b: b2:d5:52:ed:13:56:e1:5d:8a:f0:7d:87:7d:11:6a: bb:74:34:89:89:60:ba:a4:d9:c7:a9:bd:40:08:74: 56:5a:36:42:39:69:e8:37:da:87:c9:cc:db:33:95: 1f:b4:84:92:e4:9f:8c:c2:50:a5:69:ba:cb:83:15: d8:ae:6e:8b:2b:9c:a9:67:56:c2:53:f4:5d:db:b1: 11:17:10:b4:cb:eb:89:f3:e0:4e:50:b2:29:db:88: 9e:eb:25:7b:2f:dc:30:23:b1:5a:6c:f8:63:df:5e: 2d:27:f0:aa:e1:ab:59:80:de:ca:bd:d3:48:de:2a: cd:9a:1c:37:e0:93:1a:c9:33:bb:c2:f0:ab:24:af: 3d:0e:a8:fc:38:d3:ba:3e:6c:45:63:2a:5f:4e:33: 52:bb:e6:aa:09:4c:8a:6c:84:e3:c5:f1:8e:47:fe: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:04:D0:9F:B8:7D:80:C7:27:C4:7A:BC:39:2E:54:86:A3:C9:38:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b987d205-1332-391b-928a-6b7aa63ce4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e4:82:d1:13:f6:b3:b4:42:3e:56:8a:d7:d5:62:8c:a0:59: 2d:54:83:f8:7d:77:cd:8a:db:b1:01:f2:0a:fe:d4:4c:0f:cb: 64:07:bc:07:08:ec:f0:ad:d6:5c:8b:e9:3e:f6:4f:f8:61:41: 56:20:46:99:b1:f5:78:2b:e7:c5:70:c2:f3:29:a9:dd:ba:70: 5a:f8:88:6f:e6:37:a5:0c:c8:8b:bc:f3:39:a6:f3:a3:4e:7c: 6e:8b:be:10:4b:09:db:27:84:20:42:51:d2:54:c0:15:91:e5: 1d:69:79:9a:f1:0a:1a:7d:fa:0f:b9:82:f2:6c:e6:fe:e7:a2: d5:3c:99:0e:16:cb:f3:1f:e8:a2:87:a5:33:7d:e8:fb:a3:4f: ef:0c:52:36:7f:2a:6f:e9:d5:b9:9c:21:a8:db:ed:1d:88:29: 7c:8f:9f:fe:9f:fc:63:43:37:c0:3c:ad:f3:50:9b:35:38:6b: cb:52:58:d0:c6:5e:90:86:a3:dc:1b:b3:3c:bd:3c:23:63:90: cc:23:45:0c:28:05:fa:e6:c3:03:87:16:30:99:cc:f9:83:3c: 50:2e:52:52:48:93:ba:2f:af:bc:d8:fe:da:9c:0a:4b:03:02: 9a:05:1a:2f:48:f2:2a:1a:40:5b:c0:2a:39:46:9f:5d:89:73: 4f:6e:7f:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19GPdSwFk0JB4OQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTNmZjJhZDktY2YzMC00MDhhLTk0MjgtM2I0MmFmOTk4N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8XfO2QW2zv8LbR98D8DCxp1A6EC/jd+viqh 1YJAfMsfb92D7dNSNh8ZSU8TVN6gBQfcI2IFgu8V6WnACUc1qh2rxiODdt5tz5LH vnpi0XlV9zIk6hqN5yuy1VLtE1bhXYrwfYd9EWq7dDSJiWC6pNnHqb1ACHRWWjZC OWnoN9qHyczbM5UftISS5J+MwlClabrLgxXYrm6LK5ypZ1bCU/Rd27ERFxC0y+uJ 8+BOULIp24ie6yV7L9wwI7FabPhj314tJ/Cq4atZgN7KvdNI3irNmhw34JMayTO7 wvCrJK89Dqj8ONO6PmxFYypfTjNSu+aqCUyKbITjxfGOR/56bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKYE0J+4fYDHJ8R6vDkuVIajyThUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjk4N2QyMDUtMTMzMi0z OTFiLTkyOGEtNmI3YWE2M2NlNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXkgtET9rO0Qj5WitfVYoygWS1Ug/h9d82K27EB8gr+1EwPy2QH vAcI7PCt1lyL6T72T/hhQVYgRpmx9Xgr58VwwvMpqd26cFr4iG/mN6UMyIu88zmm 86NOfG6LvhBLCdsnhCBCUdJUwBWR5R1peZrxChp9+g+5gvJs5v7notU8mQ4Wy/Mf 6KKHpTN96PujT+8MUjZ/Km/p1bmcIajb7R2IKXyPn/6f/GNDN8A8rfNQmzU4a8tS WNDGXpCGo9wbszy9PCNjkMwjRQwoBfrmwwOHFjCZzPmDPFAuUlJIk7ovr7zY/tqc CksDApoFGi9I8ioaQFvAKjlGn12Jc09uf8o= -----END CERTIFICATE-----Generated at Tue Oct 28 12:35:46 2025 by rpki-client