$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa File: b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa (raw, json) Hash identifier: y/Fk99iUUJvF0VEyzKZDWWmhp0gOacJB2ZHb9osY0/U= Subject key identifier: AB:77:B7:8D:FE:19:8C:E9:B5:4B:30:28:EF:6C:1F:6F:4D:86:38:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D4621FAB729F3894DA80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 3853 IP address blocks: 2001:470:2f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d4:62:1f:ab:72:9f:38:94:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=144f593b-41a9-4a95-84dd-5a1f3a5a2c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:02:e9:f8:60:52:f6:15:6b:3d:a4:80:f3: b8:19:ae:9d:bb:e4:62:ab:63:ae:38:f4:14:17:15: 4a:55:d2:30:a1:50:74:2a:cd:22:ed:32:5e:13:a1: ce:4c:78:83:cf:e8:87:7f:fa:bd:af:ab:f4:cc:2a: 55:77:8b:a1:d9:79:ac:d0:c8:4c:ba:34:d6:1b:4a: 90:e5:6f:bf:2d:62:f5:7d:06:1b:12:8c:42:44:1f: 67:82:60:2d:d9:ed:9b:30:e7:67:ed:84:15:f6:98: fe:c7:aa:ea:12:c3:6d:b2:2e:3d:c8:22:70:cd:d5: 31:e5:e1:80:00:a7:96:a0:9a:fa:d0:e0:51:14:f0: e1:23:a2:17:25:cf:78:e8:ee:08:3b:74:ce:7c:5e: f2:36:9a:a4:16:37:f6:55:98:d8:37:19:68:87:a7: a4:76:20:75:64:3e:26:c0:bf:fe:fe:bb:2a:f0:94: 0f:7c:3b:e3:1a:29:c9:15:aa:fb:d5:e8:ec:d5:93: 95:e9:e4:c9:34:62:21:e5:63:56:dc:ee:8b:04:18: a3:3e:1b:29:64:61:a1:c2:34:51:46:0b:fa:b2:fb: fe:2a:1a:ce:8a:da:6b:7d:7a:1d:1f:26:56:17:b9: 64:e8:f5:96:4c:fb:74:1e:1b:4e:a2:c0:7c:54:ec: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:B7:8D:FE:19:8C:E9:B5:4B:30:28:EF:6C:1F:6F:4D:86:38:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:46:2c:f6:d7:52:43:71:57:0e:f4:32:0c:27:7f:81:c4:72: d9:33:60:23:cc:bf:f0:fb:39:ad:e3:78:3e:d6:14:0d:ae:be: 1d:1f:2f:c9:8f:0c:27:e8:23:9a:79:43:44:6c:a1:54:fb:9b: db:69:88:be:9d:3d:b4:ee:1f:23:d0:29:ee:e3:16:38:6e:e8: ec:96:c9:0f:c4:9b:b1:a0:02:09:09:3a:5e:72:ec:7f:ca:75: fc:25:a6:c7:3d:10:e7:1b:c5:e4:9b:95:60:1b:e0:a9:f0:cf: b5:4f:75:10:03:18:39:24:6d:50:af:c5:e7:48:ff:91:28:40: b2:f8:c8:1c:b3:c0:46:8e:da:3e:c6:86:4d:7c:f3:50:eb:be: 24:f1:ca:c7:96:8d:86:6b:ce:ca:4c:08:cd:9a:df:8a:27:45: 40:45:2e:43:c7:9b:ba:e1:d2:ca:25:11:f2:76:f7:08:f2:22: 6c:7b:3a:89:c1:53:a4:11:71:d5:f2:a9:ff:cf:ab:75:65:0d: 45:71:da:8c:3e:e9:42:b2:e7:f3:73:26:2a:b7:44:bc:93:c1: 7d:de:2b:a8:b0:fd:0c:78:80:ce:19:4d:2b:5b:70:e3:f7:64: 93:29:96:55:1f:e6:97:d6:5b:b2:93:33:3e:21:63:7f:45:fc: 5e:dc:e5:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19RiH6tynziU2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTQ0ZjU5M2ItNDFhOS00YTk1LTg0ZGQtNWExZjNhNWEyYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoioC6fhgUvYVaz2kgPO4Ga6du+Riq2OuOPQU FxVKVdIwoVB0Ks0i7TJeE6HOTHiDz+iHf/q9r6v0zCpVd4uh2Xms0MhMujTWG0qQ 5W+/LWL1fQYbEoxCRB9ngmAt2e2bMOdn7YQV9pj+x6rqEsNtsi49yCJwzdUx5eGA AKeWoJr60OBRFPDhI6IXJc946O4IO3TOfF7yNpqkFjf2VZjYNxloh6ekdiB1ZD4m wL/+/rsq8JQPfDvjGinJFar71ejs1ZOV6eTJNGIh5WNW3O6LBBijPhspZGGhwjRR Rgv6svv+KhrOitprfXodHyZWF7lk6PWWTPt0HhtOosB8VOyFYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKt3t43+GYzptUswKO9sH29NhjhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjlhNWYyZDgtOGI3Zi0z NmRlLWI5MDctYTNkOTY5ZGIzNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVGLPbXUkNxVw70Mgwnf4HEctkzYCPMv/D7Oa3jeD7WFA2uvh0f L8mPDCfoI5p5Q0RsoVT7m9tpiL6dPbTuHyPQKe7jFjhu6OyWyQ/Em7GgAgkJOl5y 7H/Kdfwlpsc9EOcbxeSblWAb4Knwz7VPdRADGDkkbVCvxedI/5EoQLL4yByzwEaO 2j7Ghk1881DrviTxyseWjYZrzspMCM2a34onRUBFLkPHm7rh0solEfJ29wjyImx7 OonBU6QRcdXyqf/Pq3VlDUVx2ow+6UKy5/NzJiq3RLyTwX3eK6iw/Qx4gM4ZTStb cOP3ZJMpllUf5pfWW7KTMz4hY39F/F7c5SA= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:36 2025 by rpki-client