$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa File: baba8a46-5e4b-3132-a577-25dfcc514262.roa (raw, json) Hash identifier: 9qu+P9EDuipN29lc1Ce3dMurgFv3x9F78xd6o/2y1Es= Subject key identifier: EB:B2:69:57:6C:22:45:70:FE:25:89:2B:4F:3F:49:24:43:1A:C5:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CE4F55B7F53C0DB681B8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 147024 IP address blocks: 2001:470:21d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ce:4f:55:b7:f5:3c:0d:b6:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=95ac227e-01b1-4cc5-81c8-a17adca89722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:d3:cf:a1:eb:dc:fd:9d:19:9b:82:90:69: e6:bd:d2:e6:9c:49:e3:53:db:35:9f:12:69:ee:38: 51:21:46:d9:d8:45:b2:4d:37:a5:38:d8:7c:6a:29: 47:e4:c4:78:65:75:fe:ea:ab:86:b5:bb:9b:b0:56: e3:df:06:a8:aa:39:33:62:3f:c4:a5:a8:5d:64:35: eb:c7:21:53:73:02:42:09:8a:9e:1b:b7:d4:14:94: 3d:b0:4f:23:31:39:4e:31:5f:71:0d:3c:e3:72:ea: 05:5d:c3:c8:1b:80:36:a4:55:e0:2c:ec:c7:f8:59: d3:ae:85:ca:1f:22:07:e6:f4:8b:b2:46:ab:1d:81: 93:3c:79:85:d5:52:20:5c:e5:4f:c3:16:ab:9b:09: de:2c:62:68:1d:d8:3b:a1:d3:7f:fb:e2:4f:9e:76: 91:0e:d9:61:14:10:78:88:fb:dd:d4:cc:4c:87:72: 03:38:b7:27:44:5f:f6:65:42:ea:c4:28:e4:f9:15: 63:93:b1:90:4f:0e:b5:ed:d8:22:f0:27:13:19:1b: 15:81:ca:82:d6:61:2f:80:3b:42:15:85:ac:ee:9f: b3:27:08:64:10:92:4c:7b:07:48:6e:89:02:b7:ae: 6f:20:34:9d:9f:6b:49:1a:b1:4b:d9:2c:85:c5:c1: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:69:57:6C:22:45:70:FE:25:89:2B:4F:3F:49:24:43:1A:C5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baba8a46-5e4b-3132-a577-25dfcc514262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e0:71:04:55:0e:bf:d5:c9:3a:b4:98:f3:fd:11:69:bb:62: 27:0c:7a:77:fc:a4:07:2d:2b:85:43:dc:10:b1:32:5b:f4:3a: 30:ea:92:17:c8:0a:36:a6:15:f6:f3:ab:a2:77:33:3f:1b:81: 3a:f1:d2:4d:3f:69:d9:cc:a1:ce:7c:9f:f1:8a:fa:2b:4d:8f: f2:a0:d3:9f:ba:72:a7:60:20:15:e9:fd:72:5e:79:f3:b6:b9: e6:37:46:6c:25:94:c6:b2:1f:71:7c:0d:99:ab:dc:12:54:9f: 16:62:f0:ed:7c:c4:df:1a:e6:49:31:08:0f:a7:d3:60:03:d2: 3d:08:9b:16:c5:c7:0d:90:92:7d:8f:6e:bf:9d:88:db:4a:9d: 38:39:2f:87:23:1d:16:55:9d:b0:38:85:02:40:79:f1:0c:91: e2:32:0d:f8:f9:52:a6:5f:2b:2a:72:6a:cd:24:5d:5b:68:fc: 98:03:c1:57:80:c8:e7:38:a4:05:a1:e2:38:de:94:a1:be:33: 65:8e:94:36:fd:2e:b6:61:a8:d9:cd:e0:50:d1:d5:90:da:ed: 83:d0:bd:21:56:7f:fe:63:dc:8a:2a:59:65:45:6a:53:00:12: e2:3b:7f:7d:8c:a7:9c:28:14:62:d5:2c:15:cc:80:00:30:9c: e6:63:c4:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ185PVbf1PA22gbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTVhYzIyN2UtMDFiMS00Y2M1LTgxYzgtYTE3YWRjYTg5NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCjTz6Hr3P2dGZuCkGnmvdLmnEnjU9s1nxJp 7jhRIUbZ2EWyTTelONh8ailH5MR4ZXX+6quGtbubsFbj3waoqjkzYj/EpahdZDXr xyFTcwJCCYqeG7fUFJQ9sE8jMTlOMV9xDTzjcuoFXcPIG4A2pFXgLOzH+FnTroXK HyIH5vSLskarHYGTPHmF1VIgXOVPwxarmwneLGJoHdg7odN/++JPnnaRDtlhFBB4 iPvd1MxMh3IDOLcnRF/2ZULqxCjk+RVjk7GQTw617dgi8CcTGRsVgcqC1mEvgDtC FYWs7p+zJwhkEJJMewdIbokCt65vIDSdn2tJGrFL2SyFxcHXFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOuyaVdsIkVw/iWJK08/SSRDGsUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmFiYThhNDYtNWU0Yi0z MTMyLWE1NzctMjVkZmNjNTE0MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAId MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3gcQRVDr/VyTq0mPP9EWm7YicMenf8pActK4VD3BCxMlv0OjDq khfICjamFfbzq6J3Mz8bgTrx0k0/adnMoc58n/GK+itNj/Kg05+6cqdgIBXp/XJe efO2ueY3RmwllMayH3F8DZmr3BJUnxZi8O18xN8a5kkxCA+n02AD0j0ImxbFxw2Q kn2Pbr+diNtKnTg5L4cjHRZVnbA4hQJAefEMkeIyDfj5UqZfKypyas0kXVto/JgD wVeAyOc4pAWh4jjelKG+M2WOlDb9LrZhqNnN4FDR1ZDa7YPQvSFWf/5j3IoqWWVF alMAEuI7f32Mp5woFGLVLBXMgAAwnOZjxCc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:39 2025 by rpki-client