$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5c81438-4bba-30e9-be5e-a8d937aaaffe.roa File: c5c81438-4bba-30e9-be5e-a8d937aaaffe.roa (raw, json) Hash identifier: 9dNq5UrfEsZKhcTw3FyOSenqdM4ZlhdYi8DPBH5NhQg= Subject key identifier: 21:F5:8A:5D:C3:5B:28:75:66:C1:88:4A:49:F1:76:A7:A5:E2:22:4D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B95AB02657E4587B48D223400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5c81438-4bba-30e9-be5e-a8d937aaaffe.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 54408 IP address blocks: 2001:470:3d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:02:65:7e:45:87:b4:8d:22:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=166b3500-987b-4538-b6be-c00b557f65ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:b9:41:b5:0b:52:cb:5c:d1:86:8b:3e:a7: 4c:52:a1:57:01:43:ae:f8:b2:c9:b6:a0:15:db:85: a4:07:78:92:5a:13:5b:1e:85:d9:d0:7f:26:4c:47: 16:c9:06:f1:73:a3:24:c2:d7:5c:01:1e:0b:8f:4d: 36:82:06:60:f7:67:dd:82:42:54:0e:c6:d0:33:e3: 88:4b:b9:6f:68:cb:6f:25:9a:58:33:52:c8:a7:10: 03:22:49:49:af:73:a0:07:f3:05:a5:8f:4a:40:48: dc:e9:e3:72:3e:6f:83:47:6f:de:ce:1d:92:52:2c: 9d:1f:d6:91:b1:58:d9:35:93:cd:d3:02:44:e1:a9: 19:67:53:0a:21:3e:69:5f:1d:91:39:36:33:78:f0: d0:80:5b:c6:91:00:10:2b:1e:21:fd:8d:a7:07:51: e5:6b:f0:52:8c:16:5e:60:8d:f7:88:b3:38:71:30: e1:16:12:eb:a7:a8:d9:2d:98:3f:54:15:e6:f3:c5: fd:6c:00:76:27:13:fe:e3:9d:9a:a0:d8:1a:08:cc: 66:a9:9f:0c:92:dc:f7:2c:43:39:41:49:67:9b:31: c6:48:ec:24:30:e8:7a:74:32:13:a0:82:34:49:81: 78:e8:2f:54:e9:da:de:23:7c:c7:f6:01:12:cf:3d: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F5:8A:5D:C3:5B:28:75:66:C1:88:4A:49:F1:76:A7:A5:E2:22:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5c81438-4bba-30e9-be5e-a8d937aaaffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a3:25:3c:41:bc:2e:07:f2:f1:3b:ff:08:5e:f3:7a:6b:aa: dc:a0:29:4d:9a:2a:cc:79:f9:a6:14:48:17:a1:57:09:2e:01: 10:ba:bd:3d:a0:5e:8b:d1:e8:90:de:c7:d0:21:f0:d6:4f:ee: f8:e3:6b:d8:8c:0e:6d:25:bc:72:81:31:ff:db:12:b8:9b:df: 7d:16:62:92:27:20:57:ab:52:5e:ec:55:aa:97:f6:11:26:26: b8:bc:ae:26:fa:21:cd:1b:9f:32:f4:36:a6:02:e6:67:3a:5d: 89:58:8f:41:bc:98:a8:43:44:71:82:36:4b:1a:0c:63:41:a0: 95:c1:68:07:d1:d1:5e:f4:1a:d9:e8:bf:ed:fb:0a:6d:c7:5b: 9e:15:a3:1a:74:7f:4f:24:3c:f1:0b:a0:3f:45:2a:d8:0c:24: 67:55:6d:77:a3:69:12:57:26:90:40:46:18:e8:e4:88:19:e1: f5:56:df:b5:1e:da:a5:3f:be:39:e6:26:ad:02:8a:46:f4:f6: 67:af:1f:34:e4:66:4d:79:f4:a4:4a:9d:2e:fb:20:42:a8:68: fa:04:a0:23:9c:04:7a:9b:7f:ff:7c:eb:c4:8d:f0:53:07:a8: a2:39:a9:c9:93:9e:f8:d7:81:a3:0a:e4:e4:d3:1d:f4:98:18: 59:f6:23:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVqwJlfkWHtI0iNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTY2YjM1MDAtOTg3Yi00NTM4LWI2YmUtYzAwYjU1N2Y2NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPu5QbULUstc0YaLPqdMUqFXAUOu+LLJtqAV 24WkB3iSWhNbHoXZ0H8mTEcWyQbxc6MkwtdcAR4Lj002ggZg92fdgkJUDsbQM+OI S7lvaMtvJZpYM1LIpxADIklJr3OgB/MFpY9KQEjc6eNyPm+DR2/ezh2SUiydH9aR sVjZNZPN0wJE4akZZ1MKIT5pXx2ROTYzePDQgFvGkQAQKx4h/Y2nB1Hla/BSjBZe YI33iLM4cTDhFhLrp6jZLZg/VBXm88X9bAB2JxP+452aoNgaCMxmqZ8Mktz3LEM5 QUlnmzHGSOwkMOh6dDIToII0SYF46C9U6dreI3zH9gESzz0yVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCH1il3DWyh1ZsGISknxdqel4iJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVjODE0MzgtNGJiYS0z MGU5LWJlNWUtYThkOTM3YWFhZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHejJTxBvC4H8vE7/whe83prqtygKU2aKsx5+aYUSBehVwkuARC6 vT2gXovR6JDex9Ah8NZP7vjja9iMDm0lvHKBMf/bErib330WYpInIFerUl7sVaqX 9hEmJri8rib6Ic0bnzL0NqYC5mc6XYlYj0G8mKhDRHGCNksaDGNBoJXBaAfR0V70 Gtnov+37Cm3HW54Voxp0f08kPPELoD9FKtgMJGdVbXejaRJXJpBARhjo5IgZ4fVW 37Ue2qU/vjnmJq0Cikb09mevHzTkZk159KRKnS77IEKoaPoEoCOcBHqbf/9868SN 8FMHqKI5qcmTnvjXgaMK5OTTHfSYGFn2Iyc= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:14 2025 by rpki-client