$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa File: c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa (raw, json) Hash identifier: uES3I8l6CUjVsWGNR6khMkJXHwc+dYfAwqU1pMwNW3M= Subject key identifier: 17:69:54:01:73:F4:E3:94:13:27:46:71:D2:66:24:74:D3:49:51:81 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BBA105B08290D71D1B71B2E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396350 IP address blocks: 2001:470:4a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:5b:08:29:0d:71:d1:b7:1b:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=9561477d-c73c-4e46-b66e-7381ab4fa0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:d3:bb:40:e9:bc:5b:47:88:67:9c:98:ae: ec:b5:16:a7:e9:20:29:10:1d:93:99:a9:a5:00:7d: ab:80:66:62:64:91:0f:08:93:f5:40:09:12:76:96: 45:6a:8e:d3:e9:a8:ab:4d:90:2e:6c:93:16:a9:db: 25:3d:09:f7:c5:9b:6a:ef:50:26:62:cd:82:d0:70: 09:d1:13:35:e7:f0:6f:e4:cb:3c:ed:2d:70:f0:f5: fd:25:c0:ed:81:82:cd:6d:f9:96:bf:2a:f3:6d:2f: 82:84:0a:eb:ce:8c:87:97:8c:91:ff:b3:fc:bf:74: 25:68:87:e9:24:6e:10:d7:d4:82:1a:52:c9:3d:75: 91:a0:72:da:9b:fa:0f:55:57:3b:2c:88:71:6f:47: e1:cd:a5:c4:df:a0:c2:83:bb:99:18:5c:00:78:ee: 62:46:53:29:d8:91:a1:12:23:18:cf:b0:ba:fe:0c: 2c:07:47:d1:40:0b:fe:1e:ba:4d:4a:27:8d:82:3d: 9c:72:e1:68:6c:79:56:0e:8e:0a:84:00:be:20:64: 85:f6:42:74:dc:fa:01:93:0c:78:89:c1:75:2a:75: 6c:90:88:11:f1:a7:55:bf:93:b3:eb:81:5d:4a:c3: bf:82:35:38:74:3b:b2:84:47:2c:61:49:18:ab:5e: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:69:54:01:73:F4:E3:94:13:27:46:71:D2:66:24:74:D3:49:51:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:82:9f:ab:f4:df:d0:65:91:e3:23:81:2c:05:fb:c8:d4:7d: 3d:cf:d0:43:09:16:3b:12:ee:b7:a4:34:8c:46:82:df:0d:b0: 3f:1c:d7:60:10:2d:24:a9:e5:72:a4:02:7d:a4:8b:a1:1e:80: 81:e2:c0:12:25:ff:93:37:30:1e:41:33:ad:70:7f:cc:35:e8: c5:a7:38:c5:dc:70:f7:68:f3:1c:7d:03:a7:95:87:7f:6f:fe: 30:c7:b9:c7:0e:49:90:0f:53:76:fa:d5:6b:39:ec:92:0c:4f: 58:75:df:70:a7:67:7a:a3:04:e8:4b:37:43:c1:aa:7a:f9:74: 21:b3:e9:99:26:a6:48:52:88:20:32:50:f9:12:a2:f5:a1:6a: dd:11:09:c7:33:d1:de:02:69:13:8c:ac:6d:53:04:2d:06:16: f0:69:a4:b0:f0:c1:b0:33:6b:a6:5a:d4:6f:4c:6f:db:cb:f7: 48:17:d1:40:8a:d1:96:79:33:80:06:14:7f:c8:38:b7:05:f5: b5:6a:6f:04:fa:f1:cf:14:4c:fd:9d:8a:47:98:70:9f:d7:5e: 6d:1a:b6:e7:42:0c:76:34:da:fb:d4:76:60:47:23:6f:a5:ce: 07:a6:9d:16:f2:ee:bf:62:19:c6:a9:2f:52:bf:5c:41:a0:e8: 45:5f:be:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu6EFsIKQ1x0bcbLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTU2MTQ3N2QtYzczYy00ZTQ2LWI2NmUtNzM4MWFiNGZhMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnrTu0DpvFtHiGecmK7stRan6SApEB2Tmaml AH2rgGZiZJEPCJP1QAkSdpZFao7T6airTZAubJMWqdslPQn3xZtq71AmYs2C0HAJ 0RM15/Bv5Ms87S1w8PX9JcDtgYLNbfmWvyrzbS+ChArrzoyHl4yR/7P8v3QlaIfp JG4Q19SCGlLJPXWRoHLam/oPVVc7LIhxb0fhzaXE36DCg7uZGFwAeO5iRlMp2JGh EiMYz7C6/gwsB0fRQAv+HrpNSieNgj2ccuFobHlWDo4KhAC+IGSF9kJ03PoBkwx4 icF1KnVskIgR8adVv5Oz64FdSsO/gjU4dDuyhEcsYUkYq17m3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdpVAFz9OOUEydGcdJmJHTTSVGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVmYjYzNzgtYmE1Mi0z MjY2LWE0MzQtYzFmYzdhNWYwN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImCn6v039BlkeMjgSwF+8jUfT3P0EMJFjsS7rekNIxGgt8NsD8c 12AQLSSp5XKkAn2ki6EegIHiwBIl/5M3MB5BM61wf8w16MWnOMXccPdo8xx9A6eV h39v/jDHuccOSZAPU3b61Ws57JIMT1h133CnZ3qjBOhLN0PBqnr5dCGz6ZkmpkhS iCAyUPkSovWhat0RCccz0d4CaROMrG1TBC0GFvBppLDwwbAza6Za1G9Mb9vL90gX 0UCK0ZZ5M4AGFH/IOLcF9bVqbwT68c8UTP2dikeYcJ/XXm0atudCDHY02vvUdmBH I2+lzgemnRby7r9iGcapL1K/XEGg6EVfvrQ= -----END CERTIFICATE-----Generated at Sun Nov 2 23:52:58 2025 by rpki-client