$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa File: c934e88f-0de8-38ab-823a-63300183a4ee.roa (raw, json) Hash identifier: voHbrA9+DrvnXBf7yM2B94NZza9ZBYw4zfu53ZEj8lI= Subject key identifier: FF:49:57:A7:4B:DB:F7:BF:49:1C:BB:FC:D3:CD:38:FD:4A:36:76:B8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F4BA2CADDBB7E45A8800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 267784 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f4:ba:2c:ad:db:b7:e4:5a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c523b3a3-a6f3-4de0-bd5d-2157d9a654cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:e7:79:4e:5c:54:18:58:68:ba:86:3b:52: f2:7d:6f:de:e3:da:33:36:09:1b:29:59:d4:5b:2f: 79:18:41:42:44:d2:bc:e7:b2:37:57:52:ec:9e:b5: 80:f0:b0:0c:a7:24:8b:d5:15:2e:f8:6c:ba:b4:01: 12:89:b5:41:aa:22:a0:81:97:07:5f:92:a4:8a:98: 84:7a:42:51:24:61:68:da:74:52:55:cf:3c:d8:27: 53:4a:3b:9d:6d:0b:9e:3a:8c:c6:7d:05:5a:06:90: c2:80:51:5b:8a:2c:97:08:6f:e0:fe:ff:be:a1:17: 74:c0:8f:4d:72:2b:fa:c2:9f:c7:70:d0:7a:f9:92: fe:60:12:89:ea:34:68:18:f7:3d:45:5d:50:f6:9d: 7d:85:d4:67:ac:94:4f:f5:d2:c4:ff:86:3a:10:66: c4:ac:62:d8:ba:8f:f9:c0:8c:c4:1d:86:aa:61:8c: af:e8:44:57:7b:80:f6:4f:41:52:65:89:6b:1e:c9: a2:31:0e:80:0f:c1:fd:c7:8f:de:ba:1e:4d:90:74: c5:78:8f:24:16:8a:3d:36:6c:9f:d1:47:5a:8f:22: 85:40:1c:a5:77:8c:1d:8c:df:e5:58:22:fa:e7:00: 69:ed:42:1f:df:4f:f8:13:da:82:48:a3:78:31:01: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:57:A7:4B:DB:F7:BF:49:1C:BB:FC:D3:CD:38:FD:4A:36:76:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a5:1a:e9:cf:67:5d:04:ec:30:fa:74:ae:5a:05:be:00:c3: 2e:f8:ea:8a:78:e4:4b:59:2d:26:4b:de:db:0a:df:b2:05:46: 10:80:89:7e:ac:81:3a:01:1d:5a:ef:dd:d1:a4:b5:40:db:0a: 2b:5f:72:cd:a8:5c:90:1c:b2:cc:5f:15:5c:9a:68:a7:41:d4: 28:80:f0:0a:12:f6:3e:b3:ba:aa:b8:46:25:79:0c:1b:bb:22: 99:68:2f:70:37:dc:74:83:cc:5e:fb:04:91:ed:62:e3:32:32: cf:00:f5:dd:64:e1:cd:b9:ab:81:4c:7a:f9:ef:a3:45:15:7e: af:ac:8f:5d:e6:ae:4a:cd:2e:4d:22:26:62:f2:4b:16:83:16: f3:f3:94:5e:a5:5e:6f:e3:82:4d:4d:3f:09:df:6f:46:ba:ba: 2b:4e:b7:82:b8:df:f7:4f:f7:89:10:f7:80:68:57:30:3a:61: 73:dd:d9:b1:a6:0a:cd:31:67:c5:d1:aa:51:cf:db:ec:83:2f: 0c:e1:7e:a3:d0:75:fe:c6:07:c2:4e:3d:17:26:c4:a9:c4:87: 7c:3c:a6:ae:64:40:6e:4b:34:f9:88:38:c6:59:29:95:33:13: 38:3c:c9:d0:bf:e2:69:25:dd:00:56:b7:70:47:ec:d1:6e:b6: 88:d3:f0:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/S6LK3bt+RaiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzUyM2IzYTMtYTZmMy00ZGUwLWJkNWQtMjE1N2Q5YTY1NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrPneU5cVBhYaLqGO1LyfW/e49ozNgkbKVnU Wy95GEFCRNK857I3V1LsnrWA8LAMpySL1RUu+Gy6tAESibVBqiKggZcHX5KkipiE ekJRJGFo2nRSVc882CdTSjudbQueOozGfQVaBpDCgFFbiiyXCG/g/v++oRd0wI9N civ6wp/HcNB6+ZL+YBKJ6jRoGPc9RV1Q9p19hdRnrJRP9dLE/4Y6EGbErGLYuo/5 wIzEHYaqYYyv6ERXe4D2T0FSZYlrHsmiMQ6AD8H9x4/euh5NkHTFeI8kFoo9Nmyf 0UdajyKFQByld4wdjN/lWCL65wBp7UIf30/4E9qCSKN4MQFeTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9JV6dL2/e/SRy7/NPNOP1KNna4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzkzNGU4OGYtMGRlOC0z OGFiLTgyM2EtNjMzMDAxODNhNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABilGunPZ10E7DD6dK5aBb4Awy746op45EtZLSZL3tsK37IFRhCA iX6sgToBHVrv3dGktUDbCitfcs2oXJAcssxfFVyaaKdB1CiA8AoS9j6zuqq4RiV5 DBu7IploL3A33HSDzF77BJHtYuMyMs8A9d1k4c25q4FMevnvo0UVfq+sj13mrkrN Lk0iJmLySxaDFvPzlF6lXm/jgk1NPwnfb0a6uitOt4K43/dP94kQ94BoVzA6YXPd 2bGmCs0xZ8XRqlHP2+yDLwzhfqPQdf7GB8JOPRcmxKnEh3w8pq5kQG5LNPmIOMZZ KZUzEzg8ydC/4mkl3QBWt3BH7NFutojT8PE= -----END CERTIFICATE-----Generated at Tue Nov 4 04:00:02 2025 by rpki-client