$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae6901a-ca0b-3061-9e7d-a4b59eb91096.roa File: cae6901a-ca0b-3061-9e7d-a4b59eb91096.roa (raw, json) Hash identifier: NWiMIafIxXmeQe7UQ4JwrkPcgm9oYt2OdwXzwwChQ3s= Subject key identifier: C7:27:B5:F3:D6:9E:D1:68:25:66:3D:3E:58:E2:B5:62:72:B5:41:B4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EEDC8F730FF8D9C92B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae6901a-ca0b-3061-9e7d-a4b59eb91096.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 204242 IP address blocks: 2001:470:1f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ee:dc:8f:73:0f:f8:d9:c9:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=541103db-dfa4-4400-8ba9-47bf4b7ebdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:6b:59:df:8c:70:32:bd:cd:dc:c4:7b:ae: 80:c5:c9:ad:3a:db:af:11:f4:d3:e8:69:58:c0:4d: 60:7e:24:ba:80:9c:de:17:b5:e5:26:3f:ed:b7:74: 4e:35:e1:33:27:cb:fa:5f:c7:96:b1:60:8f:8d:11: 22:c1:cd:92:c0:bb:c8:73:08:59:89:c6:62:e1:39: 4e:03:86:1d:f3:9c:3d:dc:2c:ac:06:12:8e:65:d8: d0:56:77:30:da:58:c8:a5:b8:28:b3:f6:1e:07:a8: a1:b6:9d:15:84:9b:05:da:e1:93:11:6b:50:06:17: 42:dc:a3:40:8f:51:15:18:23:e9:90:59:f8:66:0c: 8e:2b:07:ca:59:6e:19:9d:32:4f:82:7c:70:13:45: b9:ea:00:1b:b3:2d:4b:d3:79:3f:f9:9b:bd:09:8b: 16:7f:5a:c3:07:8a:36:05:24:d1:f2:f0:c6:1b:34: a4:6a:05:5a:da:3c:0e:9f:43:df:91:de:af:48:60: 3b:b1:3a:ca:af:1a:0b:54:5d:c0:b1:3c:79:97:09: ae:4d:f8:83:af:dc:71:15:1b:d8:09:bf:cc:6a:48: 6e:c9:d5:b4:09:c2:ec:da:82:4a:b7:24:fa:49:b1: 19:96:91:ee:3e:67:6d:59:0a:7f:fc:a6:97:dd:d4: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:B5:F3:D6:9E:D1:68:25:66:3D:3E:58:E2:B5:62:72:B5:41:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cae6901a-ca0b-3061-9e7d-a4b59eb91096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:10:af:42:75:67:59:d8:29:3c:f1:5e:0f:7a:6f:78:2c:95: 1c:25:e5:0d:e0:15:ac:c5:05:1d:31:71:3c:74:60:93:bc:5a: 6a:ec:bb:0c:df:d9:4a:eb:6b:b2:56:90:58:2f:2b:bc:76:a9: b4:5e:6e:37:7f:ea:47:b5:90:26:28:11:44:e8:b7:c5:25:9b: 54:34:4b:12:4f:01:c6:5a:98:aa:de:1e:58:af:59:81:37:e7: 0d:96:93:2c:76:ed:be:ea:5c:a6:4a:af:87:07:5e:eb:31:0e: 2a:71:63:d3:8f:71:44:9c:a8:4e:84:8b:80:58:10:6c:e3:29: 6b:ab:5a:de:89:1c:b0:fb:7f:11:a6:1a:8b:c6:67:86:9d:01: 3e:d4:c3:ad:5c:4e:eb:1e:93:30:88:75:bc:67:c0:ad:dd:fe: 43:8e:64:3c:f4:c7:42:56:ab:21:80:54:50:66:a0:6e:64:e2: fb:c3:f0:2d:54:d6:31:d3:d0:a3:6d:e7:91:e4:f6:19:cf:d9: a1:93:84:4c:bd:4c:5f:d0:45:1a:83:9a:32:2b:bb:29:0f:82: f3:83:a3:70:9c:c4:44:46:cf:c9:f9:32:aa:7b:8f:40:9d:c8: cb:be:c3:78:f7:d0:49:24:2a:0c:79:5a:57:8f:9f:19:d7:b9: f4:92:94:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+7cj3MP+NnJK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTQxMTAzZGItZGZhNC00NDAwLThiYTktNDdiZjRiN2ViZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+9rWd+McDK9zdzEe66AxcmtOtuvEfTT6GlY wE1gfiS6gJzeF7XlJj/tt3RONeEzJ8v6X8eWsWCPjREiwc2SwLvIcwhZicZi4TlO A4Yd85w93CysBhKOZdjQVncw2ljIpbgos/YeB6ihtp0VhJsF2uGTEWtQBhdC3KNA j1EVGCPpkFn4ZgyOKwfKWW4ZnTJPgnxwE0W56gAbsy1L03k/+Zu9CYsWf1rDB4o2 BSTR8vDGGzSkagVa2jwOn0Pfkd6vSGA7sTrKrxoLVF3AsTx5lwmuTfiDr9xxFRvY Cb/MakhuydW0CcLs2oJKtyT6SbEZlpHuPmdtWQp//KaX3dS4QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcntfPWntFoJWY9PljitWJytUG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2FlNjkwMWEtY2EwYi0z MDYxLTllN2QtYTRiNTllYjkxMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQQr0J1Z1nYKTzxXg96b3gslRwl5Q3gFazFBR0xcTx0YJO8Wmrs uwzf2Urra7JWkFgvK7x2qbRebjd/6ke1kCYoEUTot8Ulm1Q0SxJPAcZamKreHliv WYE35w2Wkyx27b7qXKZKr4cHXusxDipxY9OPcUScqE6Ei4BYEGzjKWurWt6JHLD7 fxGmGovGZ4adAT7Uw61cTusekzCIdbxnwK3d/kOOZDz0x0JWqyGAVFBmoG5k4vvD 8C1U1jHT0KNt55Hk9hnP2aGThEy9TF/QRRqDmjIruykPgvODo3CcxERGz8n5Mqp7 j0CdyMu+w3j30EkkKgx5WlePnxnXufSSlIM= -----END CERTIFICATE-----Generated at Sat Nov 1 14:32:06 2025 by rpki-client