$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce91769-ca77-36d1-874c-dc71e144e4f0.roa File: cce91769-ca77-36d1-874c-dc71e144e4f0.roa (raw, json) Hash identifier: q04is+uo0kD9L6MSpJOPGybpdQpKfiolqVhlZTr0nlg= Subject key identifier: 4F:42:0F:6D:52:96:37:17:F7:40:52:B7:CA:6D:8C:37:5A:A2:A2:7E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CCFB7404CA1E723B6980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce91769-ca77-36d1-874c-dc71e144e4f0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397601 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cc:fb:74:04:ca:1e:72:3b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fce008f3-3c3f-4f1d-b1e0-67f8de24c836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:84:65:65:f3:f9:4a:4c:8a:c8:73:35:21: ca:2f:9e:5c:13:f0:51:c8:84:bd:5f:a8:50:f1:b1: 13:52:ac:15:a6:3f:01:d9:72:9f:c3:dc:e5:f3:57: 22:9a:4b:5d:14:60:91:62:eb:b9:57:5a:97:ad:b2: c6:d3:65:df:29:9f:94:04:1f:8f:35:0e:1f:ba:0f: 6c:5e:99:a4:a0:dc:23:54:09:cf:23:42:f3:28:2a: 78:5f:42:66:c1:c0:7c:45:3d:8d:97:92:da:9b:02: 18:6a:6a:00:fe:a4:09:f6:4e:78:a4:53:97:93:6d: 3a:bd:e8:4e:93:31:18:0c:29:0c:00:cb:cd:3d:0e: 0f:45:bf:41:35:db:03:42:20:25:43:fa:11:df:95: 1c:75:6b:e9:e5:a4:27:ec:6d:7a:1b:b5:95:fb:42: ef:88:83:37:5e:ec:25:17:5b:e0:53:b3:c2:dd:91: 58:d1:0a:65:03:55:9e:d7:51:f4:0f:37:60:c2:f8: 43:13:65:ad:31:b1:e0:53:d2:85:2d:96:ef:3d:58: c2:55:a3:fc:01:10:98:03:8e:29:4c:ed:3e:24:56: d3:50:63:b0:7b:3f:5b:f2:f0:ea:31:8b:3a:e4:80: f8:18:e6:b5:2f:e6:2b:67:13:aa:fd:30:71:7d:25: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:42:0F:6D:52:96:37:17:F7:40:52:B7:CA:6D:8C:37:5A:A2:A2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce91769-ca77-36d1-874c-dc71e144e4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:cd:c1:bd:07:0e:00:f2:9e:5e:a2:64:d3:db:7d:87:9e:a6: d2:18:a9:27:4d:26:35:ec:29:6a:c0:9b:29:0f:92:c4:52:7a: 5b:4a:e7:4c:26:af:35:e5:29:c2:fd:ad:1c:a9:38:c6:23:3d: 6b:32:ab:51:b1:9d:a1:00:3e:3a:ba:44:c3:3c:1d:0c:e7:b4: ca:44:8a:eb:3c:7a:21:14:05:cc:4c:d0:49:09:f8:78:f2:95: b9:06:93:87:fa:61:db:e8:ba:d4:c8:40:35:4c:fc:cf:06:77: 8b:a9:44:f4:5d:07:c7:4e:8f:56:98:b0:22:aa:66:4d:10:06: 5b:d7:3f:8e:50:06:9f:30:fe:ed:cb:87:00:37:ad:b3:cc:c9: 1e:ce:24:ca:9b:51:81:7c:3e:f3:77:23:6c:da:79:8e:f9:9d: 88:9e:53:e3:73:cd:6d:31:f5:6e:9c:78:53:a5:16:e1:c1:b2: 4e:aa:e6:ff:4b:20:fa:73:c7:16:40:f8:63:3a:4c:86:72:f0: 35:1b:62:9b:df:83:0f:b4:a2:6b:8f:ee:f6:89:ba:6a:e8:f0: 7e:c4:81:52:46:6d:f6:e6:81:df:79:7e:64:e2:35:82:c4:63: 93:33:8f:a6:83:ae:2c:15:ed:fb:0e:49:87:8c:c3:14:a0:3e: 0c:5d:20:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18z7dATKHnI7aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmNlMDA4ZjMtM2MzZi00ZjFkLWIxZTAtNjdmOGRlMjRjODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1iEZWXz+UpMishzNSHKL55cE/BRyIS9X6hQ 8bETUqwVpj8B2XKfw9zl81cimktdFGCRYuu5V1qXrbLG02XfKZ+UBB+PNQ4fug9s XpmkoNwjVAnPI0LzKCp4X0JmwcB8RT2Nl5LamwIYamoA/qQJ9k54pFOXk206vehO kzEYDCkMAMvNPQ4PRb9BNdsDQiAlQ/oR35UcdWvp5aQn7G16G7WV+0LviIM3Xuwl F1vgU7PC3ZFY0QplA1We11H0DzdgwvhDE2WtMbHgU9KFLZbvPVjCVaP8ARCYA44p TO0+JFbTUGOwez9b8vDqMYs65ID4GOa1L+YrZxOq/TBxfSWFfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9CD21SljcX90BSt8ptjDdaoqJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2NlOTE3NjktY2E3Ny0z NmQxLTg3NGMtZGM3MWUxNDRlNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDNwb0HDgDynl6iZNPbfYeeptIYqSdNJjXsKWrAmykPksRSeltK 50wmrzXlKcL9rRypOMYjPWsyq1GxnaEAPjq6RMM8HQzntMpEius8eiEUBcxM0EkJ +HjylbkGk4f6YdvoutTIQDVM/M8Gd4upRPRdB8dOj1aYsCKqZk0QBlvXP45QBp8w /u3LhwA3rbPMyR7OJMqbUYF8PvN3I2zaeY75nYieU+NzzW0x9W6ceFOlFuHBsk6q 5v9LIPpzxxZA+GM6TIZy8DUbYpvfgw+0omuP7vaJumro8H7EgVJGbfbmgd95fmTi NYLEY5Mzj6aDriwV7fsOSYeMwxSgPgxdIMs= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:43 2025 by rpki-client