$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d17110da-7414-3430-801e-c1866ef99b31.roa File: d17110da-7414-3430-801e-c1866ef99b31.roa (raw, json) Hash identifier: ucTm/tD59r3nXZrR6w4fdDZZ/hKxID2LlSwKA5Z1ObA= Subject key identifier: 4B:92:86:BE:0A:33:49:15:70:9B:01:2C:76:84:49:63:18:71:51:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB5D10712B4FA16D48EB25B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d17110da-7414-3430-801e-c1866ef99b31.roa Signing time: Sat 01 Nov 2025 01:30:11 +0000 ROA not before: Sat 01 Nov 2025 01:30:11 +0000 ROA not after: Fri 30 Jan 2026 02:30:11 +0000 asID: 58309 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:d1:07:12:b4:fa:16:d4:8e:b2:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 1 01:30:11 2025 GMT Not After : Jan 30 02:30:11 2026 GMT Subject: CN=3a4fe59b-53da-4d6d-9459-6a0d0f486358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:5f:2f:b0:21:de:4e:fb:59:da:c6:67:fb: 41:6b:14:83:d1:1a:8b:af:c6:e7:12:39:27:81:6c: 7b:9f:86:3c:07:d4:87:d7:22:ea:91:27:fc:b3:44: 46:5d:6e:aa:4e:6c:7f:a4:fa:2a:2e:ae:17:e6:bb: 37:02:da:5b:4e:8c:ac:d6:86:44:7a:af:ab:84:70: a4:dc:ba:8e:b0:71:9d:67:8f:97:fb:0f:95:37:d1: 89:f5:56:ba:fe:fc:45:c5:d1:8f:55:9d:91:ee:0e: 75:d6:45:c9:f8:38:67:9d:d8:c9:04:a6:00:55:2e: 2b:f8:f9:2f:74:91:f4:fa:ec:69:fe:00:27:a2:0d: 99:b4:16:dc:b2:6c:33:40:45:12:1f:8a:31:a6:f3: 2b:10:24:8d:46:16:dd:1c:2a:6e:ae:a8:27:25:df: ef:70:85:1d:ac:6f:7f:e4:13:63:1c:2e:a2:c5:47: b9:1d:59:98:0b:88:e5:60:95:bc:8f:66:a4:9d:42: e0:e4:3c:8a:c7:87:2e:f3:6d:b8:c9:f3:52:81:18: ab:87:a9:a7:4f:5b:71:71:bd:56:63:c5:34:9f:71: 34:e6:23:48:1d:d5:32:b5:99:4f:2a:8e:38:3f:da: 3a:a6:28:bf:18:96:d2:69:9a:59:bb:70:e5:77:8f: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:86:BE:0A:33:49:15:70:9B:01:2C:76:84:49:63:18:71:51:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d17110da-7414-3430-801e-c1866ef99b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ae:eb:92:93:89:a2:27:fc:5b:9e:a9:de:ea:3c:4a:d8:69: bc:97:a8:54:2c:72:99:41:91:eb:b5:21:51:d3:02:8e:a6:08: e1:84:a5:91:80:dc:42:45:21:6d:4a:ad:51:ef:69:60:89:51: 4a:23:34:02:e5:f1:de:65:eb:00:49:4a:2f:ba:07:b3:25:89: 7f:ee:d6:85:a8:b7:88:09:61:04:df:9b:27:88:a6:56:0c:e0: 7c:58:e5:0d:80:ce:8c:8d:30:f1:81:a6:0e:fb:80:13:6c:eb: 08:f6:83:bf:c0:22:6a:18:9b:21:b6:3c:df:6b:ca:81:26:65: 4f:8a:83:aa:d1:d6:9b:80:e7:86:04:60:61:a3:16:d1:31:93: 44:da:3e:e2:48:e4:d8:6e:b4:b9:9a:07:e0:7d:35:76:65:c7: 5c:21:4f:7a:60:d2:7e:2e:7b:50:d1:c7:fd:7d:a4:91:8e:c5: 41:16:8b:3d:46:79:28:65:81:d6:8f:db:97:9e:01:6c:cb:77: 0f:3a:a1:d6:98:37:ac:3e:f0:28:b7:59:e8:35:3c:f2:32:3e: 49:90:9a:f1:f1:cf:91:9f:f6:40:15:9b:d0:72:f2:ea:40:2e: c4:77:d1:38:c6:c5:e2:9e:cc:e0:e6:52:7c:2a:1b:ef:dd:72: 5d:69:b3:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu10QcStPoW1I6yW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEwMTAxMzAxMVoXDTI2MDEzMDAyMzAxMVowLzEtMCsGA1UEAxMk M2E0ZmU1OWItNTNkYS00ZDZkLTk0NTktNmEwZDBmNDg2MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr1fL7Ah3k77WdrGZ/tBaxSD0RqLr8bnEjkn gWx7n4Y8B9SH1yLqkSf8s0RGXW6qTmx/pPoqLq4X5rs3AtpbToys1oZEeq+rhHCk 3LqOsHGdZ4+X+w+VN9GJ9Va6/vxFxdGPVZ2R7g511kXJ+DhnndjJBKYAVS4r+Pkv dJH0+uxp/gAnog2ZtBbcsmwzQEUSH4oxpvMrECSNRhbdHCpurqgnJd/vcIUdrG9/ 5BNjHC6ixUe5HVmYC4jlYJW8j2aknULg5DyKx4cu8224yfNSgRirh6mnT1txcb1W Y8U0n3E05iNIHdUytZlPKo44P9o6pii/GJbSaZpZu3Dld4++VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuShr4KM0kVcJsBLHaESWMYcVFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDE3MTEwZGEtNzQxNC0z NDMwLTgwMWUtYzE4NjZlZjk5YjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK6u65KTiaIn/Fueqd7qPErYabyXqFQscplBkeu1IVHTAo6mCOGE pZGA3EJFIW1KrVHvaWCJUUojNALl8d5l6wBJSi+6B7MliX/u1oWot4gJYQTfmyeI plYM4HxY5Q2AzoyNMPGBpg77gBNs6wj2g7/AImoYmyG2PN9ryoEmZU+Kg6rR1puA 54YEYGGjFtExk0TaPuJI5NhutLmaB+B9NXZlx1whT3pg0n4ue1DRx/19pJGOxUEW iz1GeShlgdaP25eeAWzLdw86odaYN6w+8Ci3Weg1PPIyPkmQmvHxz5Gf9kAVm9By 8upALsR30TjGxeKezODmUnwqG+/dcl1ps4c= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:08 2025 by rpki-client