$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa File: d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa (raw, json) Hash identifier: esRa1b60fOq2ftN8z6L6GhrPWZWk1NjzHV/j8HdVmkM= Subject key identifier: FF:AB:86:9E:82:66:91:C1:43:E6:D7:FB:81:B5:2D:DA:50:73:3A:47 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F98232FB3301D7FBF3E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400228 IP address blocks: 2001:470:2f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f9:82:32:fb:33:01:d7:fb:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a17f51e8-c413-49fd-bcd6-e479ef38a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:67:90:60:25:57:34:c3:4c:9a:7a:a7:ab: 38:4e:1e:13:cf:e9:85:48:4a:90:26:d1:4f:cb:f9: f0:b0:a7:27:b5:9e:51:0c:60:35:1e:f7:35:fe:f7: d4:d3:11:52:28:e1:b5:62:83:01:77:89:96:2d:24: 51:2d:c2:a9:5e:5f:fd:89:ed:c9:5b:2b:19:6a:aa: ad:14:48:d7:99:be:47:f6:93:e8:10:74:47:bc:4d: e1:7f:96:cd:da:44:f3:c2:74:c9:f0:9d:88:4a:10: 5b:5f:b4:8e:3a:13:86:44:4f:c4:ed:b0:38:be:29: 4d:23:37:d0:b6:e0:4a:6c:3a:eb:ad:39:a9:5b:0c: 0a:8d:e9:09:6c:2e:6b:48:21:eb:a0:c0:a3:6a:d5: b7:36:b7:ec:8e:05:4b:44:5d:4a:fa:89:33:25:6c: 7e:24:eb:fb:72:30:11:72:05:8c:65:1e:bc:12:a2: b2:d8:35:85:91:ad:26:cf:88:de:59:0c:78:ff:71: 35:7e:2f:bc:b7:d0:df:53:7e:2f:c3:2d:2d:68:42: 43:10:d4:6f:ce:43:1f:a0:38:c6:f0:95:8a:13:e5: 6a:12:fb:5b:bf:78:4a:28:30:af:4e:ef:05:d8:bb: 80:b4:22:76:04:e6:a3:47:a8:46:f9:91:00:44:9e: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:86:9E:82:66:91:C1:43:E6:D7:FB:81:B5:2D:DA:50:73:3A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:2e:46:03:75:25:5a:f7:d2:6d:5c:df:84:6f:9e:b7:74:d7: dc:10:e1:63:da:3e:94:0c:26:dc:4f:c6:d7:a1:95:7a:0b:5b: 78:b4:42:db:14:07:f1:3f:1e:9b:08:03:8d:10:88:d0:56:4a: 93:ec:d0:19:88:04:f5:77:12:96:62:e8:7b:d9:e5:64:e0:24: d5:65:26:8d:da:bb:d9:0e:8f:35:be:43:07:71:d1:4b:7d:46: 32:94:60:4d:fd:5a:71:0c:4a:0b:a2:18:35:0e:4d:d1:68:0a: d6:6f:8b:b0:5d:26:6d:1a:84:e7:06:d0:09:46:de:43:f4:b7: d3:b1:20:db:8f:a3:93:98:da:bf:94:5b:04:57:ac:72:50:75: 49:f7:af:f9:59:d6:d7:ba:4b:e8:b5:d4:2c:f4:f2:55:4d:87: b7:4f:71:74:da:94:be:fd:c2:31:6c:56:7d:56:7d:ea:1a:91: 15:7a:0b:ca:84:c7:12:81:59:ab:2d:e6:ea:f4:e5:ad:02:bb: 8a:84:82:a5:0e:bc:21:11:ce:8b:92:f9:63:3f:b1:19:01:0b: a7:87:d8:36:53:61:47:7d:62:fa:d0:26:a3:68:ae:b7:00:6d: db:2a:d3:ed:ce:b6:88:b9:65:d7:fb:57:cd:6b:91:2c:82:80: 31:9c:9e:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/mCMvszAdf78+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTE3ZjUxZTgtYzQxMy00OWZkLWJjZDYtZTQ3OWVmMzhhOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/1nkGAlVzTDTJp6p6s4Th4Tz+mFSEqQJtFP y/nwsKcntZ5RDGA1Hvc1/vfU0xFSKOG1YoMBd4mWLSRRLcKpXl/9ie3JWysZaqqt FEjXmb5H9pPoEHRHvE3hf5bN2kTzwnTJ8J2IShBbX7SOOhOGRE/E7bA4vilNIzfQ tuBKbDrrrTmpWwwKjekJbC5rSCHroMCjatW3NrfsjgVLRF1K+okzJWx+JOv7cjAR cgWMZR68EqKy2DWFka0mz4jeWQx4/3E1fi+8t9DfU34vwy0taEJDENRvzkMfoDjG 8JWKE+VqEvtbv3hKKDCvTu8F2LuAtCJ2BOajR6hG+ZEARJ7CTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+rhp6CZpHBQ+bX+4G1LdpQczpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDM2Zjg2MTEtYzhhNi0z MzJhLTlhMGEtNWIzOWJmYTE2N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALouRgN1JVr30m1c34Rvnrd019wQ4WPaPpQMJtxPxtehlXoLW3i0 QtsUB/E/HpsIA40QiNBWSpPs0BmIBPV3EpZi6HvZ5WTgJNVlJo3au9kOjzW+Qwdx 0Ut9RjKUYE39WnEMSguiGDUOTdFoCtZvi7BdJm0ahOcG0AlG3kP0t9OxINuPo5OY 2r+UWwRXrHJQdUn3r/lZ1te6S+i11Cz08lVNh7dPcXTalL79wjFsVn1WfeoakRV6 C8qExxKBWast5ur05a0Cu4qEgqUOvCERzouS+WM/sRkBC6eH2DZTYUd9YvrQJqNo rrcAbdsq0+3Otoi5Zdf7V81rkSyCgDGcnlk= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:34 2025 by rpki-client