$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa File: d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa (raw, json) Hash identifier: +buUdmY/3XChYg1S+dzqWFsxA+A6gvhhXrCYAf7EGp0= Subject key identifier: DC:7E:E4:1F:27:58:C1:64:B5:CD:90:C2:F8:0F:E0:FF:E2:75:29:1A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D513E44A3B18B1247840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 212341 IP address blocks: 2001:470:a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d5:13:e4:4a:3b:18:b1:24:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6db04d42-c938-48d5-b31d-d26588aac080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:66:55:b9:e1:d6:86:71:4a:85:56:54:27: c4:7a:47:bb:b7:f5:ac:cd:06:56:90:14:a8:1a:6d: 7d:e0:d9:e3:e3:a6:b0:9e:51:b7:b7:c4:2c:52:05: 5d:34:ab:d3:28:59:a3:7e:61:18:89:d9:93:9c:02: a9:e8:de:30:37:c1:c3:22:c6:e5:2a:dd:bb:ae:61: 3d:e0:cf:e4:8d:41:43:f2:47:39:22:ec:c9:12:07: b4:63:74:9b:e5:ca:91:f5:4b:45:82:18:85:5b:34: f6:ac:84:a9:1c:20:14:19:14:af:be:50:75:d5:35: 02:6b:bf:c9:02:6a:83:27:00:8d:fb:2b:f8:f4:e6: 71:eb:39:6d:c4:65:6d:9a:77:54:5b:af:1c:64:91: 5a:6c:cc:e0:76:94:e4:16:eb:08:37:13:b4:11:41: 42:67:6c:7b:e4:c2:e8:d8:9e:0a:1f:a1:59:a9:22: 61:71:46:f7:96:71:d9:21:57:48:32:61:7a:36:0b: d6:18:4a:be:58:46:4b:8a:3f:9c:ad:54:ba:83:9b: d4:2a:3e:6b:db:2c:ec:d9:99:4d:4f:2f:cb:72:45: c8:4e:05:ec:5e:b1:9d:65:dc:48:23:10:da:aa:2e: 9d:d8:67:d9:d9:a2:7e:0a:e3:b9:cb:a2:e0:88:15: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:E4:1F:27:58:C1:64:B5:CD:90:C2:F8:0F:E0:FF:E2:75:29:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:39:60:3f:86:35:36:45:ac:12:a6:30:a3:99:b3:84:48:f8: f6:4f:c3:a0:90:6c:ae:78:c5:d8:ae:12:08:9a:bd:f3:8e:5a: ce:38:0a:b9:50:4b:82:28:34:e2:32:41:09:d7:72:c3:46:a8: 4e:47:64:29:83:85:f8:eb:26:28:d6:5b:03:b2:f4:22:e3:f4: b8:4e:f3:1c:3e:76:66:db:8d:28:c6:7a:c8:60:cb:9b:2c:6c: c1:be:c6:b7:67:87:de:e0:3f:5c:88:0a:02:79:69:2e:25:ea: d0:4f:ce:fd:da:54:cd:9c:c2:9f:f8:91:c0:69:f9:b7:60:92: 2e:0b:c0:b4:cb:0e:a1:6a:b7:c0:dc:7c:b4:11:27:61:e4:b8: fe:d2:9c:99:a4:a3:f4:90:9e:b0:0f:91:c0:6b:72:e9:0c:80: cc:4c:17:99:02:8f:0d:f1:f3:01:31:e7:dd:ed:27:bd:33:54: ab:95:ce:40:cc:dd:7e:86:fe:74:74:5c:50:5c:28:a8:38:75: 7c:97:b0:e8:5d:fc:0c:f4:c4:30:6b:68:77:56:a3:49:9c:83: 69:2f:29:6b:5c:32:30:bd:28:6b:94:00:42:c1:d0:25:f5:39: c7:bd:63:12:73:5a:8f:91:69:c3:98:fc:a1:3f:19:b4:68:ac: 83:9f:ec:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19UT5Eo7GLEkeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NmRiMDRkNDItYzkzOC00OGQ1LWIzMWQtZDI2NTg4YWFjMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyblmVbnh1oZxSoVWVCfEeke7t/WszQZWkBSo Gm194Nnj46awnlG3t8QsUgVdNKvTKFmjfmEYidmTnAKp6N4wN8HDIsblKt27rmE9 4M/kjUFD8kc5IuzJEge0Y3Sb5cqR9UtFghiFWzT2rISpHCAUGRSvvlB11TUCa7/J AmqDJwCN+yv49OZx6zltxGVtmndUW68cZJFabMzgdpTkFusINxO0EUFCZ2x75MLo 2J4KH6FZqSJhcUb3lnHZIVdIMmF6NgvWGEq+WEZLij+crVS6g5vUKj5r2yzs2ZlN Ty/LckXITgXsXrGdZdxIIxDaqi6d2GfZ2aJ+CuO5y6LgiBVvbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNx+5B8nWMFktc2QwvgP4P/idSkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRhNzJkMTItMDdlNi0z YWU2LTk3ZDUtYzA5NDM1YTVjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABs5YD+GNTZFrBKmMKOZs4RI+PZPw6CQbK54xdiuEgiavfOOWs44 CrlQS4IoNOIyQQnXcsNGqE5HZCmDhfjrJijWWwOy9CLj9LhO8xw+dmbbjSjGeshg y5ssbMG+xrdnh97gP1yICgJ5aS4l6tBPzv3aVM2cwp/4kcBp+bdgki4LwLTLDqFq t8DcfLQRJ2HkuP7SnJmko/SQnrAPkcBrcukMgMxMF5kCjw3x8wEx593tJ70zVKuV zkDM3X6G/nR0XFBcKKg4dXyXsOhd/Az0xDBraHdWo0mcg2kvKWtcMjC9KGuUAELB 0CX1Oce9YxJzWo+RacOY/KE/GbRorIOf7AI= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:07 2025 by rpki-client