$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa File: d6fa416f-c041-3446-8288-068130bcb4fb.roa (raw, json) Hash identifier: zU6HOAkBjv4JUUDa6/QO8kZbh2j3kQca7EhXRGSYWn0= Subject key identifier: 02:3A:F6:88:01:ED:64:11:6F:FD:9A:C7:4E:50:08:F6:35:EC:B8:F6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C6EA5E0CD75975199380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 23089 IP address blocks: 2001:470:199::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c6:ea:5e:0c:d7:59:75:19:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=43f3259d-3ca2-46aa-b055-5684633b54e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:8d:b3:c7:98:d8:f7:3f:5e:95:23:fc:b7: f9:ab:7d:26:8e:01:3a:31:fc:25:fa:d6:1a:ae:80: ab:50:4b:f5:bc:04:37:2b:00:77:62:5c:0a:94:62: 72:e0:91:54:1d:03:82:5e:db:01:ec:e1:65:0a:60: 49:08:50:44:2d:e0:2b:a9:e4:88:70:04:fe:ba:59: 96:b4:50:f9:7d:b9:3d:dc:5e:20:e1:ec:33:81:15: 88:bf:45:31:85:88:4a:f1:21:fa:ad:7d:33:17:55: 1c:c3:fc:dc:30:c8:76:04:b2:91:7f:b5:40:50:b6: f0:ef:4e:7c:b4:5c:e2:f9:63:3b:6f:b9:e6:35:79: 3f:de:35:f1:61:bb:8d:71:82:c1:31:3d:96:c4:1e: eb:ba:1b:56:20:ae:24:46:22:35:f1:21:d7:e7:3d: 0e:82:94:4e:37:27:fc:7d:96:45:fb:bd:d2:a0:ed: 26:2c:e5:c2:75:79:fb:cf:e3:9b:c4:54:59:02:20: 54:c9:f4:8e:15:cc:92:d2:73:97:98:e8:ad:f2:cd: 6a:0c:ae:b5:2b:56:48:d0:b7:71:f3:b1:7b:fb:32: 0a:40:8c:5c:ae:5f:ec:ec:40:40:a4:31:5c:6d:43: 9d:af:22:0f:ee:4f:7e:2b:5a:f7:2f:7c:01:e9:87: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:F6:88:01:ED:64:11:6F:FD:9A:C7:4E:50:08:F6:35:EC:B8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:199::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:09:03:5c:4a:b1:62:5e:ba:d2:65:81:5c:44:bf:bc:0f:7b: 15:d2:7d:6d:46:81:39:1d:70:b7:74:92:82:b0:ae:3b:96:00: df:ff:76:22:ad:35:76:3f:7f:0d:a2:3f:be:26:8a:71:89:8d: c4:cf:16:55:59:49:9d:84:52:4a:1a:a0:96:1b:4e:c3:44:15: a9:57:1a:87:0e:99:1f:fd:c5:2a:d4:32:4d:f1:30:7a:6c:fb: 90:be:3b:f9:82:b3:04:28:5c:98:f6:df:12:e9:31:55:47:49: 98:4b:d2:05:53:8e:1f:d9:2c:70:67:a7:cf:a7:b5:d2:c4:0b: 08:47:34:dd:c2:23:2c:cf:31:d9:2e:c7:82:ed:92:5f:83:4c: ae:0b:74:ac:9f:07:7b:dd:ab:49:cc:66:68:2e:ac:9f:ca:97: b2:b4:26:f9:90:c0:3d:48:84:1f:15:ea:25:b6:c0:74:8e:f4: e9:1c:f5:78:0e:4f:2c:d8:3b:a0:0b:4c:bb:5a:6c:f1:84:90: f0:4f:f4:20:4f:66:a0:b7:ed:44:4a:b1:41:14:8c:f3:be:60: 08:9d:8f:3c:45:28:f8:38:67:f6:21:83:a8:f7:f3:b4:7d:44: 5f:9b:d7:97:0e:f5:88:af:0f:f4:92:4a:5a:36:47:9d:39:85: dd:2e:fe:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18bqXgzXWXUZk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDNmMzI1OWQtM2NhMi00NmFhLWIwNTUtNTY4NDYzM2I1NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+yNs8eY2Pc/XpUj/Lf5q30mjgE6Mfwl+tYa roCrUEv1vAQ3KwB3YlwKlGJy4JFUHQOCXtsB7OFlCmBJCFBELeArqeSIcAT+ulmW tFD5fbk93F4g4ewzgRWIv0UxhYhK8SH6rX0zF1Ucw/zcMMh2BLKRf7VAULbw7058 tFzi+WM7b7nmNXk/3jXxYbuNcYLBMT2WxB7ruhtWIK4kRiI18SHX5z0OgpRONyf8 fZZF+73SoO0mLOXCdXn7z+ObxFRZAiBUyfSOFcyS0nOXmOit8s1qDK61K1ZI0Ldx 87F7+zIKQIxcrl/s7EBApDFcbUOdryIP7k9+K1r3L3wB6YfRowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAI69ogB7WQRb/2ax05QCPY17Lj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZmYTQxNmYtYzA0MS0z NDQ2LTgyODgtMDY4MTMwYmNiNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMJA1xKsWJeutJlgVxEv7wPexXSfW1GgTkdcLd0koKwrjuWAN// diKtNXY/fw2iP74minGJjcTPFlVZSZ2EUkoaoJYbTsNEFalXGocOmR/9xSrUMk3x MHps+5C+O/mCswQoXJj23xLpMVVHSZhL0gVTjh/ZLHBnp8+ntdLECwhHNN3CIyzP Mdkux4Ltkl+DTK4LdKyfB3vdq0nMZmgurJ/Kl7K0JvmQwD1IhB8V6iW2wHSO9Okc 9XgOTyzYO6ALTLtabPGEkPBP9CBPZqC37URKsUEUjPO+YAidjzxFKPg4Z/Yhg6j3 87R9RF+b15cO9YivD/SSSlo2R505hd0u/sQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:27 2025 by rpki-client