$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa File: d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa (raw, json) Hash identifier: /+FnXc+ow6PZuVpDFFdQSGFlbWiS4qwiMenWc8FfA/U= Subject key identifier: 4A:9A:74:29:1B:A3:81:D6:6D:F0:29:BE:D8:25:E1:04:64:91:0E:B0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E3718D2B497E67EC1080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 32621 IP address blocks: 2001:470:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e3:71:8d:2b:49:7e:67:ec:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c70998e9-4cfa-427e-a87c-97a77a1e8786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:e1:52:4b:24:64:bb:da:9a:cd:bf:f6:1e: b0:e7:4b:0c:11:6b:ee:73:39:b1:b0:fa:8e:3b:f0: 87:9b:71:86:9b:16:ae:4c:f3:06:56:ac:5f:22:bb: 2b:50:ce:61:4c:04:ce:8b:8f:0b:a2:29:dc:85:7e: b2:4a:f7:ad:e6:1c:95:0c:15:ae:f5:af:99:3a:88: b1:98:89:e8:53:97:5d:3f:1a:01:41:0d:e9:5a:c2: 6d:6e:0c:a7:27:28:25:e8:76:a0:43:bf:af:9f:2c: 39:0d:78:a1:4c:f2:77:1a:43:e5:2f:3a:db:be:29: 0b:78:0e:8a:5c:e1:8d:3d:e4:c8:40:ec:04:34:a9: 7f:59:40:82:85:70:39:d0:61:1a:ab:49:46:00:52: 54:10:d3:b7:37:94:bd:60:e8:99:cf:a0:a1:61:9d: f1:2d:0c:b1:2a:d7:08:26:26:91:7d:32:7a:14:4b: 1b:bf:16:5d:f6:33:cd:26:40:2a:3c:67:17:ca:da: 43:c0:5c:45:06:95:d2:53:b1:a7:fe:ae:0a:d9:36: b1:99:d5:fe:ae:e8:36:34:0d:4e:bf:0a:e0:aa:3e: c4:47:c7:cc:61:0c:c2:9a:9b:0a:4b:ff:20:ba:f8: 82:4e:76:cd:54:02:7d:91:8a:07:05:6f:f8:ed:94: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:74:29:1B:A3:81:D6:6D:F0:29:BE:D8:25:E1:04:64:91:0E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d7b541-ed02-3f15-bc46-ee1dcdd5d516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c7:aa:13:c6:45:de:50:5e:6d:18:75:ce:c9:18:80:5d:60: b9:0c:88:2c:6c:fd:e0:79:40:5b:97:89:65:e3:6b:50:10:87: f3:3e:92:81:ad:3f:f8:48:93:36:a0:58:11:46:30:28:23:c0: 51:0f:99:d4:08:0c:c9:b7:78:29:be:8c:26:56:8c:8d:e5:c1: 0f:6c:1a:dc:be:f2:ab:32:3e:87:89:9f:95:22:b1:5c:76:f2: 48:01:42:8b:fb:25:cf:a3:9f:ac:cd:c6:8c:ad:6b:d6:9f:28: 1e:c3:79:4a:ef:92:ae:19:26:f8:f3:22:c4:93:52:74:89:9d: 98:1b:02:0d:5a:1b:59:f3:0b:99:64:35:da:06:73:e5:28:7e: 12:4f:de:c2:07:12:56:20:f9:86:13:98:7c:c3:56:f5:84:88: 07:68:eb:1f:f2:8f:fc:da:57:f4:80:ab:24:36:6f:ac:a5:4d: be:df:66:0a:90:50:a1:bc:f9:ba:87:84:61:ce:65:15:e6:fe: 76:b0:2e:4e:68:20:24:d9:f6:8b:f9:91:63:16:84:99:46:e1: e6:a3:e1:a3:ff:f7:50:8a:c7:16:14:3d:15:ef:f2:2c:24:a3: f7:c1:e7:94:6a:e6:33:ba:9b:4a:7e:e0:05:35:75:23:0c:eb: d5:f0:f5:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+NxjStJfmfsEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzcwOTk4ZTktNGNmYS00MjdlLWE4N2MtOTdhNzdhMWU4Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukrhUkskZLvams2/9h6w50sMEWvuczmxsPqO O/CHm3GGmxauTPMGVqxfIrsrUM5hTATOi48LoinchX6ySvet5hyVDBWu9a+ZOoix mInoU5ddPxoBQQ3pWsJtbgynJygl6HagQ7+vnyw5DXihTPJ3GkPlLzrbvikLeA6K XOGNPeTIQOwENKl/WUCChXA50GEaq0lGAFJUENO3N5S9YOiZz6ChYZ3xLQyxKtcI JiaRfTJ6FEsbvxZd9jPNJkAqPGcXytpDwFxFBpXSU7Gn/q4K2TaxmdX+rug2NA1O vwrgqj7ER8fMYQzCmpsKS/8guviCTnbNVAJ9kYoHBW/47ZQvUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqadCkbo4HWbfApvtgl4QRkkQ6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDdkN2I1NDEtZWQwMi0z ZjE1LWJjNDYtZWUxZGNkZDVkNTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKjHqhPGRd5QXm0Ydc7JGIBdYLkMiCxs/eB5QFuXiWXja1AQh/M+ koGtP/hIkzagWBFGMCgjwFEPmdQIDMm3eCm+jCZWjI3lwQ9sGty+8qsyPoeJn5Ui sVx28kgBQov7Jc+jn6zNxoyta9afKB7DeUrvkq4ZJvjzIsSTUnSJnZgbAg1aG1nz C5lkNdoGc+UofhJP3sIHElYg+YYTmHzDVvWEiAdo6x/yj/zaV/SAqyQ2b6ylTb7f ZgqQUKG8+bqHhGHOZRXm/nawLk5oICTZ9ov5kWMWhJlG4eaj4aP/91CKxxYUPRXv 8iwko/fB55Rq5jO6m0p+4AU1dSMM69Xw9Qs= -----END CERTIFICATE-----Generated at Wed Oct 22 13:08:27 2025 by rpki-client