$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8231584-b292-3a26-8b0f-8939bee1e0f7.roa File: d8231584-b292-3a26-8b0f-8939bee1e0f7.roa (raw, json) Hash identifier: 7d3JdXo/nOrerYUyLL+cQ7wHQJkSmynqqywo0lioCAA= Subject key identifier: 35:F5:90:52:98:84:AC:7E:C5:FB:40:C5:CB:D2:2F:71:0E:E2:8F:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BFEF95E844C7A1E16880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8231584-b292-3a26-8b0f-8939bee1e0f7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 17117 IP address blocks: 2001:470:ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:ef:95:e8:44:c7:a1:e1:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0de1aa7c-76d1-4616-87d2-9e64933f736c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:c4:f8:fa:a3:41:5e:c4:42:0c:f0:38:a7: 47:56:88:c4:c6:67:80:f7:f9:d5:8f:a3:14:d0:aa: d4:f4:59:62:31:b5:94:05:6a:2c:2d:5d:56:5a:2f: 54:f6:1e:7e:b9:d4:61:5b:c4:82:3c:46:3b:38:33: e6:a2:b7:21:76:7c:08:28:e9:2a:08:b3:57:df:fa: b7:66:93:d9:68:8c:c7:69:bc:08:f9:5b:bd:42:c8: de:05:03:cc:ed:ad:83:91:1c:07:3b:fd:0a:b1:3c: 8f:c2:43:9f:ec:c7:a8:0b:e2:0f:38:d5:d3:4d:de: 15:3a:bd:24:f9:49:47:8a:7d:c0:da:93:dc:f6:d7: 1b:3a:8a:e1:bc:08:ae:5c:f2:71:1d:70:15:ab:8e: aa:95:1c:17:17:9b:c6:33:36:e6:ae:9a:35:bd:82: 08:11:7a:be:df:a9:d2:81:d7:3c:16:67:7b:9f:1c: 29:20:ec:20:10:7a:bc:9c:33:8f:87:5c:6b:ee:c0: af:7d:ae:95:ce:3d:d8:02:eb:c1:23:c8:4f:44:a4: ba:34:f7:21:73:cf:9c:68:f5:cd:87:2a:2b:e4:c3: d8:b3:b1:89:ac:09:09:1b:66:d1:75:2a:33:33:30: 67:26:ef:03:fe:4f:9b:61:0e:9b:2a:c5:0a:77:4b: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:90:52:98:84:AC:7E:C5:FB:40:C5:CB:D2:2F:71:0E:E2:8F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8231584-b292-3a26-8b0f-8939bee1e0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3e:22:69:80:53:a4:39:06:e3:9f:d2:1c:7e:04:7f:b5:b6: b1:35:52:cb:87:00:d6:61:36:49:22:d6:11:e0:1a:29:02:59: 1c:58:3d:17:ef:28:2e:78:10:f8:98:cf:0e:a8:08:8f:ac:b4: 03:9a:fb:41:2b:88:60:9f:17:3f:0c:0c:29:7d:c9:60:9f:a9: 57:e7:b0:d9:02:e0:26:fc:48:69:67:5a:e1:ec:a8:99:07:c6: 68:02:f4:b5:dc:bf:fd:20:73:ce:11:03:78:7e:2a:11:ea:00: 1b:c2:ad:0e:e1:29:2e:42:a0:04:4c:83:9e:2b:0b:d3:71:5c: 08:5d:57:db:d6:69:b9:5b:41:5a:9e:17:56:7a:53:a8:47:10: cc:ba:4b:f4:34:f9:74:5c:c9:87:3b:b5:05:e9:89:8d:a1:ab: 3d:b1:77:79:14:dd:e4:8a:5a:ca:56:3e:d4:a5:44:15:fd:c4: c3:0b:b7:4a:c5:98:b3:02:b7:f2:eb:72:39:39:e3:c6:46:51: 66:3d:3b:a2:70:48:e3:80:65:b5:ad:76:19:72:d7:72:7b:48: 9e:55:51:bf:ec:71:b4:66:e3:6f:48:b4:37:35:da:57:d7:1d: ce:ec:49:1e:d9:b5:97:5d:4f:0b:a3:d4:63:0c:f1:df:9e:f9: ed:3b:94:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17/vlehEx6HhaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGRlMWFhN2MtNzZkMS00NjE2LTg3ZDItOWU2NDkzM2Y3MzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGjE+PqjQV7EQgzwOKdHVojExmeA9/nVj6MU 0KrU9FliMbWUBWosLV1WWi9U9h5+udRhW8SCPEY7ODPmorchdnwIKOkqCLNX3/q3 ZpPZaIzHabwI+Vu9QsjeBQPM7a2DkRwHO/0KsTyPwkOf7MeoC+IPONXTTd4VOr0k +UlHin3A2pPc9tcbOorhvAiuXPJxHXAVq46qlRwXF5vGMzbmrpo1vYIIEXq+36nS gdc8Fmd7nxwpIOwgEHq8nDOPh1xr7sCvfa6Vzj3YAuvBI8hPRKS6NPchc8+caPXN hyor5MPYs7GJrAkJG2bRdSozMzBnJu8D/k+bYQ6bKsUKd0twTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDX1kFKYhKx+xftAxcvSL3EO4o/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMzE1ODQtYjI5Mi0z YTI2LThiMGYtODkzOWJlZTFlMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGg+ImmAU6Q5BuOf0hx+BH+1trE1UsuHANZhNkki1hHgGikCWRxY PRfvKC54EPiYzw6oCI+stAOa+0EriGCfFz8MDCl9yWCfqVfnsNkC4Cb8SGlnWuHs qJkHxmgC9LXcv/0gc84RA3h+KhHqABvCrQ7hKS5CoARMg54rC9NxXAhdV9vWablb QVqeF1Z6U6hHEMy6S/Q0+XRcyYc7tQXpiY2hqz2xd3kU3eSKWspWPtSlRBX9xMML t0rFmLMCt/Lrcjk548ZGUWY9O6JwSOOAZbWtdhly13J7SJ5VUb/scbRm429ItDc1 2lfXHc7sSR7ZtZddTwuj1GMM8d+e+e07lKs= -----END CERTIFICATE-----Generated at Wed Oct 22 13:01:16 2025 by rpki-client