$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa File: d978219e-a272-3f43-8a67-9325428ac9d6.roa (raw, json) Hash identifier: H77T5k78Ba2ldrBmUXrJrzHih8ehK7WmFenRM8LfpFc= Subject key identifier: 2F:60:CC:23:89:EE:DE:3B:0B:0D:CE:19:BA:FE:B7:62:7F:55:A6:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C4D93B483755E4ECCA20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395301 IP address blocks: 2001:470:f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c4:d9:3b:48:37:55:e4:ec:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=51d9e9a0-b9a3-430a-8d54-f566124b5d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:bf:e7:1e:48:b7:b1:ee:c6:c4:4b:5e:79: fc:d2:28:66:cd:ba:6c:35:98:e4:00:9e:64:6d:f5: bc:79:e6:00:f5:6c:8f:51:20:a4:a3:00:7e:e4:df: f7:6b:87:0d:93:c5:ed:65:46:8e:de:7c:07:3b:10: 56:f1:20:54:ff:61:b2:26:ec:56:4c:59:5b:02:33: 77:ba:30:af:8e:ee:07:8d:ed:00:cc:1b:f7:fd:60: c4:4a:ac:cf:c1:de:ae:d2:8b:99:75:5f:af:39:13: 29:bd:d5:7b:bf:3b:8b:44:25:1a:30:8c:18:57:92: 4a:f1:82:14:ba:fd:56:78:8c:8d:e6:d5:2d:a6:4d: 26:dd:d0:c1:49:f8:91:7b:81:0c:f1:2c:fc:64:92: bd:95:01:d5:d8:21:fb:6a:e7:18:5a:21:b8:46:cf: a6:60:52:d0:89:0e:57:f6:f7:1a:5e:47:21:a3:5e: 32:c1:4d:e6:b3:94:d2:73:35:1c:e8:28:c2:17:11: ca:9c:a6:09:77:12:74:cb:d5:66:ca:6a:97:ed:3b: b1:ee:2c:4c:fd:04:e2:c1:fc:f8:bc:c8:36:dc:44: cf:5a:7a:e7:07:82:38:3c:7c:65:79:ff:76:3c:bf: bd:fe:38:3f:bb:b1:27:bd:20:12:b4:13:7d:d2:7f: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:CC:23:89:EE:DE:3B:0B:0D:CE:19:BA:FE:B7:62:7F:55:A6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c7:a5:b4:a2:08:9d:33:25:1c:68:cb:11:92:53:b3:49:ed: 43:53:01:a4:2e:ac:2d:25:2a:ee:4c:de:f0:94:d0:e3:9d:c5: 9f:f5:b1:75:b1:4a:f9:62:15:43:0f:36:a7:2a:fa:f6:d9:75: 21:4b:d4:7a:cb:6c:ec:ab:b7:63:c6:26:e6:52:03:3e:e7:bd: aa:b0:55:34:bb:73:2c:77:c5:1c:bc:e1:7e:3a:1f:15:75:3d: b6:5a:c9:ee:0e:7d:ec:1a:1e:af:3d:0b:78:fa:93:77:01:b8: 10:2f:84:6d:74:64:6a:e0:ca:55:41:dc:46:01:67:a6:a9:03: 8b:30:0a:ff:35:e2:e7:a2:c9:4b:cb:c5:ae:28:2b:d9:fd:8c: c6:a2:87:f6:48:81:e6:85:0d:7f:29:66:2e:4e:d0:fc:ab:06: 15:89:c4:44:89:66:c2:d7:4b:32:de:42:4c:91:9a:0d:a1:cf: 75:33:ab:f2:38:40:0b:4d:71:df:c8:e4:91:a9:91:70:b9:0c: d8:b1:50:12:35:4c:eb:68:46:36:62:76:c2:63:55:30:6b:3f: f8:2e:f7:a6:2e:19:71:35:75:12:ce:3a:5b:1e:6e:44:4f:31: a2:8f:da:44:6e:bc:91:a5:c0:7d:cb:c0:43:aa:d6:82:41:a3: bb:4b:dc:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18TZO0g3VeTsyiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTFkOWU5YTAtYjlhMy00MzBhLThkNTQtZjU2NjEyNGI1ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvji/5x5It7HuxsRLXnn80ihmzbpsNZjkAJ5k bfW8eeYA9WyPUSCkowB+5N/3a4cNk8XtZUaO3nwHOxBW8SBU/2GyJuxWTFlbAjN3 ujCvju4Hje0AzBv3/WDESqzPwd6u0ouZdV+vORMpvdV7vzuLRCUaMIwYV5JK8YIU uv1WeIyN5tUtpk0m3dDBSfiRe4EM8Sz8ZJK9lQHV2CH7aucYWiG4Rs+mYFLQiQ5X 9vcaXkcho14ywU3ms5TSczUc6CjCFxHKnKYJdxJ0y9VmymqX7Tux7ixM/QTiwfz4 vMg23ETPWnrnB4I4PHxlef92PL+9/jg/u7EnvSAStBN90n+5WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9gzCOJ7t47Cw3OGbr+t2J/VaZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDk3ODIxOWUtYTI3Mi0z ZjQzLThhNjctOTMyNTQyOGFjOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbHpbSiCJ0zJRxoyxGSU7NJ7UNTAaQurC0lKu5M3vCU0OOdxZ/1 sXWxSvliFUMPNqcq+vbZdSFL1HrLbOyrt2PGJuZSAz7nvaqwVTS7cyx3xRy84X46 HxV1PbZaye4OfewaHq89C3j6k3cBuBAvhG10ZGrgylVB3EYBZ6apA4swCv814uei yUvLxa4oK9n9jMaih/ZIgeaFDX8pZi5O0PyrBhWJxESJZsLXSzLeQkyRmg2hz3Uz q/I4QAtNcd/I5JGpkXC5DNixUBI1TOtoRjZidsJjVTBrP/gu96YuGXE1dRLOOlse bkRPMaKP2kRuvJGlwH3LwEOq1oJBo7tL3P8= -----END CERTIFICATE-----Generated at Tue Oct 28 00:58:13 2025 by rpki-client