$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa File: dba82392-5667-3988-bdd9-348348548257.roa (raw, json) Hash identifier: iH8xcM1JCwGnEKlDcyQiXAT7vcwdfxLrrs8Ve/ZWhG0= Subject key identifier: 14:88:44:45:32:12:48:9E:D8:39:1A:EB:7B:87:CC:91:9A:E1:42:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CA824913EE47D41BEDC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 55195 IP address blocks: 2001:470:209::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ca:82:49:13:ee:47:d4:1b:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ea0c8f9d-88b8-420e-9c0f-632cb31ec0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:9f:8c:80:1d:54:5f:59:fd:17:2b:1a:35: 12:96:d7:45:14:1b:fe:e6:4a:a9:6c:4a:18:e5:76: 50:de:1d:5b:5a:2c:f2:0a:0f:d5:0c:3f:a3:a6:d2: b3:0f:de:1a:d4:54:6d:38:3a:46:21:52:e6:7a:ad: 60:9b:ea:da:f6:c0:5c:06:67:01:ad:b0:ad:1a:a7: 5e:22:cf:2c:36:64:3d:f9:74:94:84:34:e0:37:0a: 5f:8d:ab:b2:4a:36:3e:e5:99:05:18:a7:c4:11:e5: 02:1e:28:76:40:b1:e8:82:4a:24:2e:b6:ee:2f:1f: 20:5f:03:98:37:c5:e1:56:b4:c1:0f:5c:b5:5d:77: b7:76:3f:fa:6a:85:e8:96:04:a2:f8:4a:cf:f9:db: c1:c6:58:10:65:b4:4d:4b:5a:98:67:3f:82:0f:85: 7b:93:a3:c3:50:44:55:14:c4:ff:e0:48:51:13:93: ba:9c:3a:30:1a:6f:44:74:8f:65:db:e6:fa:d9:d6: 8f:54:89:67:64:7c:c9:83:c1:96:ca:7d:dd:42:60: 14:9e:9c:06:68:48:4d:05:09:43:6b:62:7a:79:d9: ca:00:9f:25:e9:1a:89:27:1a:9a:d4:38:fb:4a:0d: 04:b4:51:42:61:bf:81:a8:fb:b2:2c:19:ef:e5:83: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:88:44:45:32:12:48:9E:D8:39:1A:EB:7B:87:CC:91:9A:E1:42:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dba82392-5667-3988-bdd9-348348548257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:209::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b5:07:82:44:9a:5d:83:76:67:fc:b4:83:cc:3c:4a:a0:48: b0:30:35:97:a5:d8:e5:c5:a0:0e:97:52:d4:eb:1f:0a:f3:8c: 16:f9:b9:e2:1a:32:bd:85:f5:4f:b4:ad:ef:31:b4:49:d4:4c: f5:a3:98:a9:64:ef:1a:f5:d6:45:b5:ca:45:68:84:13:41:7d: 97:e3:c8:f6:ea:94:0a:a8:f5:e0:49:a0:46:a1:74:58:2f:73: a5:da:49:8d:bf:93:ce:b1:e9:13:e4:ad:e7:ef:35:d0:b2:c3: 15:1d:21:ba:e3:9c:85:c0:6f:01:12:04:1d:49:db:d9:7d:a7: a5:be:ea:a0:37:43:15:dd:ab:b8:a3:95:b5:b6:42:56:ea:e0: e2:9f:33:e7:af:eb:5d:f4:37:96:46:e6:4d:5b:ba:c5:04:ab: a0:8e:ef:2b:e9:0c:ac:91:7f:bb:cb:64:5f:b3:8f:21:5e:7a: 5d:61:62:f1:b3:2e:0f:a0:e5:a3:3a:87:96:1f:fb:e9:98:ef: 4a:cb:3f:84:cb:a3:e0:90:58:39:9a:09:b1:e3:40:9b:fc:2f: 30:58:a0:50:54:75:15:9f:24:e0:3e:ee:8e:03:05:65:59:54: 74:67:68:59:8e:1e:6f:9f:5d:92:02:cb:d9:9c:40:12:95:e6: 6a:e6:36:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18qCSRPuR9Qb7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWEwYzhmOWQtODhiOC00MjBlLTljMGYtNjMyY2IzMWVjMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXefjIAdVF9Z/RcrGjUSltdFFBv+5kqpbEoY 5XZQ3h1bWizyCg/VDD+jptKzD94a1FRtODpGIVLmeq1gm+ra9sBcBmcBrbCtGqde Is8sNmQ9+XSUhDTgNwpfjauySjY+5ZkFGKfEEeUCHih2QLHogkokLrbuLx8gXwOY N8XhVrTBD1y1XXe3dj/6aoXolgSi+ErP+dvBxlgQZbRNS1qYZz+CD4V7k6PDUERV FMT/4EhRE5O6nDowGm9EdI9l2+b62daPVIlnZHzJg8GWyn3dQmAUnpwGaEhNBQlD a2J6ednKAJ8l6RqJJxqa1Dj7Sg0EtFFCYb+BqPuyLBnv5YO28wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSIREUyEkie2Dka63uHzJGa4UJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGJhODIzOTItNTY2Ny0z OTg4LWJkZDktMzQ4MzQ4NTQ4MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD61B4JEml2Ddmf8tIPMPEqgSLAwNZel2OXFoA6XUtTrHwrzjBb5 ueIaMr2F9U+0re8xtEnUTPWjmKlk7xr11kW1ykVohBNBfZfjyPbqlAqo9eBJoEah dFgvc6XaSY2/k86x6RPkrefvNdCywxUdIbrjnIXAbwESBB1J29l9p6W+6qA3QxXd q7ijlbW2Qlbq4OKfM+ev6130N5ZG5k1busUEq6CO7yvpDKyRf7vLZF+zjyFeel1h YvGzLg+g5aM6h5Yf++mY70rLP4TLo+CQWDmaCbHjQJv8LzBYoFBUdRWfJOA+7o4D BWVZVHRnaFmOHm+fXZICy9mcQBKV5mrmNpk= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:31 2025 by rpki-client