$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa File: ddb71113-1076-356e-9ae6-7ad953a944c3.roa (raw, json) Hash identifier: R0nZrJIgouoBhnbvdyF/9KQwcdQRk4zkGVYH4vyuAgU= Subject key identifier: 72:90:62:08:C3:F6:F7:79:33:03:AC:7F:60:78:5A:D8:36:37:A4:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D350528DEF13DF233D10 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397409 IP address blocks: 2001:470:2db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d3:50:52:8d:ef:13:df:23:3d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c748b502-3a9e-491b-8304-9e520c46437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:7b:f8:23:5c:5e:67:ac:15:59:33:e5:d8: 1a:70:82:43:1a:38:e8:58:f0:75:49:d2:e5:19:bf: 23:63:2f:e0:4c:fc:1b:33:ff:b9:9a:82:a6:6a:d9: e6:f4:7a:14:f9:85:7d:f5:11:55:4b:98:4e:8b:03: d8:b1:40:a9:7a:4c:b5:bf:91:96:f6:99:3a:60:fb: 1e:6e:ba:73:0e:77:f9:15:e8:d0:3e:39:b9:a7:3e: cb:24:54:9c:c0:d3:9e:49:59:89:7e:54:03:1a:42: cf:98:be:3b:87:de:20:a8:87:eb:67:5f:8a:4e:93: 31:46:7a:d4:ab:da:b5:33:f8:6e:01:25:18:ef:63: e4:eb:58:c1:10:86:76:14:8b:e8:be:58:ca:58:f8: ba:e1:77:5c:09:69:ba:15:6c:97:97:5a:26:91:92: 4f:88:0c:66:b4:6c:1f:3b:af:4e:23:e1:e6:18:df: 15:13:5e:90:53:d8:e3:21:16:33:ba:cb:b5:2c:66: b6:25:0d:a4:99:4c:7b:f0:b2:15:ef:be:a6:35:89: 24:54:f3:a9:1b:d8:1e:88:25:fa:e1:ed:24:95:a8: d9:92:01:d3:85:43:0f:9e:79:02:bb:f5:38:8b:e0: a5:80:7c:6f:4c:7a:73:1d:5e:0b:ee:38:77:8f:d2: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:62:08:C3:F6:F7:79:33:03:AC:7F:60:78:5A:D8:36:37:A4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddb71113-1076-356e-9ae6-7ad953a944c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:61:d6:12:3f:06:35:ce:03:7b:dd:4e:72:04:fc:75:8d:b2: e7:a5:45:5c:e8:4f:14:ad:0f:fb:ea:43:40:ef:f6:7d:15:14: fc:4d:92:02:b3:09:de:13:5c:d0:c9:47:cf:02:86:be:79:fa: 9c:1b:be:b8:f6:f1:11:30:ae:96:35:01:d8:04:ca:4d:dc:6c: 7a:8f:1b:93:af:27:3f:64:75:ad:b5:17:d9:89:2a:97:1a:1b: 52:53:d5:42:1c:eb:4d:c6:0b:e0:03:38:c2:79:89:1f:54:61: 69:f5:fe:74:f3:d8:f1:70:14:0f:b6:82:fd:b6:bd:34:02:91: cf:09:7b:34:36:c6:6a:88:58:66:41:14:69:b7:7f:e1:dc:ca: cf:0b:89:84:96:25:38:62:e4:04:96:7f:18:2a:a6:d5:12:7e: 4d:a1:5d:16:34:f3:11:e0:c5:88:2b:5f:f0:33:21:86:31:db: d4:b2:86:04:ea:84:73:f1:b1:18:67:26:73:74:ca:00:0a:b4: b6:30:4f:88:60:22:60:c6:2e:59:4f:ba:a4:f2:00:e9:b5:f1: 09:7e:10:ff:03:68:b8:16:23:8f:7e:0f:3d:05:b8:3e:a5:b1: cd:08:95:13:2f:95:db:2a:fa:aa:1e:b6:79:8a:71:86:c6:fa: a8:17:d7:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19NQUo3vE98jPRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Yzc0OGI1MDItM2E5ZS00OTFiLTgzMDQtOWU1MjBjNDY0MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNF7+CNcXmesFVkz5dgacIJDGjjoWPB1SdLl Gb8jYy/gTPwbM/+5moKmatnm9HoU+YV99RFVS5hOiwPYsUCpeky1v5GW9pk6YPse brpzDnf5FejQPjm5pz7LJFScwNOeSVmJflQDGkLPmL47h94gqIfrZ1+KTpMxRnrU q9q1M/huASUY72Pk61jBEIZ2FIvovljKWPi64XdcCWm6FWyXl1omkZJPiAxmtGwf O69OI+HmGN8VE16QU9jjIRYzusu1LGa2JQ2kmUx78LIV776mNYkkVPOpG9geiCX6 4e0klajZkgHThUMPnnkCu/U4i+ClgHxvTHpzHV4L7jh3j9JUQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKQYgjD9vd5MwOsf2B4Wtg2N6SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGRiNzExMTMtMTA3Ni0z NTZlLTlhZTYtN2FkOTUzYTk0NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGFh1hI/BjXOA3vdTnIE/HWNsuelRVzoTxStD/vqQ0Dv9n0VFPxN kgKzCd4TXNDJR88Chr55+pwbvrj28REwrpY1AdgEyk3cbHqPG5OvJz9kda21F9mJ KpcaG1JT1UIc603GC+ADOMJ5iR9UYWn1/nTz2PFwFA+2gv22vTQCkc8JezQ2xmqI WGZBFGm3f+Hcys8LiYSWJThi5ASWfxgqptUSfk2hXRY08xHgxYgrX/AzIYYx29Sy hgTqhHPxsRhnJnN0ygAKtLYwT4hgImDGLllPuqTyAOm18Ql+EP8DaLgWI49+Dz0F uD6lsc0IlRMvldsq+qoetnmKcYbG+qgX12c= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:24 2025 by rpki-client