$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa File: de5775c9-699c-34d1-9372-97684d19ea60.roa (raw, json) Hash identifier: RsclJNc37QsEcXlyuqe9QPkguKv6CI91Cb71OYp21xA= Subject key identifier: B8:0F:2E:F9:A5:37:41:C5:50:6D:7D:0F:4E:1C:BF:94:BF:BF:53:9E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB192679DF22BC2453135BA80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 43641 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:67:9d:f2:2b:c2:45:31:35:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d7b57f66-6157-44ae-90f8-250829df9da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:d0:d5:54:e5:86:8f:47:65:3d:c3:e6:25: 08:4c:ca:fe:a1:54:79:45:3c:14:d6:d1:a7:13:f2: c9:6c:9a:82:60:ef:dc:e2:de:c0:1c:7b:98:78:68: 99:23:77:b9:81:cb:82:28:c4:f0:83:b2:e6:e0:f7: 59:41:52:01:d8:9b:46:6b:b2:c6:d5:32:b3:00:38: ec:14:31:54:24:a7:12:7f:aa:fe:b1:a5:8a:02:37: 96:d7:a5:40:6f:73:93:b9:d5:8a:d3:8b:c7:b6:4b: 5c:4c:3c:1d:73:10:04:63:ab:1d:de:51:bd:0b:bf: 27:21:7d:a2:f3:90:d8:89:6a:3f:97:78:f7:1e:1b: 95:40:4b:c5:d0:5e:4a:02:7a:6c:cf:03:cf:5d:58: 95:5a:a3:44:39:35:dc:f2:f8:cb:9d:58:1f:64:6a: 01:ed:6e:a4:e5:0e:9a:2a:4b:e8:76:9a:e4:5c:3a: 14:d5:9c:02:3a:f6:fc:47:5c:60:ec:cb:a3:d8:de: 82:a0:92:5f:48:8e:0c:69:6b:35:66:32:37:28:e2: 81:25:b8:4f:83:20:08:84:33:97:a6:fd:46:97:c8: f5:d2:b0:c7:44:89:fb:40:f9:f3:8e:a1:55:4d:5c: d3:df:32:7a:bd:64:7b:ce:f5:75:7a:e4:56:51:64: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:2E:F9:A5:37:41:C5:50:6D:7D:0F:4E:1C:BF:94:BF:BF:53:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de5775c9-699c-34d1-9372-97684d19ea60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ff:47:bc:47:fa:78:8a:89:50:e2:28:31:fd:99:d2:d9:07: cf:63:e2:cd:06:ff:c5:5d:e7:01:6c:42:ff:21:40:3a:df:a4: 3b:33:25:8c:7c:d8:48:6f:60:d1:76:bb:23:d8:88:b2:b5:57: 86:a7:85:e6:97:ef:a7:eb:4b:05:18:38:ce:6f:dc:07:db:c0: aa:99:80:e2:b4:01:10:4e:00:ee:e2:2b:be:1b:30:91:96:e6: 58:ec:0d:87:d6:1e:3d:45:20:7e:b6:e4:43:b5:f3:18:4d:fb: 0e:b0:d4:ed:7c:a5:fd:d1:b9:bc:84:65:4f:a4:8b:17:c4:75: 5b:6c:eb:c3:28:a7:43:38:06:43:4f:37:15:8b:7d:3c:70:71: 2c:fd:96:96:ce:39:5f:6e:fd:56:f5:73:e7:c5:ea:1d:a8:7d: 55:5e:56:c0:5b:5e:31:4c:c8:74:2f:27:15:8d:f9:16:db:05: 56:68:f0:f4:15:3a:55:0a:95:b0:2d:e9:c6:91:0b:4f:c7:a9: 20:1b:23:56:35:d7:15:6b:56:49:6c:16:03:01:16:8d:e7:ba: c5:ee:76:41:0d:6b:ed:c1:ef:5d:d0:8a:3b:14:99:f5:29:77: cc:e2:12:2f:68:b9:df:46:f7:67:1e:01:b5:3c:9c:97:4a:4c: e6:e2:5c:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkmed8ivCRTE1uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDdiNTdmNjYtNjE1Ny00NGFlLTkwZjgtMjUwODI5ZGY5ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/Q1VTlho9HZT3D5iUITMr+oVR5RTwU1tGn E/LJbJqCYO/c4t7AHHuYeGiZI3e5gcuCKMTwg7Lm4PdZQVIB2JtGa7LG1TKzADjs FDFUJKcSf6r+saWKAjeW16VAb3OTudWK04vHtktcTDwdcxAEY6sd3lG9C78nIX2i 85DYiWo/l3j3HhuVQEvF0F5KAnpszwPPXViVWqNEOTXc8vjLnVgfZGoB7W6k5Q6a KkvodprkXDoU1ZwCOvb8R1xg7Muj2N6CoJJfSI4MaWs1ZjI3KOKBJbhPgyAIhDOX pv1Gl8j10rDHRIn7QPnzjqFVTVzT3zJ6vWR7zvV1euRWUWTecwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgPLvmlN0HFUG19D04cv5S/v1OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU1Nzc1YzktNjk5Yy0z NGQxLTkzNzItOTc2ODRkMTllYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHb/R7xH+niKiVDiKDH9mdLZB89j4s0G/8Vd5wFsQv8hQDrfpDsz JYx82EhvYNF2uyPYiLK1V4anheaX76frSwUYOM5v3AfbwKqZgOK0ARBOAO7iK74b MJGW5ljsDYfWHj1FIH625EO18xhN+w6w1O18pf3RubyEZU+kixfEdVts68Mop0M4 BkNPNxWLfTxwcSz9lpbOOV9u/Vb1c+fF6h2ofVVeVsBbXjFMyHQvJxWN+RbbBVZo 8PQVOlUKlbAt6caRC0/HqSAbI1Y11xVrVklsFgMBFo3nusXudkENa+3B713QijsU mfUpd8ziEi9oud9G92ceAbU8nJdKTObiXHQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:21 2025 by rpki-client