$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa File: df4f7c16-6ad6-390f-9888-d5033f96f79f.roa (raw, json) Hash identifier: kav2E/2gzPPkH4j7QC+n5ACqbT9KDJ23+kcVUy3pXxU= Subject key identifier: 9F:44:A3:6A:DB:AD:22:0B:61:16:BA:CD:01:7E:A0:22:04:D1:59:0F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F507AAA21710087FF280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 210000 IP address blocks: 2001:470:299::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f5:07:aa:a2:17:10:08:7f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=30157c70-e5a5-43a3-8552-508be199daf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:58:d5:b9:9d:60:95:b8:f4:82:37:7e:be: 2c:f7:df:f6:d0:46:ad:e8:b5:79:d6:2e:e5:ce:b6: 0c:08:08:51:34:32:04:7d:8a:9f:fc:4f:a1:b5:01: 38:75:d7:10:20:a4:47:0c:2b:12:36:88:8c:3a:7f: 43:63:8b:88:6c:37:a9:fe:ee:8e:cb:dd:49:24:8e: 6e:cb:75:90:7d:ca:0b:0e:43:48:24:84:8a:dd:4c: a3:be:66:f5:15:4b:85:79:4d:aa:17:95:00:08:ba: 2b:ea:e7:63:30:2a:a1:e9:8d:fb:14:30:94:f7:07: 90:c6:b0:42:be:0c:23:87:6b:28:89:44:be:0f:68: 30:78:ac:57:11:ce:76:d1:a8:47:eb:4b:ab:f5:5b: 6e:7d:1e:95:8a:2d:46:ac:30:b4:e1:0f:1b:9c:fb: 75:5f:01:d3:71:b1:6a:7b:80:f4:93:b5:4e:2a:10: 89:e6:9d:7f:94:59:1c:d8:10:00:bb:15:b8:98:a6: 74:a0:03:88:ac:07:70:44:9b:f3:13:1c:5b:c1:b8: 3e:e4:e2:4b:43:bd:fc:0f:06:b3:3d:63:9c:7c:1b: 9d:0a:16:37:c3:3a:90:c1:a4:76:55:a6:2c:a8:b6: 70:7a:6b:af:c9:f2:ed:d3:16:a4:e4:8e:3b:c0:80: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:A3:6A:DB:AD:22:0B:61:16:BA:CD:01:7E:A0:22:04:D1:59:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:299::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:69:43:8c:a0:63:62:cf:2f:81:4a:12:76:1c:96:8b:fa:74: 87:d3:ef:2b:13:4e:75:bf:52:80:81:36:e4:d4:a2:58:f6:90: 52:9d:0e:62:7e:4d:70:b0:0f:c6:cf:41:9b:4b:8b:de:31:0d: 9d:46:54:cd:b2:98:02:97:85:c7:3d:ef:57:3f:52:ca:45:90: f8:c3:22:51:59:22:29:1f:f8:fb:7c:5d:76:9b:d4:65:0d:0a: e7:10:24:58:8d:04:59:2a:11:39:cf:d3:ec:12:57:c4:de:9b: 64:d3:9b:e2:bc:88:67:5f:ec:e4:23:c4:cc:6e:e0:92:f1:30: 21:76:4f:d4:bc:bb:b2:fa:3d:7b:98:b5:6a:30:a5:9b:f0:bb: 81:83:a7:3a:58:50:b2:7b:3c:70:dc:05:8b:6d:f4:8b:5d:f0: bc:e7:04:00:23:97:5c:83:c9:16:b2:65:fd:d3:47:0b:5f:37: 65:6c:30:a4:0c:f4:6d:ed:8c:78:c3:d6:ff:5a:c8:4e:83:3d: 80:ec:68:8f:0a:2e:bf:50:8b:0f:5d:87:77:cd:45:ef:61:aa: 96:4d:0e:9a:e0:48:81:95:29:b5:ac:77:49:eb:6b:74:4d:12: fd:40:62:00:2a:60:0b:ef:e7:30:2f:d4:6a:9e:e0:fd:bd:9b: 67:48:1e:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/UHqqIXEAh/8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzAxNTdjNzAtZTVhNS00M2EzLTg1NTItNTA4YmUxOTlkYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCNY1bmdYJW49II3fr4s99/20Eat6LV51i7l zrYMCAhRNDIEfYqf/E+htQE4ddcQIKRHDCsSNoiMOn9DY4uIbDep/u6Oy91JJI5u y3WQfcoLDkNIJISK3Uyjvmb1FUuFeU2qF5UACLor6udjMCqh6Y37FDCU9weQxrBC vgwjh2soiUS+D2gweKxXEc520ahH60ur9VtufR6Vii1GrDC04Q8bnPt1XwHTcbFq e4D0k7VOKhCJ5p1/lFkc2BAAuxW4mKZ0oAOIrAdwRJvzExxbwbg+5OJLQ738Dwaz PWOcfBudChY3wzqQwaR2VaYsqLZwemuvyfLt0xak5I47wIA7GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9Eo2rbrSILYRa6zQF+oCIE0VkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY0ZjdjMTYtNmFkNi0z OTBmLTk4ODgtZDUwMzNmOTZmNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1pQ4ygY2LPL4FKEnYclov6dIfT7ysTTnW/UoCBNuTUolj2kFKd DmJ+TXCwD8bPQZtLi94xDZ1GVM2ymAKXhcc971c/UspFkPjDIlFZIikf+Pt8XXab 1GUNCucQJFiNBFkqETnP0+wSV8Tem2TTm+K8iGdf7OQjxMxu4JLxMCF2T9S8u7L6 PXuYtWowpZvwu4GDpzpYULJ7PHDcBYtt9Itd8LznBAAjl1yDyRayZf3TRwtfN2Vs MKQM9G3tjHjD1v9ayE6DPYDsaI8KLr9Qiw9dh3fNRe9hqpZNDprgSIGVKbWsd0nr a3RNEv1AYgAqYAvv5zAv1Gqe4P29m2dIHn0= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:54 2025 by rpki-client