$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa File: ecbbaa49-5474-3208-80bf-76e12c35efa2.roa (raw, json) Hash identifier: rcer57lOMtByR/9WQyWEQvFs+A/t0XGFtYt7oLe+cis= Subject key identifier: 3F:B2:5F:F7:27:2F:EF:B7:D1:6D:F2:47:A8:25:A4:A4:CD:8F:3B:F4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BEF51A2D3BF12A0F3400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 63368 IP address blocks: 2001:470:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:be:f5:1a:2d:3b:f1:2a:0f:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f958b012-659f-489d-94d6-8d9159842a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:06:c9:a3:15:e1:bb:a5:ae:40:51:91:87:a2: f6:8b:d1:1c:10:9e:a9:eb:1d:7a:18:29:91:62:ad: 83:8b:bc:ee:65:6d:ee:63:40:26:dc:39:84:12:af: c0:83:78:40:74:ee:0c:33:fd:75:28:e6:9a:e3:e1: 0a:b9:02:f4:82:b8:35:e7:f6:d9:05:e3:1f:fb:39: 39:51:8e:0b:db:a2:1c:ad:6c:a4:7d:09:27:a9:76: c8:63:c1:15:5a:7f:b1:f6:d6:e4:f2:ea:60:ed:ec: e0:dd:43:01:58:de:06:78:6e:b4:a5:a7:f9:4f:f7: d3:e6:a7:b9:7e:91:9b:e9:5d:14:23:8b:d7:77:20: c4:6b:db:53:82:89:e3:3c:d8:00:39:78:bc:c5:46: 54:1d:c8:1f:c7:db:46:04:6c:87:3a:4b:70:81:e9: e0:2d:db:20:d9:d4:c5:f9:22:c5:1d:08:4a:73:0d: 4b:a4:9b:bf:da:f6:26:ff:7d:e4:66:7a:ab:95:83: 13:ae:92:be:87:8a:0f:8c:4a:15:0b:f0:ba:b9:ef: 71:5c:f1:ea:8e:c7:18:50:3f:35:55:19:56:86:5e: 99:a2:7d:ad:42:a5:fb:09:b3:24:e3:76:d0:b3:ee: ff:db:d8:67:c8:1f:38:1b:c2:76:3b:fd:3a:4b:70: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B2:5F:F7:27:2F:EF:B7:D1:6D:F2:47:A8:25:A4:A4:CD:8F:3B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecbbaa49-5474-3208-80bf-76e12c35efa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:9b:07:cb:e3:6c:f2:ea:10:8f:9d:24:b4:b7:e4:79:31:0b: cc:12:1d:dd:99:23:37:6a:ee:a9:18:76:9b:32:ad:a3:39:5c: fa:1c:dd:1c:61:c2:26:e7:af:4e:d3:cf:cb:e9:cb:a6:ad:7b: 0c:7f:d2:df:c6:86:ea:c8:7d:a5:88:2e:f2:c5:3c:a9:cd:a1: 77:70:68:77:c3:b1:3a:0c:a5:60:f7:95:89:c6:50:9d:bd:db: ac:4b:56:7d:ff:4b:8d:10:d0:c6:be:11:a0:b0:a6:8b:2c:1a: ff:ff:cd:26:5b:da:30:4f:19:80:c4:20:6d:8e:9e:a5:8e:67: 56:46:6f:2f:cc:32:28:d8:e4:fb:0f:de:1a:5d:c8:ee:e4:c0: 4b:45:8d:7e:5b:95:4d:42:ea:87:66:1b:2b:55:fc:8a:65:b6: 7d:66:db:16:aa:6c:91:20:eb:4e:4d:c7:28:09:ea:66:54:57: dd:df:a2:0f:20:d9:78:59:0b:71:63:73:fa:f4:de:ec:f7:91: 77:fd:de:39:e1:fc:73:60:20:30:e3:f6:41:e9:52:ae:71:08: 07:61:0d:76:f4:a9:84:c1:fa:d5:ab:72:e7:03:f2:5d:4c:9e: 64:9e:08:02:de:c4:61:76:99:7b:6f:13:9d:84:f6:21:dd:73: cf:65:b1:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1771Gi078SoPNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Zjk1OGIwMTItNjU5Zi00ODlkLTk0ZDYtOGQ5MTU5ODQyYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAbJoxXhu6WuQFGRh6L2i9EcEJ6p6x16GCmR Yq2Di7zuZW3uY0Am3DmEEq/Ag3hAdO4MM/11KOaa4+EKuQL0grg15/bZBeMf+zk5 UY4L26IcrWykfQknqXbIY8EVWn+x9tbk8upg7ezg3UMBWN4GeG60paf5T/fT5qe5 fpGb6V0UI4vXdyDEa9tTgonjPNgAOXi8xUZUHcgfx9tGBGyHOktwgengLdsg2dTF +SLFHQhKcw1LpJu/2vYm/33kZnqrlYMTrpK+h4oPjEoVC/C6ue9xXPHqjscYUD81 VRlWhl6Zon2tQqX7CbMk43bQs+7/29hnyB84G8J2O/06S3C8XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+yX/cnL++30W3yR6glpKTNjzv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWNiYmFhNDktNTQ3NC0z MjA4LTgwYmYtNzZlMTJjMzVlZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKibB8vjbPLqEI+dJLS35HkxC8wSHd2ZIzdq7qkYdpsyraM5XPoc 3Rxhwibnr07Tz8vpy6atewx/0t/GhurIfaWILvLFPKnNoXdwaHfDsToMpWD3lYnG UJ2926xLVn3/S40Q0Ma+EaCwpossGv//zSZb2jBPGYDEIG2OnqWOZ1ZGby/MMijY 5PsP3hpdyO7kwEtFjX5blU1C6odmGytV/Ipltn1m2xaqbJEg605NxygJ6mZUV93f og8g2XhZC3Fjc/r03uz3kXf93jnh/HNgIDDj9kHpUq5xCAdhDXb0qYTB+tWrcucD 8l1MnmSeCALexGF2mXtvE52E9iHdc89lsXM= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:39 2025 by rpki-client