$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee9b2425-87dc-323c-97b1-29153d2dd236.roa File: ee9b2425-87dc-323c-97b1-29153d2dd236.roa (raw, json) Hash identifier: V2FiBbr9JU/kR70cyLGP+z1TlSVXuAtZtWOUXQL6My0= Subject key identifier: FC:33:A9:09:BF:AA:2A:49:E3:F1:AC:D4:8C:F7:FE:F7:62:F3:A6:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D27E8B120DC8C129D340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee9b2425-87dc-323c-97b1-29153d2dd236.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 49461 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d2:7e:8b:12:0d:c8:c1:29:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5221d1dd-b74d-4543-8255-03dbbf1e7eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:bb:01:eb:5c:18:44:41:21:1c:1e:34:00: b7:9d:52:2f:aa:37:56:46:c8:bb:96:10:4b:31:03: 29:0b:63:59:3e:1b:3a:4f:a5:40:57:5d:4b:c9:f2: a5:bc:bf:4c:36:23:d7:b5:07:e6:4e:25:cc:66:16: fe:05:c1:f5:93:c9:dd:dc:d4:87:b2:c7:99:3f:46: 8d:6f:eb:6c:f5:c6:53:04:db:5b:b9:a2:53:74:9e: 4b:96:fd:25:08:3f:63:5a:b0:05:b0:c2:ef:cc:b3: 63:31:f2:17:a1:8e:3a:53:d3:f3:68:fe:0d:ec:80: 30:f5:97:08:ab:d9:7a:c0:de:ab:3b:15:ce:85:f7: cd:f3:d9:35:80:ab:25:37:b5:2b:47:63:98:d7:ec: a9:ad:34:0c:b1:d7:f7:5a:9f:06:f7:8d:f6:42:98: 4b:db:e8:e2:5b:07:68:5d:87:88:e6:4b:e1:19:44: 87:b8:be:83:e3:8c:d2:e8:c7:c7:fa:00:57:ac:57: 3e:ba:49:01:db:31:32:5e:56:28:fd:41:dd:53:14: 27:0e:a5:aa:ef:ee:98:78:e1:86:1a:45:2e:6e:11: a6:ed:6c:92:59:1e:e8:7d:19:02:2c:2e:66:79:e6: c7:01:70:77:6a:48:2b:05:52:5f:44:dd:f9:af:e0: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:33:A9:09:BF:AA:2A:49:E3:F1:AC:D4:8C:F7:FE:F7:62:F3:A6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee9b2425-87dc-323c-97b1-29153d2dd236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f8:2d:61:d2:ac:2a:58:cc:d5:0f:e2:eb:68:8c:b6:93:44: 2a:17:d2:2c:ae:88:55:d5:66:f9:25:3a:4f:42:87:c5:39:b7: c1:e7:c3:48:8f:47:52:b0:30:c0:ad:99:56:25:2c:9f:2c:33: 35:14:b5:43:94:c3:07:01:2e:44:1f:e1:79:aa:51:b6:f6:7f: e6:b7:a6:10:2a:c6:71:5d:21:9e:2e:bd:b6:dc:3a:3f:94:64: 08:19:00:c5:2f:52:be:50:4a:e4:b5:ed:6b:85:a6:e4:d2:19: 9f:ef:a7:34:0c:a2:8e:db:22:10:05:d9:64:d7:7b:7e:66:4b: ba:a3:14:33:85:54:fe:05:ae:c0:74:da:fd:81:d5:8b:d0:18: 71:12:4f:8c:7f:c0:9f:0d:12:b4:48:54:28:4a:f3:2b:0a:a5: f9:a2:8c:cc:6e:1d:f9:15:01:af:4a:e0:e1:01:89:b1:67:e1: d9:3d:8d:eb:0b:ec:05:e7:50:7b:28:8a:eb:24:9e:88:d7:ff: ef:97:ae:61:2a:ff:59:23:f8:c1:92:d1:c2:9a:0c:19:40:70: ec:82:d4:8a:eb:14:9a:97:22:12:fd:10:68:bf:40:ca:ee:d0: 27:57:a8:9a:68:c4:cf:fe:4a:c8:e5:af:5a:9c:c3:f6:f7:c7: 9b:1c:8f:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19J+ixINyMEp00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTIyMWQxZGQtYjc0ZC00NTQzLTgyNTUtMDNkYmJmMWU3ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJy7AetcGERBIRweNAC3nVIvqjdWRsi7lhBL MQMpC2NZPhs6T6VAV11LyfKlvL9MNiPXtQfmTiXMZhb+BcH1k8nd3NSHsseZP0aN b+ts9cZTBNtbuaJTdJ5Llv0lCD9jWrAFsMLvzLNjMfIXoY46U9PzaP4N7IAw9ZcI q9l6wN6rOxXOhffN89k1gKslN7UrR2OY1+yprTQMsdf3Wp8G9432QphL2+jiWwdo XYeI5kvhGUSHuL6D44zS6MfH+gBXrFc+ukkB2zEyXlYo/UHdUxQnDqWq7+6YeOGG GkUubhGm7WySWR7ofRkCLC5meebHAXB3akgrBVJfRN35r+BCbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwzqQm/qipJ4/Gs1Iz3/vdi86ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWU5YjI0MjUtODdkYy0z MjNjLTk3YjEtMjkxNTNkMmRkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAL4LWHSrCpYzNUP4utojLaTRCoX0iyuiFXVZvklOk9Ch8U5t8Hn w0iPR1KwMMCtmVYlLJ8sMzUUtUOUwwcBLkQf4XmqUbb2f+a3phAqxnFdIZ4uvbbc Oj+UZAgZAMUvUr5QSuS17WuFpuTSGZ/vpzQMoo7bIhAF2WTXe35mS7qjFDOFVP4F rsB02v2B1YvQGHEST4x/wJ8NErRIVChK8ysKpfmijMxuHfkVAa9K4OEBibFn4dk9 jesL7AXnUHsoiusknojX/++XrmEq/1kj+MGS0cKaDBlAcOyC1IrrFJqXIhL9EGi/ QMru0CdXqJpoxM/+Ssjlr1qcw/b3x5scj0g= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:41 2025 by rpki-client