$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa File: f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa (raw, json) Hash identifier: bNKXgOcG5SUrpPCussfKjWKcxPttGrOV+/MtZGYioOU= Subject key identifier: B8:AF:89:A7:BD:9B:41:44:00:24:42:2F:C7:AF:57:53:9D:71:54:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F196C63B69F7EE9ECF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 13188 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f1:96:c6:3b:69:f7:ee:9e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b900d7a9-c0ca-43a9-9653-e10bb8192dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:c8:9a:01:3c:e0:83:01:bd:e1:fc:53:75: 3d:58:13:c0:db:d2:4f:07:ea:db:fe:f1:6d:40:74: d4:85:64:d3:c5:35:61:0e:e4:8e:38:3a:31:ea:9b: c4:d4:66:da:ba:4d:4f:34:a2:70:7b:98:35:da:e4: 67:8c:4e:a3:d5:00:a5:c8:dd:8e:cd:07:60:20:d1: 4b:fa:b0:e8:0c:bd:e7:c1:86:90:d6:0c:2a:19:66: e7:a4:e4:74:ce:13:ac:75:f5:51:96:7a:a2:28:66: b3:15:74:7f:72:8e:c4:ba:02:8f:41:17:53:90:c9: 7d:38:83:59:72:8a:da:6a:0a:3d:4f:4b:cf:45:9b: cf:75:69:c9:9f:d2:f1:d3:41:6a:95:00:85:ac:d0: 61:a2:01:61:35:67:69:af:cd:dc:d1:c2:25:e5:2b: 8c:29:c7:a2:f2:a0:87:c3:c1:78:6f:34:43:9b:1d: 30:ee:71:0b:bd:e1:4a:3f:8e:b3:05:02:73:5d:c7: 9a:8f:e2:8c:b2:06:4e:e7:bc:08:96:04:fa:bc:77: 0c:f8:d9:89:a0:32:5d:91:98:d4:f9:49:b6:37:e8: 4f:39:f8:b7:09:66:69:dd:e0:00:e0:1c:ce:cd:a5: d8:33:df:db:d6:65:05:e0:78:52:eb:e7:d5:3d:8b: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:89:A7:BD:9B:41:44:00:24:42:2F:C7:AF:57:53:9D:71:54:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8a:7b:19:79:84:9e:69:0e:78:1d:ff:24:b4:33:01:71:74: f4:d1:ee:a8:a5:2b:52:8d:fc:0b:fd:94:f2:ac:d7:42:eb:99: 09:09:1f:74:44:64:45:5d:ad:aa:e4:c8:00:e1:e3:f9:a5:33: f2:7c:5d:13:23:c9:f8:4a:9e:8c:a8:9a:72:25:de:c3:c7:f3: af:0c:d3:c8:15:78:f7:01:65:09:3c:9f:0f:ca:37:1b:7c:34: c3:1a:b3:5a:2d:8e:9a:fd:d8:43:8d:69:9e:9a:61:33:76:cc: fb:de:17:90:52:5d:96:a5:8a:fd:d9:f4:00:60:ea:b9:87:8d: 9f:fb:ae:1b:a9:e1:2c:b6:69:c8:62:37:31:d8:d6:5b:7f:ed: d4:cb:8f:15:ac:ec:38:0f:8f:f3:60:9c:74:6a:8b:fc:b7:f3: 43:59:75:c9:6f:3d:51:06:16:52:03:11:25:b4:71:61:7d:e3: f0:22:2a:3e:e1:65:34:03:80:f7:9e:e7:b9:3c:b4:b1:2a:23: 3d:ca:b1:ea:70:8e:3b:5a:73:95:9a:8c:fd:b1:80:aa:9b:2c: cc:3f:d1:4e:f0:99:97:99:4a:74:91:1d:97:da:23:5e:e9:d9: 70:84:bd:64:a4:83:20:8b:e7:fa:31:60:75:a1:26:1f:5a:e0: 91:dc:b7:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/GWxjtp9+6ez4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjkwMGQ3YTktYzBjYS00M2E5LTk2NTMtZTEwYmI4MTkyZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvTImgE84IMBveH8U3U9WBPA29JPB+rb/vFt QHTUhWTTxTVhDuSOODox6pvE1Gbauk1PNKJwe5g12uRnjE6j1QClyN2OzQdgINFL +rDoDL3nwYaQ1gwqGWbnpOR0zhOsdfVRlnqiKGazFXR/co7EugKPQRdTkMl9OINZ coraago9T0vPRZvPdWnJn9Lx00FqlQCFrNBhogFhNWdpr83c0cIl5SuMKcei8qCH w8F4bzRDmx0w7nELveFKP46zBQJzXceaj+KMsgZO57wIlgT6vHcM+NmJoDJdkZjU +Um2N+hPOfi3CWZp3eAA4BzOzaXYM9/b1mUF4HhS6+fVPYtWBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiviae9m0FEACRCL8evV1OdcVRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjgzZjNiOGMtNWIzZC0z MWFkLTk4YTAtNWEyMzY2YmE5Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyKexl5hJ5pDngd/yS0MwFxdPTR7qilK1KN/Av9lPKs10LrmQkJ H3REZEVdrarkyADh4/mlM/J8XRMjyfhKnoyomnIl3sPH868M08gVePcBZQk8nw/K Nxt8NMMas1otjpr92EONaZ6aYTN2zPveF5BSXZaliv3Z9ABg6rmHjZ/7rhup4Sy2 achiNzHY1lt/7dTLjxWs7DgPj/NgnHRqi/y380NZdclvPVEGFlIDESW0cWF94/Ai Kj7hZTQDgPee57k8tLEqIz3Ksepwjjtac5WajP2xgKqbLMw/0U7wmZeZSnSRHZfa I17p2XCEvWSkgyCL5/oxYHWhJh9a4JHct5o= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:24 2025 by rpki-client