$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa File: 023eb0c5-6621-36f4-b644-b1d687cab0f3.roa (raw, json) Hash identifier: mxy/s/Q9Lo8ZEbF+vXpqhaaPyIahkkvO+1dcY03zUWc= Subject key identifier: 0F:5D:D4:14:0B:28:FA:5E:93:A1:57:50:F5:52:1C:D2:F7:79:69:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BAA44D042C58C49980B0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 393238 IP address blocks: 2001:470:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ba:a4:4d:04:2c:58:c4:99:80:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f9fcd52b-2ed4-4869-abd0-047a997fbeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:3d:4e:8f:fc:68:f4:23:35:04:f3:e6:6b: ae:af:7f:36:82:f9:1f:1f:95:25:45:57:f7:a6:34: 06:9e:c4:9b:25:8c:87:49:2f:11:b2:c5:13:26:c1: ea:4f:5b:79:7f:dc:3b:6e:5b:4f:ae:46:08:ac:ba: 72:4c:f9:b5:89:1a:b6:50:90:74:10:81:b1:7f:e2: fe:fb:a5:2f:bd:53:34:2f:09:9e:70:7b:59:fe:a7: 90:6b:07:4e:e5:85:ee:ef:73:ca:10:77:82:5c:f4: 2c:d1:43:20:dc:87:be:ac:c8:86:9c:40:30:12:29: c6:cd:9e:31:81:2f:46:fa:ba:c0:6a:4c:ed:1a:93: e5:f5:50:09:8e:5a:48:a6:39:4a:c6:31:54:5f:b7: 80:35:e2:a3:bd:ee:03:20:23:91:72:d1:07:c2:9d: b7:2c:0b:fe:c1:e6:30:34:e1:b2:98:8a:c1:43:13: 49:24:77:82:9b:68:79:03:a7:a5:13:3a:28:bb:20: be:30:89:ab:32:e0:0e:e8:b2:f1:ba:47:aa:f0:96: ef:4f:30:7c:09:b3:c7:95:b8:e5:32:c7:41:2e:63: 7f:dc:62:c9:8a:b8:2f:99:dc:f5:54:d8:e0:df:6b: 74:bc:ba:08:ed:91:0d:63:e3:ce:00:1d:50:83:19: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:D4:14:0B:28:FA:5E:93:A1:57:50:F5:52:1C:D2:F7:79:69:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/023eb0c5-6621-36f4-b644-b1d687cab0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:55::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:91:4a:63:26:12:36:6e:9f:6e:26:9e:97:13:91:03:7c:6a: bf:b6:97:47:c5:5b:1c:94:8c:28:73:70:5c:8a:d1:a8:02:12: 6f:0d:3d:1e:75:34:dd:90:21:1c:84:94:b1:6d:77:e9:69:f6: f2:8e:a7:57:ff:a8:98:9e:74:96:44:67:a1:8b:4f:d6:26:67: d4:61:37:c0:21:59:75:f5:5a:88:6d:00:b9:be:32:13:d1:31: 60:b8:2f:2e:cb:b3:07:70:c6:65:eb:ea:ba:84:82:8b:eb:15: 2a:84:b9:b1:0b:54:c4:fe:6b:95:ad:85:a5:27:4c:f4:d6:9b: 13:a5:3e:43:ae:61:67:06:4b:c7:82:2c:13:7e:8b:18:c8:ce: 8e:a9:5b:d4:a1:1e:ef:a0:05:57:37:64:d5:33:e6:e7:db:20: ef:59:0b:cc:4a:03:a3:14:90:86:b2:6d:d9:6b:22:c8:62:93: 25:03:90:f8:b5:0a:94:1c:6c:50:0e:43:a2:09:4e:36:88:42: e6:07:90:20:f1:99:cb:8f:12:87:55:e2:57:8a:bd:88:43:9b: a8:29:96:58:c9:22:7d:96:a4:fc:88:71:d4:bc:f8:ca:73:14: a5:0a:89:90:aa:64:0c:67:b2:b7:2f:6c:86:bc:a6:ab:1c:13: 71:20:5b:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17qkTQQsWMSZgLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjlmY2Q1MmItMmVkNC00ODY5LWFiZDAtMDQ3YTk5N2ZiZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfU9To/8aPQjNQTz5muur382gvkfH5UlRVf3 pjQGnsSbJYyHSS8RssUTJsHqT1t5f9w7bltPrkYIrLpyTPm1iRq2UJB0EIGxf+L+ +6UvvVM0LwmecHtZ/qeQawdO5YXu73PKEHeCXPQs0UMg3Ie+rMiGnEAwEinGzZ4x gS9G+rrAakztGpPl9VAJjlpIpjlKxjFUX7eANeKjve4DICORctEHwp23LAv+weYw NOGymIrBQxNJJHeCm2h5A6elEzoouyC+MImrMuAO6LLxukeq8JbvTzB8CbPHlbjl MsdBLmN/3GLJirgvmdz1VNjg32t0vLoI7ZENY+POAB1QgxmjYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9d1BQLKPpek6FXUPVSHNL3eWlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDIzZWIwYzUtNjYyMS0z NmY0LWI2NDQtYjFkNjg3Y2FiMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACaRSmMmEjZun24mnpcTkQN8ar+2l0fFWxyUjChzcFyK0agCEm8N PR51NN2QIRyElLFtd+lp9vKOp1f/qJiedJZEZ6GLT9YmZ9RhN8AhWXX1WohtALm+ MhPRMWC4Ly7LswdwxmXr6rqEgovrFSqEubELVMT+a5WthaUnTPTWmxOlPkOuYWcG S8eCLBN+ixjIzo6pW9ShHu+gBVc3ZNUz5ufbIO9ZC8xKA6MUkIaybdlrIshikyUD kPi1CpQcbFAOQ6IJTjaIQuYHkCDxmcuPEodV4leKvYhDm6gplljJIn2WpPyIcdS8 +MpzFKUKiZCqZAxnsrcvbIa8pqscE3EgW98= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:45 2025 by rpki-client