$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa File: 09dda9a6-e41c-32e4-b194-7c3666a087a3.roa (raw, json) Hash identifier: iCVGbrGlFupIlJbAr/XIRokqsZ09UxvdXgPnvGAJ+R4= Subject key identifier: C6:63:C2:52:61:6F:9E:D9:2B:87:23:91:84:0E:2E:BB:1D:B4:57:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EB474D0DA085EF8BC1C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54118 IP address blocks: 2001:470:79::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:eb:47:4d:0d:a0:85:ef:8b:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=64e93199-3763-44f7-b96d-64f21811233f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:9b:4a:dc:7b:3a:7b:46:8f:95:86:94:07: 4e:07:89:3a:f4:dc:10:2c:cd:fa:38:3d:bb:b4:99: 51:2e:94:f9:e1:c8:31:89:c0:fe:02:b3:bf:b4:67: 99:bb:39:4d:87:65:01:95:db:66:00:09:04:14:c6: ee:df:ff:89:de:4d:0e:8d:15:6b:77:d5:d8:61:f6: 9e:cb:71:ab:ef:16:27:b8:c6:3d:16:fe:97:fa:1d: 57:7d:9a:f8:9b:f3:bb:4d:81:a8:f7:ea:70:54:9b: 20:3e:2f:a7:eb:e7:98:eb:b5:5a:83:20:a7:f3:76: 05:60:83:13:44:37:91:70:54:49:92:5b:35:b0:12: 94:66:e8:fd:75:eb:73:3f:be:2e:05:9b:5a:42:8a: de:f7:cf:01:cd:fe:77:91:0f:7a:4a:47:a9:56:a8: 1d:c6:ef:9e:98:97:98:80:f7:13:ce:d8:d2:9e:22: 1b:ef:01:90:a6:cf:37:28:25:97:d7:f0:d2:37:27: 1d:97:49:8c:81:9c:0d:bd:ab:43:e2:c4:9d:8c:b7: b1:c6:f4:4b:05:a1:ef:4e:b2:43:f9:c7:28:ef:58: c5:dd:8e:f2:69:0c:76:3b:fd:c1:df:76:87:8b:59: 8d:0a:f5:da:bb:a7:16:f7:a7:fc:66:98:6f:76:3c: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:C2:52:61:6F:9E:D9:2B:87:23:91:84:0E:2E:BB:1D:B4:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:79::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b3:17:0f:87:95:38:0f:ca:88:aa:74:ec:cc:8a:32:6c:3b: 34:19:ce:c3:a3:7b:9c:83:47:3c:fd:80:41:32:33:86:e5:fc: 32:9f:7b:10:8b:f4:54:0d:11:5a:40:4b:f4:1d:a4:19:c1:3f: 96:7d:71:91:d9:eb:a5:5d:04:d6:f2:98:ae:6a:93:8e:66:4b: f3:5a:59:8d:3b:2c:80:eb:37:bd:09:76:ad:e4:00:71:1a:8f: 25:90:06:06:99:7e:ec:dc:d7:98:92:bf:66:e3:fc:f0:b2:45: 78:ac:20:7c:7e:ad:07:f4:d5:fb:39:dd:e8:9f:01:b1:25:35: 70:43:61:9c:bc:03:50:1c:ab:1f:66:a7:62:77:27:03:8c:d0: 13:a3:12:42:46:65:46:54:e2:89:e3:14:54:b0:be:47:02:89: 54:51:2e:95:5d:1c:77:bc:15:94:2e:a8:49:2f:9f:4d:74:13: 0f:0e:2e:a5:9b:d5:fa:24:aa:e0:6a:73:b9:74:01:94:c2:d8: 49:44:a1:a7:e7:88:fa:29:17:ca:cc:dc:b8:2f:03:cb:b4:78: 24:9b:54:46:dc:d4:6f:cb:e0:35:a1:ae:79:19:09:8b:b7:0d: d2:b7:5e:26:7f:70:9b:09:0c:c7:66:55:32:50:ad:6e:96:ea: 42:2c:70:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+tHTQ2ghe+LwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjRlOTMxOTktMzc2My00NGY3LWI5NmQtNjRmMjE4MTEyMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWSbStx7OntGj5WGlAdOB4k69NwQLM36OD27 tJlRLpT54cgxicD+ArO/tGeZuzlNh2UBldtmAAkEFMbu3/+J3k0OjRVrd9XYYfae y3Gr7xYnuMY9Fv6X+h1XfZr4m/O7TYGo9+pwVJsgPi+n6+eY67VagyCn83YFYIMT RDeRcFRJkls1sBKUZuj9detzP74uBZtaQore988Bzf53kQ96SkepVqgdxu+emJeY gPcTztjSniIb7wGQps83KCWX1/DSNycdl0mMgZwNvatD4sSdjLexxvRLBaHvTrJD +cco71jF3Y7yaQx2O/3B33aHi1mNCvXau6cW96f8ZphvdjwOKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZjwlJhb57ZK4cjkYQOLrsdtFcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlkZGE5YTYtZTQxYy0z MmU0LWIxOTQtN2MzNjY2YTA4N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACSzFw+HlTgPyoiqdOzMijJsOzQZzsOje5yDRzz9gEEyM4bl/DKf exCL9FQNEVpAS/QdpBnBP5Z9cZHZ66VdBNbymK5qk45mS/NaWY07LIDrN70Jdq3k AHEajyWQBgaZfuzc15iSv2bj/PCyRXisIHx+rQf01fs53eifAbElNXBDYZy8A1Ac qx9mp2J3JwOM0BOjEkJGZUZU4onjFFSwvkcCiVRRLpVdHHe8FZQuqEkvn010Ew8O LqWb1fokquBqc7l0AZTC2ElEoafniPopF8rM3LgvA8u0eCSbVEbc1G/L4DWhrnkZ CYu3DdK3XiZ/cJsJDMdmVTJQrW6W6kIscP8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:37 2025 by rpki-client