$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b343656-81e2-399a-b67c-22ecbeb7f549.roa File: 1b343656-81e2-399a-b67c-22ecbeb7f549.roa (raw, json) Hash identifier: CAoDOB0sMT/LlinVNgFZjnaP5hSPPTSFm+W0bZc+1X0= Subject key identifier: 5D:F1:91:75:A8:7B:05:E0:D0:A4:D9:5D:DF:5B:C1:C3:C3:2F:83:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EFC032925F340FB9C300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b343656-81e2-399a-b67c-22ecbeb7f549.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 27299 IP address blocks: 2001:470:209::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ef:c0:32:92:5f:34:0f:b9:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=109ee624-902e-4109-aca2-4e1fb0918050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:1d:65:3e:87:30:fd:a9:d6:32:12:54:05: ce:91:29:63:4b:1f:f3:08:22:43:37:41:28:22:d9: 27:29:52:47:d3:a6:4d:81:c3:48:0d:54:75:3f:58: d2:ec:6d:9a:3b:dc:fd:53:47:7f:44:ca:6b:75:f3: 00:26:fc:f9:db:70:72:0f:e2:68:9e:5f:fb:ec:1b: 37:29:56:9f:b0:5c:65:1a:49:96:8c:dc:3d:d0:a3: 3a:36:8c:07:b2:d0:8a:51:1f:77:0d:0a:fd:48:e6: 57:55:e1:6e:70:fa:5a:80:2f:b3:2a:9b:35:0b:07: 96:0e:81:e0:5d:0b:d3:20:0c:d1:f4:91:de:43:fb: ab:41:51:11:56:fc:05:4d:78:8b:6c:82:f6:7e:34: 11:93:47:1e:04:44:81:cb:71:ee:d1:d6:69:0b:72: b8:78:bd:cb:50:fb:78:a5:1b:c8:5a:20:d6:2e:d0: 4f:c5:e3:27:fa:b5:04:f6:6c:56:89:ce:b8:ee:1b: ff:61:3b:09:98:cf:e6:9c:e3:66:f0:bc:2e:d5:88: 92:a9:ef:5c:52:47:87:ba:12:3a:b4:52:d8:51:58: 12:6a:6f:ec:41:0f:09:ac:af:75:5c:f0:0e:03:a1: 92:5a:c4:90:19:6f:b6:55:0d:ab:85:3a:11:97:dd: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:91:75:A8:7B:05:E0:D0:A4:D9:5D:DF:5B:C1:C3:C3:2F:83:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b343656-81e2-399a-b67c-22ecbeb7f549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:209::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6b:73:54:0e:95:f8:db:5f:50:37:ee:dc:6d:bf:6e:5f:d4: 93:08:e2:b7:dd:94:b2:ba:3b:61:ab:06:90:05:d4:d3:49:8f: bc:53:5b:d0:98:b7:fa:32:16:96:99:98:76:b0:0d:8d:01:4c: f2:0a:37:12:00:cc:ac:6b:7b:fa:e5:c2:2a:eb:1a:eb:db:f5: 4d:94:02:57:5f:24:c8:f8:b8:76:0b:1a:e5:26:29:25:6d:24: cb:40:9a:12:e6:b8:0d:44:78:59:36:5c:73:e4:be:4f:83:7e: ab:d0:eb:ca:ac:4c:04:ab:66:21:c8:8a:da:c5:22:84:47:85: aa:3d:d1:45:31:2f:0d:f4:ad:3a:19:6a:89:8b:99:0a:1d:98: 14:7a:59:35:03:46:18:a5:71:b6:db:ec:3e:92:02:62:41:50: 03:09:c3:06:61:b6:d2:5c:7c:94:6f:e7:c5:c9:e2:23:47:f5: df:a0:35:67:9f:c8:66:ca:8c:02:b5:a2:4c:be:df:b4:46:8a: aa:6e:1a:36:74:e3:31:22:fd:35:45:99:9b:97:af:a8:ee:5d: 19:ab:df:e6:a8:37:d0:81:39:35:8d:b1:bb:7d:00:98:e9:c4: e8:dd:b1:1f:b3:42:03:6a:52:fe:02:63:0e:92:5d:72:9c:e7: 7b:e1:67:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+/AMpJfNA+5wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTA5ZWU2MjQtOTAyZS00MTA5LWFjYTItNGUxZmIwOTE4MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3QdZT6HMP2p1jISVAXOkSljSx/zCCJDN0Eo ItknKVJH06ZNgcNIDVR1P1jS7G2aO9z9U0d/RMprdfMAJvz523ByD+Jonl/77Bs3 KVafsFxlGkmWjNw90KM6NowHstCKUR93DQr9SOZXVeFucPpagC+zKps1CweWDoHg XQvTIAzR9JHeQ/urQVERVvwFTXiLbIL2fjQRk0ceBESBy3Hu0dZpC3K4eL3LUPt4 pRvIWiDWLtBPxeMn+rUE9mxWic647hv/YTsJmM/mnONm8Lwu1YiSqe9cUkeHuhI6 tFLYUVgSam/sQQ8JrK91XPAOA6GSWsSQGW+2VQ2rhToRl90SjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF3xkXWoewXg0KTZXd9bwcPDL4OpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWIzNDM2NTYtODFlMi0z OTlhLWI2N2MtMjJlY2JlYjdmNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERrc1QOlfjbX1A37txtv25f1JMI4rfdlLK6O2GrBpAF1NNJj7xT W9CYt/oyFpaZmHawDY0BTPIKNxIAzKxre/rlwirrGuvb9U2UAldfJMj4uHYLGuUm KSVtJMtAmhLmuA1EeFk2XHPkvk+DfqvQ68qsTASrZiHIitrFIoRHhao90UUxLw30 rToZaomLmQodmBR6WTUDRhilcbbb7D6SAmJBUAMJwwZhttJcfJRv58XJ4iNH9d+g NWefyGbKjAK1oky+37RGiqpuGjZ04zEi/TVFmZuXr6juXRmr3+aoN9CBOTWNsbt9 AJjpxOjdsR+zQgNqUv4CYw6SXXKc53vhZ80= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:01 2025 by rpki-client