$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d4ff41b-5a60-3aa9-b58d-1efe5d168112.roa File: 1d4ff41b-5a60-3aa9-b58d-1efe5d168112.roa (raw, json) Hash identifier: RY5tk+HqVAFcCBTJOy0jpn5+wjHf8mNOvL5yjvms4aE= Subject key identifier: 11:57:07:D8:0C:8C:0E:B4:15:38:20:82:75:87:D1:51:CC:39:8B:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B9CB0E3530A3FEF7B9B175F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d4ff41b-5a60-3aa9-b58d-1efe5d168112.roa Signing time: Thu 23 Oct 2025 01:30:13 +0000 ROA not before: Thu 23 Oct 2025 01:30:13 +0000 ROA not after: Wed 21 Jan 2026 02:30:13 +0000 asID: 45557 IP address blocks: 2001:470:4fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:b0:e3:53:0a:3f:ef:7b:9b:17:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 23 01:30:13 2025 GMT Not After : Jan 21 02:30:13 2026 GMT Subject: CN=8282d553-73af-4907-9804-2753acd311e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:8f:e5:f6:c3:ad:ad:05:09:00:0f:e1:c9: 18:91:1a:8f:c1:80:5f:f6:fe:ce:73:2f:3f:27:74: 14:b1:f4:e1:1e:16:40:f0:d6:90:72:62:e1:88:84: 62:ce:bb:a2:f4:ce:b8:20:d7:bd:22:64:67:ae:e4: 23:14:2e:13:7d:6b:38:13:b9:55:b8:85:51:39:3c: 8e:f2:e2:e1:ac:16:d7:a0:e3:27:4a:f3:2c:a6:5e: e2:a0:cf:8a:41:27:de:bb:9b:e4:a8:f1:61:a9:5a: 6b:a2:d1:9d:59:d4:7b:6d:ae:13:5c:8f:08:48:fb: ac:a4:62:60:e6:2c:77:4c:b4:95:89:a8:cd:a9:15: 47:b3:a9:50:95:48:b5:25:02:2f:a9:6d:17:03:a5: e2:04:7c:66:28:c5:f1:2b:da:0c:3a:33:6b:84:95: 60:5e:70:66:97:bf:94:83:63:04:35:e8:08:e9:81: 0b:c8:43:17:65:3b:1a:d8:6e:e2:f9:0e:38:61:a8: 61:d5:ab:5d:e7:43:da:9a:95:a0:ce:b5:17:3f:3d: ba:af:be:11:04:ff:91:8f:2b:91:34:d7:ef:d5:4b: 35:18:c0:28:ca:55:2e:b9:27:4b:64:b6:c7:29:81: 73:b4:9c:f5:44:0f:d6:36:bf:2b:55:0a:3e:67:b5: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:57:07:D8:0C:8C:0E:B4:15:38:20:82:75:87:D1:51:CC:39:8B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d4ff41b-5a60-3aa9-b58d-1efe5d168112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4fa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:25:28:83:8c:11:27:86:ab:c3:f0:63:63:c6:97:f3:e5:86: dc:e9:41:76:d4:af:fd:e6:f7:71:35:87:7b:fe:44:1f:83:d9: cf:e5:18:bf:ab:3e:35:d2:a3:27:ce:a3:6e:e3:cb:08:5f:ea: 37:93:26:4d:72:80:3e:9b:62:8c:32:c1:84:b2:8a:bd:af:c5: 1a:7e:cf:e7:a7:99:38:10:3b:08:65:01:cb:10:73:92:20:81: af:4c:b1:c5:46:65:6f:98:61:d6:78:c2:ac:e6:86:9c:6d:9c: 56:bc:cd:b6:fe:7e:48:80:34:fa:89:4e:0b:fa:ac:bd:a2:bf: 6a:d6:c3:c0:73:ed:e1:cd:e6:4e:99:28:7b:8a:67:a3:0e:01: 07:51:09:f5:8e:d2:e0:e1:49:11:20:3c:0a:2d:de:63:81:af: 2a:47:99:82:bf:60:32:20:93:2c:a1:7b:ea:00:27:82:8f:7c: 3d:96:97:0b:9c:82:34:96:a4:51:4f:ec:19:fa:ea:8e:31:9c: 8f:96:36:bb:e8:d3:51:60:6c:a1:97:c6:52:a7:85:0f:d3:c1: b5:93:4c:00:5b:9d:58:55:36:1a:e5:17:4a:32:53:77:03:86: 48:c1:7e:d2:97:e5:8f:ec:5b:95:25:89:32:45:8c:6e:26:30: 2e:28:cf:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucsONTCj/ve5sXXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMzAxMzAxM1oXDTI2MDEyMTAyMzAxM1owLzEtMCsGA1UEAxMk ODI4MmQ1NTMtNzNhZi00OTA3LTk4MDQtMjc1M2FjZDMxMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspyP5fbDra0FCQAP4ckYkRqPwYBf9v7Ocy8/ J3QUsfThHhZA8NaQcmLhiIRizrui9M64INe9ImRnruQjFC4TfWs4E7lVuIVROTyO 8uLhrBbXoOMnSvMspl7ioM+KQSfeu5vkqPFhqVprotGdWdR7ba4TXI8ISPuspGJg 5ix3TLSViajNqRVHs6lQlUi1JQIvqW0XA6XiBHxmKMXxK9oMOjNrhJVgXnBml7+U g2MENegI6YELyEMXZTsa2G7i+Q44Yahh1atd50PampWgzrUXPz26r74RBP+RjyuR NNfv1Us1GMAoylUuuSdLZLbHKYFztJz1RA/WNr8rVQo+Z7WxuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFXB9gMjA60FTgggnWH0VHMOYuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQ0ZmY0MWItNWE2MC0z YWE5LWI1OGQtMWVmZTVkMTY4MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAlKIOMESeGq8PwY2PGl/PlhtzpQXbUr/3m93E1h3v+RB+D2c/l GL+rPjXSoyfOo27jywhf6jeTJk1ygD6bYowywYSyir2vxRp+z+enmTgQOwhlAcsQ c5Igga9MscVGZW+YYdZ4wqzmhpxtnFa8zbb+fkiANPqJTgv6rL2iv2rWw8Bz7eHN 5k6ZKHuKZ6MOAQdRCfWO0uDhSREgPAot3mOBrypHmYK/YDIgkyyhe+oAJ4KPfD2W lwucgjSWpFFP7Bn66o4xnI+WNrvo01FgbKGXxlKnhQ/TwbWTTABbnVhVNhrlF0oy U3cDhkjBftKX5Y/sW5UliTJFjG4mMC4oz+c= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:07 2025 by rpki-client