$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25caf34d-57dd-3cf5-9f88-5253c8ddf588.roa File: 25caf34d-57dd-3cf5-9f88-5253c8ddf588.roa (raw, json) Hash identifier: dq8T33wi9m0RVomE7C/OqvTeg06/X01w9+Gozwiv90g= Subject key identifier: 31:49:86:E5:2C:30:1A:7F:12:53:DB:CF:0A:BB:97:E6:B4:B2:7F:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C656561CE63940660D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25caf34d-57dd-3cf5-9f88-5253c8ddf588.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400006 IP address blocks: 2001:470:18e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c6:56:56:1c:e6:39:40:66:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=251bbad6-8e29-42fe-98e0-0a806ea9fd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:10:20:a4:19:bf:fe:57:94:ae:44:f7:b7: c3:b7:7c:29:12:31:d0:0e:d6:af:f3:a4:cd:a4:0d: 92:8d:76:e5:ba:b7:6a:c1:52:12:06:10:d2:99:dc: df:49:2b:ab:96:17:76:4c:ab:ec:77:43:b6:28:fd: 45:5b:d2:5e:91:ae:af:0d:75:94:b3:ed:93:19:68: c8:20:02:c6:99:56:b0:01:98:95:38:1b:0b:6a:ac: 62:e4:9f:f7:75:6e:3f:30:fd:c6:0c:85:a0:b4:69: 51:38:dd:31:ac:f7:be:66:eb:3b:b3:ca:94:c0:9d: 25:b4:a8:bd:58:8f:16:89:0f:67:7c:03:dd:6d:ca: 73:f0:45:1a:be:1d:62:61:f3:d2:ca:7c:73:7f:60: 73:45:c7:63:f7:1e:68:23:84:93:f3:95:56:e4:a1: 49:df:b4:50:fa:01:8e:a9:26:93:65:56:f3:3a:5e: af:af:d2:bc:3a:23:42:d1:b8:51:66:8a:a3:57:a3: f3:65:f4:71:36:1b:39:e6:50:d5:2f:c6:c8:24:3b: 02:b1:00:0d:36:3c:55:14:9f:b1:71:cd:d7:38:16: 4f:52:8f:c9:69:98:c4:90:db:72:7a:b0:d7:a9:37: 57:2c:9d:17:bc:37:20:58:a3:4a:e6:ca:c1:9c:33: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:49:86:E5:2C:30:1A:7F:12:53:DB:CF:0A:BB:97:E6:B4:B2:7F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25caf34d-57dd-3cf5-9f88-5253c8ddf588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:18e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b9:8c:14:8e:34:bd:56:79:23:8d:48:d4:71:85:3b:5f:a0: 63:51:6d:cb:bf:f8:82:d9:20:1f:8a:d7:d9:30:bc:ab:85:9a: 05:eb:1d:f2:cc:db:f3:f2:7b:83:6e:c5:f6:2e:cb:79:1a:63: e8:c3:75:76:f5:be:93:78:a8:bb:97:75:15:0f:fb:7d:1a:c0: 65:cf:90:0d:03:1e:3c:10:28:b3:6b:62:fd:2e:df:e8:55:6a: 9c:cd:5d:64:51:55:2d:9e:bb:c2:89:bc:b7:07:6f:dc:f7:ca: 1e:79:57:3b:f4:4f:75:79:c5:3b:40:29:fd:49:56:57:96:d8: a4:89:76:44:b0:b6:98:96:c6:91:a7:2b:7f:37:87:8d:10:8d: 75:41:ae:5e:19:53:c0:90:6c:19:4e:28:ec:50:3f:0b:9c:e2: 6b:cd:29:0d:f9:f7:70:71:9e:18:12:00:81:dc:d5:d9:03:0e: 74:a1:bb:72:63:89:47:c4:68:65:56:d1:77:c2:10:a0:5e:81: 49:26:d6:96:88:ca:45:71:3d:2d:09:90:52:fa:3e:f3:f3:54: d1:c2:68:9c:4f:cd:f0:c4:ab:49:5d:60:b9:dc:4b:97:79:d5: ed:48:ed:b7:2e:f6:ff:e1:79:11:fd:41:0e:a3:28:a2:f6:fd: e6:f7:02:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18ZWVhzmOUBmDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjUxYmJhZDYtOGUyOS00MmZlLTk4ZTAtMGE4MDZlYTlmZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYoQIKQZv/5XlK5E97fDt3wpEjHQDtav86TN pA2SjXblurdqwVISBhDSmdzfSSurlhd2TKvsd0O2KP1FW9Jeka6vDXWUs+2TGWjI IALGmVawAZiVOBsLaqxi5J/3dW4/MP3GDIWgtGlRON0xrPe+Zus7s8qUwJ0ltKi9 WI8WiQ9nfAPdbcpz8EUavh1iYfPSynxzf2BzRcdj9x5oI4ST85VW5KFJ37RQ+gGO qSaTZVbzOl6vr9K8OiNC0bhRZoqjV6PzZfRxNhs55lDVL8bIJDsCsQANNjxVFJ+x cc3XOBZPUo/JaZjEkNtyerDXqTdXLJ0XvDcgWKNK5srBnDPwFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFJhuUsMBp/ElPbzwq7l+a0sn+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjVjYWYzNGQtNTdkZC0z Y2Y1LTlmODgtNTI1M2M4ZGRmNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACC5jBSONL1WeSONSNRxhTtfoGNRbcu/+ILZIB+K19kwvKuFmgXr HfLM2/Pye4NuxfYuy3kaY+jDdXb1vpN4qLuXdRUP+30awGXPkA0DHjwQKLNrYv0u 3+hVapzNXWRRVS2eu8KJvLcHb9z3yh55Vzv0T3V5xTtAKf1JVleW2KSJdkSwtpiW xpGnK383h40QjXVBrl4ZU8CQbBlOKOxQPwuc4mvNKQ3593BxnhgSAIHc1dkDDnSh u3JjiUfEaGVW0XfCEKBegUkm1paIykVxPS0JkFL6PvPzVNHCaJxPzfDEq0ldYLnc S5d51e1I7bcu9v/heRH9QQ6jKKL2/eb3Aoo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:56 2025 by rpki-client