$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa File: 33b725f1-5fb3-308f-8792-e7c898b5e67a.roa (raw, json) Hash identifier: 838QotcmyqhhFhKVz5qRbDfpveO429Z6lhUK1ITmfNE= Subject key identifier: BB:F3:F9:0F:79:F2:9F:0F:F9:6B:51:6B:A2:61:C9:F2:5A:39:24:51 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB45D405930531D196250A380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 22709 IP address blocks: 2001:470:394::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:40:59:30:53:1d:19:62:50:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=845facd7-c6cd-4faa-99fb-3c8119d71279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:99:8e:a6:b8:58:55:82:17:eb:ba:9a:60: 61:be:64:6c:81:6f:1f:ac:28:e9:39:04:a7:b2:48: 3c:34:a3:7b:d8:79:d5:18:26:05:a9:4b:05:65:6a: a6:be:b4:70:7a:63:41:39:02:e1:88:d6:c0:42:30: e9:20:c9:4e:7f:e5:6f:e4:6e:ec:0d:52:bb:30:4d: 0d:3f:c6:c4:ac:82:91:68:10:99:12:bb:d3:d8:dd: 37:66:b6:74:aa:f8:6e:4c:ce:bf:56:c2:59:84:00: 19:f1:c9:11:f9:6b:b3:b5:2d:4d:0a:5e:95:68:f3: 70:2b:a3:c3:55:d5:87:56:b2:5c:d2:8e:a4:87:aa: 33:66:1f:ad:fc:b7:4b:70:d3:9b:89:28:da:f5:e9: 92:65:ae:5c:fd:39:a9:0e:98:9b:7c:43:82:54:6f: 5a:a8:dc:5c:f8:22:d2:d1:ab:15:ec:c5:db:d8:d0: a8:81:a6:ef:64:9d:e3:34:a1:73:1b:cf:4b:08:d2: fd:7f:67:fb:b8:5a:70:16:c8:8b:a3:dd:3d:7f:b2: 9f:4d:51:1a:9b:be:85:ac:fe:c1:cc:20:7e:3b:1b: 99:32:f8:65:5b:2c:42:b7:33:d1:b9:d0:ef:03:91: 84:f6:2b:3c:48:e3:8f:37:4d:24:99:8e:f0:a1:a4: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F3:F9:0F:79:F2:9F:0F:F9:6B:51:6B:A2:61:C9:F2:5A:39:24:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33b725f1-5fb3-308f-8792-e7c898b5e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:394::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c1:1e:cc:18:e2:09:d5:6c:6b:45:75:d9:11:c2:c3:01:cd: 73:4c:da:e1:47:1a:c1:50:07:34:90:27:13:ed:11:c5:4d:b7: 94:0a:f5:70:15:69:d6:f5:2c:80:31:88:a0:13:79:8b:6a:ee: 4f:7f:01:02:e4:36:4f:b6:7b:6d:ae:7a:fd:54:31:92:31:51: bb:ca:ea:fe:6c:53:57:91:ac:77:a5:e0:30:78:c9:46:f0:d8: ff:a0:e4:1e:d5:09:bf:94:e0:a1:89:51:e9:75:a1:c8:44:6d: 15:ad:98:38:26:87:d3:f1:e8:84:a8:88:07:93:2b:de:69:11: 7a:7e:fb:40:c7:21:16:be:bf:80:94:33:46:54:fe:c9:4f:60: c8:58:b4:aa:93:f1:b2:3a:3c:54:99:ff:82:c2:01:ac:fb:f6: 54:01:c6:35:ba:0e:5e:da:22:0f:82:2a:d3:48:e2:0b:75:1d: 1d:b5:30:7b:74:5f:3b:f1:67:a7:e8:d0:d1:d7:75:e1:73:3f: 87:9e:31:ad:7e:80:62:4c:f0:ef:97:6f:9d:5b:9e:71:1b:83: 14:5c:82:c2:e8:10:77:ef:30:e3:fd:f6:84:7e:ac:a5:39:42: 70:08:ba:3c:a0:2e:b2:c2:b2:23:1e:b4:00:a2:88:08:2c:ec: e5:51:a0:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XUBZMFMdGWJQo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ODQ1ZmFjZDctYzZjZC00ZmFhLTk5ZmItM2M4MTE5ZDcxMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt+Zjqa4WFWCF+u6mmBhvmRsgW8frCjpOQSn skg8NKN72HnVGCYFqUsFZWqmvrRwemNBOQLhiNbAQjDpIMlOf+Vv5G7sDVK7ME0N P8bErIKRaBCZErvT2N03ZrZ0qvhuTM6/VsJZhAAZ8ckR+WuztS1NCl6VaPNwK6PD VdWHVrJc0o6kh6ozZh+t/LdLcNObiSja9emSZa5c/TmpDpibfEOCVG9aqNxc+CLS 0asV7MXb2NCogabvZJ3jNKFzG89LCNL9f2f7uFpwFsiLo909f7KfTVEam76FrP7B zCB+OxuZMvhlWyxCtzPRudDvA5GE9is8SOOPN00kmY7woaTOwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvz+Q958p8P+WtRa6JhyfJaOSRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNiNzI1ZjEtNWZiMy0z MDhmLTg3OTItZTdjODk4YjVlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJbBHswY4gnVbGtFddkRwsMBzXNM2uFHGsFQBzSQJxPtEcVNt5QK 9XAVadb1LIAxiKATeYtq7k9/AQLkNk+2e22uev1UMZIxUbvK6v5sU1eRrHel4DB4 yUbw2P+g5B7VCb+U4KGJUel1ochEbRWtmDgmh9Px6ISoiAeTK95pEXp++0DHIRa+ v4CUM0ZU/slPYMhYtKqT8bI6PFSZ/4LCAaz79lQBxjW6Dl7aIg+CKtNI4gt1HR21 MHt0XzvxZ6fo0NHXdeFzP4eeMa1+gGJM8O+Xb51bnnEbgxRcgsLoEHfvMOP99oR+ rKU5QnAIujygLrLCsiMetACiiAgs7OVRoH8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:24 2025 by rpki-client