$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa File: 3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa (raw, json) Hash identifier: CObmNEsjnqCS4CQMf9UUtaBjPyWUsfLt+PuctO0SktQ= Subject key identifier: 06:91:11:32:98:5C:EC:5E:D9:22:F0:31:AF:6A:D3:32:70:9F:45:60 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D3C0933BF29CB1BF7780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 21854 IP address blocks: 2001:470:24c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d3:c0:93:3b:f2:9c:b1:bf:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8517872f-d82b-4727-b051-446480a64af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:5a:22:d5:c9:0b:19:6e:c2:2f:24:eb:66: 9e:a2:ed:de:a3:81:da:1d:ee:4b:0d:d3:e5:c9:80: 38:e0:d2:63:7a:e9:b0:9e:77:d0:41:09:71:ac:48: f2:26:61:b2:40:7e:4d:fb:c1:d6:e9:87:4c:c7:21: c7:45:1e:ce:ac:f3:f9:00:d8:8e:b7:4b:d2:47:04: 3b:2a:6e:2b:b2:9c:b6:9e:99:d6:2b:f5:3f:fc:8b: a8:b9:ad:d7:94:a0:0c:ed:da:a8:3e:68:7d:08:e5: 9d:4c:54:61:07:3b:35:5a:2e:91:a0:28:36:4e:d6: e8:4a:bd:1d:84:65:7f:77:45:ea:db:c3:83:b6:c2: 55:85:68:a7:66:a1:d9:8b:e7:8a:63:2d:54:f3:80: e2:37:95:b6:23:3d:6f:2c:f4:d7:0f:e0:6b:70:67: ac:8e:e2:bf:15:ac:9e:21:63:6d:15:84:57:9f:a5: 85:7e:26:f9:9a:d8:2a:69:65:7c:4a:74:9c:0f:fb: 95:ca:30:83:fd:61:77:e1:ef:3a:62:e4:63:a2:30: 74:ba:98:9d:bd:8e:89:3e:d3:f5:e1:d1:2b:43:a4: 4e:b2:3a:ff:70:33:5e:af:09:88:ad:4c:60:65:4a: 5e:5f:9c:7f:38:40:d2:fd:1c:1b:a0:83:d2:a5:f8: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:11:32:98:5C:EC:5E:D9:22:F0:31:AF:6A:D3:32:70:9F:45:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:24c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:12:ab:29:93:46:b7:26:e3:ae:a5:3f:88:81:19:7d:dd:a4: 34:5c:51:12:19:ea:7e:de:0e:0a:21:77:5d:ec:68:34:25:e3: bf:3e:7b:0d:a3:66:16:04:a0:ea:db:7b:d9:fa:3f:67:8d:17: 43:ea:7d:3f:88:14:b0:e1:4d:33:dd:11:f9:b4:f1:5f:2f:37: da:bb:44:e1:1b:66:cb:ea:af:d4:b4:30:59:f2:cd:80:b9:ab: 66:39:00:bb:b7:f2:d9:ed:47:e7:63:9d:cc:75:47:bb:d9:15: 11:ec:1a:ba:87:c9:18:73:c9:e2:3a:2c:8a:cd:64:fc:1e:ae: 6f:da:42:25:08:86:e1:e1:b6:1c:79:fa:75:bd:32:54:37:98: 9e:bd:88:7c:2d:df:1c:2c:05:70:91:67:68:d4:02:fa:42:7c: 18:1d:4e:6b:c7:73:99:8d:df:be:e7:7e:b1:8f:36:2e:9e:c1: df:d4:f5:ca:fc:dc:a2:69:83:59:92:03:80:26:b3:fd:57:39: e8:d8:6e:0d:08:1b:70:71:43:a6:d4:a7:f6:63:64:88:a9:bd: 9f:23:58:5b:74:e1:1e:c5:16:89:c4:67:ac:c7:78:1d:e5:3e: 9d:30:a1:00:5d:4a:80:aa:7a:56:92:bb:e5:49:45:27:f0:bc: f9:04:5c:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19PAkzvynLG/d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODUxNzg3MmYtZDgyYi00NzI3LWIwNTEtNDQ2NDgwYTY0YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw9aItXJCxluwi8k62aeou3eo4HaHe5LDdPl yYA44NJjeumwnnfQQQlxrEjyJmGyQH5N+8HW6YdMxyHHRR7OrPP5ANiOt0vSRwQ7 Km4rspy2npnWK/U//Iuoua3XlKAM7dqoPmh9COWdTFRhBzs1Wi6RoCg2TtboSr0d hGV/d0Xq28ODtsJVhWinZqHZi+eKYy1U84DiN5W2Iz1vLPTXD+BrcGesjuK/Faye IWNtFYRXn6WFfib5mtgqaWV8SnScD/uVyjCD/WF34e86YuRjojB0upidvY6JPtP1 4dErQ6ROsjr/cDNerwmIrUxgZUpeX5x/OEDS/RwboIPSpfhqgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAaRETKYXOxe2SLwMa9q0zJwn0VgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FmODY5NjItMGJmNC0z MjdiLThjZWQtNWIwYjk5ZWJkNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUSqymTRrcm466lP4iBGX3dpDRcURIZ6n7eDgohd13saDQl478+ ew2jZhYEoOrbe9n6P2eNF0PqfT+IFLDhTTPdEfm08V8vN9q7ROEbZsvqr9S0MFny zYC5q2Y5ALu38tntR+djncx1R7vZFRHsGrqHyRhzyeI6LIrNZPwerm/aQiUIhuHh thx5+nW9MlQ3mJ69iHwt3xwsBXCRZ2jUAvpCfBgdTmvHc5mN377nfrGPNi6ewd/U 9cr83KJpg1mSA4Ams/1XOejYbg0IG3BxQ6bUp/ZjZIipvZ8jWFt04R7FFonEZ6zH eB3lPp0woQBdSoCqelaSu+VJRSfwvPkEXO8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:57 2025 by rpki-client