$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa File: 3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa (raw, json) Hash identifier: Q5a32ZHlWqvmOhpuzTcmzPO1u80kn1CbasWpKwXVbIQ= Subject key identifier: 53:19:81:63:38:56:0A:FE:18:BB:55:0F:93:5F:41:9D:6C:78:97:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7B5EEB55DD07765B88380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22989 IP address blocks: 2001:470:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b5:ee:b5:5d:d0:77:65:b8:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=89819911-0877-4b53-9b1a-489227c3e80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:a2:3b:29:a2:e5:3b:88:42:4a:88:81:fb: 17:a5:b4:7b:52:4f:87:2f:8f:e0:d9:24:b1:81:34: 45:02:22:58:c0:d0:e2:56:30:0d:1f:d7:fc:4e:6b: 67:a8:99:6c:83:d6:24:e5:14:a7:8e:aa:2d:f1:ae: b3:e3:90:db:cc:20:55:b5:ea:7b:fd:af:94:85:94: 52:df:e6:43:44:8b:a0:16:b0:83:b9:f7:b9:ab:27: f3:83:fd:96:57:f1:f7:83:5b:b5:a7:f2:87:a1:89: 17:e4:c1:f7:20:d4:ea:c7:1b:df:37:18:3c:34:c3: 2c:2b:84:19:c3:62:47:c0:ca:1a:42:13:42:4d:07: 81:d1:98:a4:0a:71:d7:b5:31:a7:10:59:07:4f:d1: 75:51:68:43:17:07:88:88:bb:51:7a:7e:e2:c9:11: 05:eb:f7:2a:3e:ae:71:58:9f:d7:e8:65:8e:4b:9c: 3f:c3:7b:3b:4d:5a:2c:82:db:73:ea:75:45:e4:eb: 5e:99:fb:23:81:11:88:10:ec:4c:92:74:68:5f:ba: 52:2e:ae:2c:28:60:0d:d0:1d:97:1e:c0:56:f0:bc: 87:c0:5a:ef:79:6c:09:a3:5f:06:14:c4:b8:7f:5c: c0:9f:19:eb:9b:7e:d5:b3:b2:92:88:4f:de:f4:0e: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:19:81:63:38:56:0A:FE:18:BB:55:0F:93:5F:41:9D:6C:78:97:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:142::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e4:a6:b8:8c:0b:26:0a:14:2c:b5:20:77:be:63:04:80:26: 6b:b1:82:07:48:b2:50:06:7f:15:47:0c:91:ad:01:18:57:37: cb:fb:22:c1:b2:ec:16:2e:23:65:a7:13:7d:69:3a:94:fb:f2: d6:da:e4:b9:c1:f2:bd:7e:5e:86:aa:3d:b2:fc:66:6c:ea:bc: a5:0d:fe:fc:a7:b3:f6:50:34:fa:3f:d2:53:b3:af:76:84:3a: 04:53:ea:61:eb:82:df:1b:13:27:fe:3e:e6:b3:11:0a:3e:9c: e9:79:b5:49:88:d0:91:22:75:15:ca:0e:c3:b0:7e:39:d9:df: 59:9a:ab:b0:8b:67:45:6e:84:ae:1c:ee:a6:6c:6b:52:b7:70: e5:a0:12:1f:04:d8:fd:51:d9:74:3b:af:a1:6a:1d:e5:ca:c1: 81:cd:e2:d4:13:1a:1e:d9:08:24:a4:fc:4e:1b:d4:6e:42:70: 50:7c:0f:c6:ed:99:d3:97:c2:9d:0e:3f:64:11:cc:aa:6c:9c: fd:0b:7b:54:30:46:07:c0:c6:e2:bb:96:cb:a5:a2:15:54:2a: e3:2f:95:fc:22:66:a6:94:76:87:e5:1f:3d:ea:04:8a:07:12: 71:7e:6b:37:1e:88:94:25:69:17:13:b5:13:c9:05:e2:6c:c5: 21:fe:b5:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17XutV3Qd2W4g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODk4MTk5MTEtMDg3Ny00YjUzLTliMWEtNDg5MjI3YzNlODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh2iOymi5TuIQkqIgfsXpbR7Uk+HL4/g2SSx gTRFAiJYwNDiVjANH9f8TmtnqJlsg9Yk5RSnjqot8a6z45DbzCBVtep7/a+UhZRS 3+ZDRIugFrCDufe5qyfzg/2WV/H3g1u1p/KHoYkX5MH3INTqxxvfNxg8NMMsK4QZ w2JHwMoaQhNCTQeB0ZikCnHXtTGnEFkHT9F1UWhDFweIiLtRen7iyREF6/cqPq5x WJ/X6GWOS5w/w3s7TVosgttz6nVF5OtemfsjgRGIEOxMknRoX7pSLq4sKGAN0B2X HsBW8LyHwFrveWwJo18GFMS4f1zAnxnrm37Vs7KSiE/e9A4LhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFMZgWM4Vgr+GLtVD5NfQZ1seJdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I2ZTZhYmUtZjI5ZS0z NGVmLTk5MjktNWFhMTNjMGQyMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbkpriMCyYKFCy1IHe+YwSAJmuxggdIslAGfxVHDJGtARhXN8v7 IsGy7BYuI2WnE31pOpT78tba5LnB8r1+XoaqPbL8ZmzqvKUN/vyns/ZQNPo/0lOz r3aEOgRT6mHrgt8bEyf+PuazEQo+nOl5tUmI0JEidRXKDsOwfjnZ31maq7CLZ0Vu hK4c7qZsa1K3cOWgEh8E2P1R2XQ7r6FqHeXKwYHN4tQTGh7ZCCSk/E4b1G5CcFB8 D8btmdOXwp0OP2QRzKpsnP0Le1QwRgfAxuK7lsulohVUKuMvlfwiZqaUdoflHz3q BIoHEnF+azceiJQlaRcTtRPJBeJsxSH+tdw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:08 2025 by rpki-client