$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fecd99e-1726-3822-bc5d-137c3d579f6f.roa File: 3fecd99e-1726-3822-bc5d-137c3d579f6f.roa (raw, json) Hash identifier: iHPRZfpGVO2e+dYXoEJDkqWRskhHbkOD1W5zzEwN++w= Subject key identifier: C7:6B:6F:52:2D:2F:07:74:87:39:E1:C4:EF:31:AC:07:3B:1F:73:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CE3F9F8CA1FFE1AE4C20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fecd99e-1726-3822-bc5d-137c3d579f6f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33362 IP address blocks: 2001:470:275::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ce:3f:9f:8c:a1:ff:e1:ae:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=de8b1d6b-020b-4eb2-bbd2-6ab1f4a5a83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:c4:11:18:df:b1:9e:67:00:fc:b7:dc:d4: fb:52:e3:fb:f5:90:3b:ef:9c:a6:da:86:df:22:34: 0a:43:c1:c6:6b:a4:0a:e1:63:19:d8:cb:05:6d:b4: d3:7f:a1:e2:fa:9c:c6:ae:23:0d:9e:ad:44:59:7b: a5:07:ad:54:71:3c:17:48:b5:30:6d:91:c1:02:9c: d9:98:bf:e6:d1:de:37:8e:de:f6:71:ed:f3:a8:c5: 1c:11:f5:25:14:6c:3f:5e:33:26:7b:61:58:2b:be: 8d:1e:a8:72:85:29:b1:6e:9e:fb:40:05:47:f5:b1: 52:dd:04:5c:5f:65:9e:e5:74:43:9a:11:4e:45:00: c7:c9:71:af:80:a2:bd:d9:a8:16:84:77:70:ed:81: 6d:0f:57:06:44:45:d7:87:4b:db:d5:b0:de:cc:ca: a8:eb:14:fc:fe:b4:5a:8b:81:78:94:73:03:ed:a5: 42:33:01:59:9b:76:9f:25:32:46:0b:c1:42:8f:27: b6:4e:80:d5:26:f8:a8:64:6d:8d:05:16:6b:42:78: e2:8f:00:69:00:74:5b:92:2d:f3:c0:da:cf:e3:2c: 22:4b:3e:c4:45:92:77:5b:78:5e:61:46:80:1e:0d: 99:f1:e1:8f:67:84:51:46:6b:46:2e:5b:9c:3e:40: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:6F:52:2D:2F:07:74:87:39:E1:C4:EF:31:AC:07:3B:1F:73:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3fecd99e-1726-3822-bc5d-137c3d579f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:275::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:66:4b:a7:bd:40:ff:e6:10:b7:e3:c0:84:1e:f9:c0:e7:e9: 5c:76:2c:fc:85:df:0f:46:a6:af:98:63:d9:f7:c4:3e:ad:54: 0f:6c:57:f4:40:24:3e:e2:64:a7:33:3c:13:9f:9b:92:e6:d7: 97:44:c4:64:30:65:5f:77:14:ab:6a:95:8c:5c:04:6b:ad:a2: 02:d7:29:f2:ef:b1:d7:95:1a:3c:4a:7e:74:ec:5f:78:d5:bc: ed:84:d7:db:dc:e9:9c:26:50:8d:4b:ed:68:cd:8c:e8:a4:bc: 5b:58:7e:b5:b2:d2:39:3d:0f:97:af:f1:b8:e5:41:12:d6:be: 99:0d:aa:13:5a:29:90:33:4f:4f:4c:e1:5b:4f:f8:44:30:68: 34:57:90:5f:94:77:5a:26:8f:70:21:fb:e3:44:37:66:b5:9d: 0c:37:6a:db:26:82:3e:18:b4:2d:67:82:74:d7:b7:18:0a:28: c0:7a:ae:db:3c:17:9d:5e:86:c3:47:2d:51:c4:bb:a8:aa:2e: 9d:15:60:96:1f:82:d9:7a:f7:fa:1e:6d:a5:bc:b0:5b:f1:de: 99:cb:69:a2:6d:98:87:01:4f:84:b1:64:75:d2:3b:86:01:f9: 77:da:aa:4c:65:f1:65:ab:9e:2f:45:49:7e:4a:cb:b6:37:36: 47:5e:01:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ184/n4yh/+GuTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGU4YjFkNmItMDIwYi00ZWIyLWJiZDItNmFiMWY0YTVhODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87EERjfsZ5nAPy33NT7UuP79ZA775ym2obf IjQKQ8HGa6QK4WMZ2MsFbbTTf6Hi+pzGriMNnq1EWXulB61UcTwXSLUwbZHBApzZ mL/m0d43jt72ce3zqMUcEfUlFGw/XjMme2FYK76NHqhyhSmxbp77QAVH9bFS3QRc X2We5XRDmhFORQDHyXGvgKK92agWhHdw7YFtD1cGREXXh0vb1bDezMqo6xT8/rRa i4F4lHMD7aVCMwFZm3afJTJGC8FCjye2ToDVJvioZG2NBRZrQnjijwBpAHRbki3z wNrP4ywiSz7ERZJ3W3heYUaAHg2Z8eGPZ4RRRmtGLlucPkAOgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdrb1ItLwd0hznhxO8xrAc7H3NtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2ZlY2Q5OWUtMTcyNi0z ODIyLWJjNWQtMTM3YzNkNTc5ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJ1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdmS6e9QP/mELfjwIQe+cDn6Vx2LPyF3w9Gpq+YY9n3xD6tVA9s V/RAJD7iZKczPBOfm5Lm15dExGQwZV93FKtqlYxcBGutogLXKfLvsdeVGjxKfnTs X3jVvO2E19vc6ZwmUI1L7WjNjOikvFtYfrWy0jk9D5ev8bjlQRLWvpkNqhNaKZAz T09M4VtP+EQwaDRXkF+Ud1omj3Ah++NEN2a1nQw3atsmgj4YtC1ngnTXtxgKKMB6 rts8F51ehsNHLVHEu6iqLp0VYJYfgtl69/oebaW8sFvx3pnLaaJtmIcBT4SxZHXS O4YB+Xfaqkxl8WWrni9FSX5Ky7Y3NkdeAWM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:19 2025 by rpki-client