$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa File: 4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa (raw, json) Hash identifier: 1yaY5vXkblqihGUp5D+IufVM5ipJsLAsWCpdj2aYo88= Subject key identifier: D4:0D:CC:EC:AE:0F:55:5B:DC:98:1B:E6:D1:5E:3B:9D:E8:73:2A:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EDD3FE7345AC4D641640 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40523 IP address blocks: 2001:470:1c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ed:d3:fe:73:45:ac:4d:64:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=21d9c52a-6f2c-4f8d-834c-fcede3f7cafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:39:f6:4a:80:0d:c6:6a:c4:ae:25:2f:9f: 7a:4d:93:fc:ed:b0:43:b3:7f:ca:af:32:8c:f0:e6: cd:06:c3:d0:47:0b:11:cb:fc:dc:e7:df:48:b5:04: f9:a7:45:aa:e7:7a:3b:57:f0:05:22:96:fc:58:7f: f0:9d:a7:7c:a0:22:79:d4:6f:6f:33:f1:ed:e8:a6: cf:af:52:48:06:ad:75:40:74:3a:0c:63:fb:69:9a: be:f5:e3:f9:e4:0b:4f:1d:54:40:20:77:32:1f:03: b8:6e:c2:49:f2:35:fb:f4:16:20:13:3d:67:41:03: db:4c:f1:90:b3:93:5c:c5:3b:e8:75:27:b1:c4:37: 23:ab:17:19:31:48:3d:45:20:f8:fc:c3:44:8c:1e: ed:d3:21:7b:60:bb:be:94:07:fc:7c:10:9e:c0:d9: 36:4d:b1:1c:47:3b:9a:0f:a5:15:c0:6f:c8:64:cd: 4d:f4:11:07:ea:b1:c5:57:5d:f5:88:ff:3f:da:d4: 7c:c9:ac:27:76:84:91:82:f1:39:37:d6:ba:08:ec: 7b:d7:10:5d:ce:30:c5:c2:80:d9:b6:81:4b:c7:10: 16:81:81:3a:9f:1f:1c:ce:4a:b8:bb:83:d0:2a:15: 9c:6a:da:be:55:84:78:f3:fa:d9:5f:b3:96:e4:c2: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:CC:EC:AE:0F:55:5B:DC:98:1B:E6:D1:5E:3B:9D:E8:73:2A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4993a32f-136f-3cab-9d6e-80f2b8ce19dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:55:05:53:09:49:f5:83:cd:42:93:62:09:5d:e7:8d:68:b8: 49:d4:53:50:4d:24:6f:da:f4:99:2b:8c:79:1a:7c:97:68:7f: 58:02:b5:f0:0c:df:aa:06:6d:aa:d2:12:f7:9e:71:d9:61:57: 7c:5c:89:01:71:b8:1b:e8:14:07:7b:be:f1:db:ec:52:43:21: 14:3c:88:66:73:be:f0:e4:14:cc:33:d4:a7:e1:1a:80:23:52: 00:be:7c:7a:8a:b6:d8:7a:f6:10:fe:7c:5e:06:24:0e:78:91: ce:8f:ae:1e:b4:b8:ac:d1:26:06:9d:e0:d1:7e:79:c8:cc:19: ea:64:a0:7b:f8:92:f0:e6:3e:ea:5e:a8:ad:25:b7:87:90:af: f0:17:2c:0a:a9:0c:b7:2a:62:4c:16:23:a9:a0:be:c7:2f:6f: 6d:5a:3c:5d:f4:70:b2:d2:f3:e5:5d:9e:d2:1b:ba:95:41:ed: bb:dc:a4:a7:60:1b:2b:f8:83:ae:15:cc:78:65:b6:96:03:0e: a5:d2:47:00:de:a2:36:4a:c0:09:da:ab:9b:34:4f:4c:25:8a: a8:2e:ea:c4:83:38:54:29:1d:2a:6d:6b:f1:3b:84:c4:31:ce: 96:99:db:28:42:77:b7:f7:9f:0f:31:61:0f:8a:02:fb:8e:fd: ac:74:0f:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+3T/nNFrE1kFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjFkOWM1MmEtNmYyYy00ZjhkLTgzNGMtZmNlZGUzZjdjYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxg59kqADcZqxK4lL596TZP87bBDs3/KrzKM 8ObNBsPQRwsRy/zc599ItQT5p0Wq53o7V/AFIpb8WH/wnad8oCJ51G9vM/Ht6KbP r1JIBq11QHQ6DGP7aZq+9eP55AtPHVRAIHcyHwO4bsJJ8jX79BYgEz1nQQPbTPGQ s5NcxTvodSexxDcjqxcZMUg9RSD4/MNEjB7t0yF7YLu+lAf8fBCewNk2TbEcRzua D6UVwG/IZM1N9BEH6rHFV131iP8/2tR8yawndoSRgvE5N9a6COx71xBdzjDFwoDZ toFLxxAWgYE6nx8czkq4u4PQKhWcatq+VYR48/rZX7OW5MK7mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQNzOyuD1Vb3Jgb5tFeO53ocypEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDk5M2EzMmYtMTM2Zi0z Y2FiLTlkNmUtODBmMmI4Y2UxOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlVBVMJSfWDzUKTYgld541ouEnUU1BNJG/a9JkrjHkafJdof1gC tfAM36oGbarSEveecdlhV3xciQFxuBvoFAd7vvHb7FJDIRQ8iGZzvvDkFMwz1Kfh GoAjUgC+fHqKtth69hD+fF4GJA54kc6Prh60uKzRJgad4NF+ecjMGepkoHv4kvDm PupeqK0lt4eQr/AXLAqpDLcqYkwWI6mgvscvb21aPF30cLLS8+VdntIbupVB7bvc pKdgGyv4g64VzHhltpYDDqXSRwDeojZKwAnaq5s0T0wliqgu6sSDOFQpHSpta/E7 hMQxzpaZ2yhCd7f3nw8xYQ+KAvuO/ax0D6I= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:04 2025 by rpki-client