$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49e16569-3fe5-3137-a5e7-d0938bebec82.roa File: 49e16569-3fe5-3137-a5e7-d0938bebec82.roa (raw, json) Hash identifier: nf6j3p84+kpxkq3LDVhUGFm1+Hy6BdNdJRKsLAmIaHc= Subject key identifier: DF:87:41:36:EC:51:FA:88:1A:DA:0A:5E:DD:31:EE:95:FA:D1:1C:D6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C5333BD35B34964F8CC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49e16569-3fe5-3137-a5e7-d0938bebec82.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 8851 IP address blocks: 2001:470:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c5:33:3b:d3:5b:34:96:4f:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4e9e74dd-42e7-4a00-812b-2cbfca721424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:39:92:80:21:29:8a:c8:fa:c7:e8:8f:39: a0:8d:b3:5d:f3:08:03:de:d0:9c:b5:e4:ea:c9:bd: 30:af:b4:43:8a:b7:90:b3:57:2b:55:7b:18:6e:22: 93:7d:af:d1:45:e3:d5:83:7c:9f:27:2a:c2:ba:5e: c1:69:ca:8a:18:40:8f:57:d3:94:ae:eb:4b:c8:b0: cb:6f:76:b4:49:ce:55:2e:91:33:c0:a7:2d:0b:7c: 7b:cb:66:aa:55:42:d1:48:3d:2c:9f:8d:27:9f:2b: e9:58:8c:74:bc:df:50:3e:64:49:ed:fa:98:03:22: 3c:04:b8:13:2e:4d:83:2f:2d:92:10:1e:5c:c4:79: e5:07:fe:a4:c4:66:95:4c:0c:9b:0b:88:57:04:90: 09:a3:68:5a:ec:b5:7d:89:6f:70:3d:b5:a5:c6:c9: 11:39:5a:2b:4e:e4:60:1e:02:d2:ef:7d:fd:a5:c1: 1c:3f:6e:cd:62:f8:ef:2e:90:af:cf:62:ee:de:d7: f4:e8:0a:36:94:02:84:51:5c:45:ec:bb:f6:e5:e8: 3b:98:aa:af:8a:fd:ef:8b:a7:10:71:58:70:f8:e3: 22:90:01:79:60:2d:ae:dc:32:99:13:b5:65:2b:3c: 10:74:46:07:58:b4:f1:b9:eb:0e:01:e4:1d:bc:1e: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:41:36:EC:51:FA:88:1A:DA:0A:5E:DD:31:EE:95:FA:D1:1C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49e16569-3fe5-3137-a5e7-d0938bebec82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:161::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:57:60:24:99:3f:71:2b:a8:35:bc:b4:94:8d:d8:b1:e9:05: be:64:71:bb:ac:fd:3d:ed:e2:27:8b:ba:6c:31:f1:c8:50:08: 19:69:c0:e9:ad:96:af:ce:86:eb:0f:7b:4a:f5:91:cf:2e:76: 90:86:e4:3f:06:9e:6c:1e:4a:07:b7:de:20:e4:09:03:d4:29: 53:ea:ef:c8:d4:e7:17:7f:83:3d:bf:42:79:91:5f:f3:f3:81: 01:37:0d:15:8b:a9:34:2e:59:91:29:77:5e:81:8e:9e:ec:d8: b4:7b:ae:dd:b9:dd:92:6e:2e:33:d2:a7:69:6a:ac:33:dc:96: 5b:8d:30:6e:9c:af:5f:1f:30:7e:af:40:2f:b1:bc:2a:25:04: ae:9c:a9:eb:eb:cf:43:fe:cc:89:2a:7e:76:31:46:aa:60:89: 4f:3d:e9:04:e0:00:f3:14:82:08:8b:1b:7e:13:4c:13:97:f5: 0b:f8:f3:bd:32:4a:8a:14:c7:70:49:80:f9:4e:fb:05:52:19: bb:3a:94:94:6b:e3:31:76:1e:7a:d3:94:77:18:99:98:60:34: a8:82:a2:51:19:04:8d:88:41:4c:46:71:68:4e:27:9a:04:59: f4:ba:ef:57:d2:79:7e:4e:33:1c:35:b1:0f:41:0a:95:a6:dc: 42:8c:e8:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18UzO9NbNJZPjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NGU5ZTc0ZGQtNDJlNy00YTAwLTgxMmItMmNiZmNhNzIxNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtw5koAhKYrI+sfojzmgjbNd8wgD3tCcteTq yb0wr7RDireQs1crVXsYbiKTfa/RRePVg3yfJyrCul7BacqKGECPV9OUrutLyLDL b3a0Sc5VLpEzwKctC3x7y2aqVULRSD0sn40nnyvpWIx0vN9QPmRJ7fqYAyI8BLgT Lk2DLy2SEB5cxHnlB/6kxGaVTAybC4hXBJAJo2ha7LV9iW9wPbWlxskROVorTuRg HgLS7339pcEcP27NYvjvLpCvz2Lu3tf06Ao2lAKEUVxF7Lv25eg7mKqviv3vi6cQ cVhw+OMikAF5YC2u3DKZE7VlKzwQdEYHWLTxuesOAeQdvB5rzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN+HQTbsUfqIGtoKXt0x7pX60RzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDllMTY1NjktM2ZlNS0z MTM3LWE1ZTctZDA5MzhiZWJlYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGhXYCSZP3ErqDW8tJSN2LHpBb5kcbus/T3t4ieLumwx8chQCBlp wOmtlq/OhusPe0r1kc8udpCG5D8GnmweSge33iDkCQPUKVPq78jU5xd/gz2/QnmR X/PzgQE3DRWLqTQuWZEpd16Bjp7s2LR7rt253ZJuLjPSp2lqrDPclluNMG6cr18f MH6vQC+xvColBK6cqevrz0P+zIkqfnYxRqpgiU896QTgAPMUggiLG34TTBOX9Qv4 870ySooUx3BJgPlO+wVSGbs6lJRr4zF2HnrTlHcYmZhgNKiColEZBI2IQUxGcWhO J5oEWfS671fSeX5OMxw1sQ9BCpWm3EKM6E4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:12 2025 by rpki-client