$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa File: 4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa (raw, json) Hash identifier: hadC/brvBB3h+qccYCbPnPsydeTVom1GouK4Ewt8RDg= Subject key identifier: 0B:1E:83:F4:1D:64:C3:CA:DC:45:E5:0B:CB:BD:02:6C:10:3F:6F:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BABFD30481ABF692B1ACAA680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 395517 IP address blocks: 2001:470:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:30:48:1a:bf:69:2b:1a:ca:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=db2ef55e-0156-4137-a49d-6e96486edf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:61:b5:8f:5a:b0:45:7f:4d:a5:a5:fc:c8: 92:23:1f:e0:b7:5b:f4:85:c0:dc:0b:52:0b:ea:53: 23:f9:09:68:54:99:a3:1e:a7:72:46:68:f1:49:b9: cc:d1:d5:f4:dd:dd:f3:09:db:78:08:79:0a:8e:98: 0a:4e:82:8c:7d:d4:44:97:c3:a6:1f:2d:26:d1:35: 15:54:04:2e:ce:b6:2c:43:96:01:12:44:99:e2:4e: b4:e9:a6:f4:7c:74:eb:1f:ac:ac:af:1a:8a:72:52: 8d:65:b1:3f:2d:cc:3e:1b:2a:d5:f7:a5:6a:d3:f7: 6b:47:89:e2:d1:c2:58:64:b4:1a:7e:ae:8a:f8:47: 49:61:d7:f7:55:8e:f0:fd:4e:17:26:ba:12:47:c5: 8f:93:5f:c8:66:eb:7f:ec:d2:94:a0:f9:0a:a4:03: c1:2c:48:83:86:45:8b:9a:71:a7:0d:ff:36:30:78: a5:53:cc:23:4a:d6:24:a2:b2:03:a0:ae:a2:5c:a6: 38:39:f7:5f:0f:81:e9:a3:ce:1f:a4:8b:3f:89:a9: c9:2f:db:0f:e9:28:86:36:86:13:b4:39:c7:68:ae: 8e:e6:b5:17:6c:68:79:84:5d:9b:87:a2:79:9d:d0: cb:54:88:17:87:ad:75:4b:fa:16:c1:08:70:35:0a: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:83:F4:1D:64:C3:CA:DC:45:E5:0B:CB:BD:02:6C:10:3F:6F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:5c:33:66:6f:73:6a:55:95:b5:89:69:0c:5b:2e:ad:d1: fd:85:a9:7b:f3:5e:5f:a6:a1:98:de:a7:ef:0e:08:5a:56:e5: 05:3f:d7:1f:54:7f:41:ab:ad:62:ab:10:e0:bb:89:0b:5c:3f: 45:3a:f0:d6:7f:41:80:ef:74:cc:9f:90:12:74:90:24:56:0b: e3:da:94:62:04:a5:64:c1:77:40:88:8c:3b:05:ef:08:0e:04: 5b:8c:19:1c:b6:8e:13:bb:29:2e:31:6f:cf:97:97:62:d0:cf: 91:6a:26:dd:06:8b:ee:dc:79:69:66:91:c6:ca:5d:7e:bf:79: 87:c5:1e:26:3f:b4:66:e8:57:97:0e:ec:a0:b7:f1:6d:69:a2: 2d:67:49:db:3f:d5:99:73:15:8d:b4:1d:6d:8d:eb:8b:d7:a4: 05:72:a6:8b:18:f8:22:48:61:36:e3:d4:2b:30:1f:4a:9a:92: 1f:bf:d2:53:6d:5e:09:e6:64:e5:46:5a:b3:02:0c:77:80:52: f6:04:1f:02:35:f5:55:2c:88:d0:8d:8d:e9:80:71:3b:30:c5: ea:84:72:de:2b:39:82:67:20:f9:9b:bc:a4:8c:a6:e2:e3:74: a1:b5:3d:5c:62:b1:d7:e9:4d:60:da:1a:3a:09:d4:98:0a:e5: 2d:c6:45:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/TBIGr9pKxrKpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZGIyZWY1NWUtMDE1Ni00MTM3LWE0OWQtNmU5NjQ4NmVkZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk61htY9asEV/TaWl/MiSIx/gt1v0hcDcC1IL 6lMj+QloVJmjHqdyRmjxSbnM0dX03d3zCdt4CHkKjpgKToKMfdREl8OmHy0m0TUV VAQuzrYsQ5YBEkSZ4k606ab0fHTrH6ysrxqKclKNZbE/Lcw+GyrV96Vq0/drR4ni 0cJYZLQafq6K+EdJYdf3VY7w/U4XJroSR8WPk1/IZut/7NKUoPkKpAPBLEiDhkWL mnGnDf82MHilU8wjStYkorIDoK6iXKY4OfdfD4Hpo84fpIs/ianJL9sP6SiGNoYT tDnHaK6O5rUXbGh5hF2bh6J5ndDLVIgXh611S/oWwQhwNQrT1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAseg/QdZMPK3EXlC8u9AmwQP2/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGJjOGJhNzMtOGUyOS0z OGQ1LWI0NmYtN2E2YTRiOTg4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVMXDNmb3NqVZW1iWkMWy6t0f2FqXvzXl+moZjep+8OCFpW5QU/ 1x9Uf0GrrWKrEOC7iQtcP0U68NZ/QYDvdMyfkBJ0kCRWC+PalGIEpWTBd0CIjDsF 7wgOBFuMGRy2jhO7KS4xb8+Xl2LQz5FqJt0Gi+7ceWlmkcbKXX6/eYfFHiY/tGbo V5cO7KC38W1poi1nSds/1ZlzFY20HW2N64vXpAVyposY+CJIYTbj1CswH0qakh+/ 0lNtXgnmZOVGWrMCDHeAUvYEHwI19VUsiNCNjemAcTswxeqEct4rOYJnIPmbvKSM puLjdKG1PVxisdfpTWDaGjoJ1JgK5S3GRc0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:02:59 2025 by rpki-client