$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa File: 623b1340-4e4d-3017-8588-b5e6e41a04ce.roa (raw, json) Hash identifier: 5AR0bDjQRVqVGks8ynn2bvE4EFx3RH/uUuzvI3WpU+g= Subject key identifier: BF:8E:39:26:78:9C:C7:3A:63:D6:81:99:4D:E4:BF:11:3A:B3:3D:EC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EF90831D6B94AEAC3800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 17210 IP address blocks: 2001:470:202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ef:90:83:1d:6b:94:ae:ac:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e5b6506a-ef2e-4373-9562-5afcc7af0a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:84:05:0f:8e:92:1b:38:1b:f0:87:66:dc: 65:60:55:8a:b9:fb:07:6d:17:6e:67:d3:c1:36:32: 3c:66:91:9c:30:b0:73:2d:86:1e:7a:40:7d:d0:75: c2:5a:a3:03:f7:5d:3c:a3:4b:10:c3:ea:ec:c4:58: 9f:e2:a2:12:95:77:ed:b5:e8:df:4a:32:ca:49:c3: 05:2d:9b:cf:53:59:5e:ee:c0:be:e9:20:ff:c6:4b: 0f:66:82:20:16:93:4a:88:bb:6b:aa:b4:d1:c8:20: f0:f0:d2:c3:a8:bb:68:df:52:7c:75:4c:c2:0a:42: c1:78:4a:46:31:f8:85:24:5e:4c:e5:f7:5f:31:c2: 7d:b2:e1:a6:4d:ff:50:98:b3:aa:6b:2e:92:99:fe: 46:f8:9a:a7:21:c1:1d:d2:e9:2d:2d:3d:ce:26:75: 7e:6f:44:0f:3e:cb:41:a5:f0:be:d4:76:47:62:df: d1:85:16:b7:cf:9a:05:b9:f1:96:5b:06:a1:39:e3: 43:12:80:85:b1:a4:6e:00:b2:43:f4:85:61:d2:ec: 1f:20:6f:9c:19:a2:d9:58:f9:7b:56:d9:9f:95:55: a4:9f:a0:b1:b4:de:29:65:c8:95:3a:67:76:b1:ad: ee:76:b9:94:4e:7e:a7:3f:ab:3c:02:81:c1:7e:63: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:39:26:78:9C:C7:3A:63:D6:81:99:4D:E4:BF:11:3A:B3:3D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/623b1340-4e4d-3017-8588-b5e6e41a04ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:202::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:09:e9:83:93:3b:39:fc:8e:a0:8b:aa:30:03:2a:5e:a2:c0: 8c:ce:9b:80:1e:35:38:ee:38:28:88:e0:4a:1b:55:a3:31:7f: 85:b3:8c:c7:7c:27:98:5a:c9:d6:f4:03:8c:99:98:37:70:e5: db:92:6d:b3:be:79:7d:aa:57:88:00:15:75:67:8d:b4:82:1a: e4:18:03:b8:26:36:cf:34:e9:b8:6d:a2:4c:a6:e5:a2:99:02: 32:6b:b2:ed:c2:68:73:ee:d5:f5:f7:98:de:0d:98:f3:25:2e: 65:fa:d0:9e:4b:cc:86:76:72:67:3a:12:78:04:2e:05:75:33: f5:52:5d:8d:40:ef:8e:84:cf:d3:4d:76:c3:c0:f8:5c:41:d8: 0c:79:00:a7:db:d9:13:84:62:94:4b:4a:83:a1:71:4d:1c:40: 8a:a3:73:20:ad:27:98:bb:b3:a2:42:01:a0:75:14:dd:c1:ce: 20:78:57:25:8e:6b:b2:5d:3c:fb:f1:e7:c4:94:f3:55:18:5f: 85:46:89:e3:f9:ff:73:44:b7:5d:dd:e3:80:b8:28:9a:e1:26: 38:a2:48:fa:26:2d:14:62:6b:b9:9d:67:ec:16:d0:c2:65:f1: b2:f5:a6:9c:0a:30:71:71:75:59:c6:e2:25:d9:54:bf:aa:b8: 18:30:99:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1++Qgx1rlK6sOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTViNjUwNmEtZWYyZS00MzczLTk1NjItNWFmY2M3YWYwYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JaEBQ+Okhs4G/CHZtxlYFWKufsHbRduZ9PB NjI8ZpGcMLBzLYYeekB90HXCWqMD9108o0sQw+rsxFif4qISlXfttejfSjLKScMF LZvPU1le7sC+6SD/xksPZoIgFpNKiLtrqrTRyCDw8NLDqLto31J8dUzCCkLBeEpG MfiFJF5M5fdfMcJ9suGmTf9QmLOqay6Smf5G+JqnIcEd0uktLT3OJnV+b0QPPstB pfC+1HZHYt/RhRa3z5oFufGWWwahOeNDEoCFsaRuALJD9IVh0uwfIG+cGaLZWPl7 VtmflVWkn6CxtN4pZciVOmd2sa3udrmUTn6nP6s8AoHBfmNGuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+OOSZ4nMc6Y9aBmU3kvxE6sz3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjIzYjEzNDAtNGU0ZC0z MDE3LTg1ODgtYjVlNmU0MWEwNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL0J6YOTOzn8jqCLqjADKl6iwIzOm4AeNTjuOCiI4EobVaMxf4Wz jMd8J5haydb0A4yZmDdw5duSbbO+eX2qV4gAFXVnjbSCGuQYA7gmNs806bhtokym 5aKZAjJrsu3CaHPu1fX3mN4NmPMlLmX60J5LzIZ2cmc6EngELgV1M/VSXY1A746E z9NNdsPA+FxB2Ax5AKfb2ROEYpRLSoOhcU0cQIqjcyCtJ5i7s6JCAaB1FN3BziB4 VyWOa7JdPPvx58SU81UYX4VGieP5/3NEt13d44C4KJrhJjiiSPomLRRia7mdZ+wW 0MJl8bL1ppwKMHFxdVnG4iXZVL+quBgwmeo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:45 2025 by rpki-client