$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67be290c-d0b3-356f-837c-bc7c8b16c41c.roa File: 67be290c-d0b3-356f-837c-bc7c8b16c41c.roa (raw, json) Hash identifier: IDxRL6i5nvN117fAFjby/nSp0YO7Bli40wuKdD4fFhY= Subject key identifier: 18:4E:4F:23:44:27:8E:6C:2A:C1:3C:30:4C:21:D7:81:6D:4A:8B:13 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BAAA64C0C706C55C81554CF60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67be290c-d0b3-356f-837c-bc7c8b16c41c.roa Signing time: Tue 28 Oct 2025 01:30:11 +0000 ROA not before: Tue 28 Oct 2025 01:30:11 +0000 ROA not after: Mon 26 Jan 2026 02:30:11 +0000 asID: 200187 IP address blocks: 2001:470:504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:a6:4c:0c:70:6c:55:c8:15:54:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 01:30:11 2025 GMT Not After : Jan 26 02:30:11 2026 GMT Subject: CN=83f1fa77-eb2d-4d33-8381-b53f0b3e7f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:0b:fa:a9:a6:e0:e7:50:ef:64:87:96:6d: 94:1e:38:4c:97:c4:43:1b:a9:2f:03:c9:45:7d:84: f4:be:38:43:aa:b9:1f:00:ce:83:92:b8:e8:93:9e: b9:55:2a:53:35:58:b6:0f:64:6f:2f:43:45:78:d8: 82:fd:5d:f8:d0:05:dd:e6:74:ba:93:71:11:b7:cc: 84:5c:30:70:b9:b6:40:19:87:76:49:df:73:14:dd: d7:1c:3b:0a:97:a1:82:32:33:52:05:73:35:16:1e: 9d:50:81:6b:dd:92:d7:7e:74:80:6a:73:e3:a5:6d: b1:52:f1:f6:ba:9e:31:e7:26:8e:64:be:a6:e5:c9: 97:08:45:1c:5a:12:40:40:b5:3f:a8:ce:10:34:a2: 39:4b:c9:3e:14:83:55:04:04:7b:a0:8e:fe:c3:5e: 7a:35:16:42:f0:6c:6c:63:88:d2:43:f2:42:0e:e6: ba:fa:e7:61:92:f2:7d:d3:84:cb:69:a1:ac:61:05: d8:55:bb:2b:d0:2b:01:33:ab:40:76:c1:b9:12:f9: 52:00:33:d1:b4:92:19:fb:79:ed:14:2a:55:30:45: 4f:31:25:5d:9d:df:ed:86:aa:27:5e:21:ec:8a:d0: 22:ff:10:3a:fc:64:45:93:8f:c2:c9:78:50:05:5c: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:4F:23:44:27:8E:6C:2A:C1:3C:30:4C:21:D7:81:6D:4A:8B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/67be290c-d0b3-356f-837c-bc7c8b16c41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:504::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:24:48:ab:9c:55:ec:76:80:1a:16:db:b2:7e:5d:d1:91:00: 82:81:56:a2:cc:40:5e:3f:93:9c:b7:fb:e9:67:00:fb:74:5b: cd:52:76:bc:9c:71:fe:52:e5:1e:27:5a:e5:5e:c7:2d:3f:7f: 94:fd:f7:f3:5f:87:b8:55:67:4a:0d:87:e1:29:94:3e:71:fa: 62:5d:f1:6d:19:8e:f1:aa:12:db:45:61:a7:b4:f1:a2:ce:fa: 4f:7b:7c:f0:dc:8a:2a:26:11:9f:86:ea:81:86:cf:80:e2:1a: 45:e0:f6:ee:53:2e:2d:33:b2:28:43:12:08:14:58:ea:77:a5: 88:65:99:5f:48:1a:a8:60:95:ce:79:38:88:e6:fa:72:6f:dd: ec:c1:d6:04:99:e9:80:7c:49:01:60:3a:f1:ca:85:bd:f0:01: 26:cc:a7:6c:b9:66:4d:ea:fe:93:25:85:8a:f0:67:c6:1c:2e: 3f:05:8f:41:75:40:af:57:36:b6:22:15:15:1e:75:6e:c0:14: f3:e5:32:92:4f:26:ca:7a:15:bb:88:96:35:94:5c:8d:b9:68: b4:58:ff:0d:6c:d2:2a:56:69:05:5e:47:4f:d8:4f:c5:33:94: f2:7e:eb:89:12:d6:47:c6:e3:e7:3d:92:3b:00:2d:33:d0:52: bc:4b:c1:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuqpkwMcGxVyBVUz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyODAxMzAxMVoXDTI2MDEyNjAyMzAxMVowLzEtMCsGA1UEAxMk ODNmMWZhNzctZWIyZC00ZDMzLTgzODEtYjUzZjBiM2U3ZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyToL+qmm4OdQ72SHlm2UHjhMl8RDG6kvA8lF fYT0vjhDqrkfAM6Dkrjok565VSpTNVi2D2RvL0NFeNiC/V340AXd5nS6k3ERt8yE XDBwubZAGYd2Sd9zFN3XHDsKl6GCMjNSBXM1Fh6dUIFr3ZLXfnSAanPjpW2xUvH2 up4x5yaOZL6m5cmXCEUcWhJAQLU/qM4QNKI5S8k+FINVBAR7oI7+w156NRZC8Gxs Y4jSQ/JCDua6+udhkvJ904TLaaGsYQXYVbsr0CsBM6tAdsG5EvlSADPRtJIZ+3nt FCpVMEVPMSVdnd/thqonXiHsitAi/xA6/GRFk4/CyXhQBVwYHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBhOTyNEJ45sKsE8MEwh14FtSosTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjdiZTI5MGMtZDBiMy0z NTZmLTgzN2MtYmM3YzhiMTZjNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIkSKucVex2gBoW27J+XdGRAIKBVqLMQF4/k5y3++lnAPt0W81S dryccf5S5R4nWuVexy0/f5T99/Nfh7hVZ0oNh+EplD5x+mJd8W0ZjvGqEttFYae0 8aLO+k97fPDciiomEZ+G6oGGz4DiGkXg9u5TLi0zsihDEggUWOp3pYhlmV9IGqhg lc55OIjm+nJv3ezB1gSZ6YB8SQFgOvHKhb3wASbMp2y5Zk3q/pMlhYrwZ8YcLj8F j0F1QK9XNrYiFRUedW7AFPPlMpJPJsp6FbuIljWUXI25aLRY/w1s0ipWaQVeR0/Y T8UzlPJ+64kS1kfG4+c9kjsALTPQUrxLweA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:13 2025 by rpki-client