$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa File: 704445ba-6dda-306b-9a4a-64db2b1238b1.roa (raw, json) Hash identifier: ZdM4kDFBaTtTD/IxdXBvQTdaw8m+N/BOOhvL8crSgA0= Subject key identifier: D1:68:7D:AC:AB:24:66:61:FF:6D:49:15:28:8A:05:7F:39:BF:E9:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CC83AD082F2A2A1E1D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 394330 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cc:83:ad:08:2f:2a:2a:1e:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1209066e-99b3-4874-8245-f82e19e26b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:87:ac:47:1d:97:50:82:f7:79:70:41:1c: c5:36:3d:8c:f6:f5:4b:b9:6a:1c:b2:23:4c:aa:b7: a6:d1:75:ba:d0:20:23:ef:20:cb:c8:13:ee:de:4e: d6:84:3a:55:af:41:f7:9a:ec:9c:46:7d:be:da:16: a9:aa:42:d3:15:8d:aa:47:6b:94:92:bf:b8:99:21: 07:63:bd:48:37:6c:b5:df:7f:28:f4:c3:d9:92:e2: 5c:71:03:6a:3e:87:d1:57:3e:25:c5:20:b8:dd:58: ce:2c:28:6e:ea:90:84:87:70:cf:ef:49:bb:cc:1c: 09:1d:ad:54:69:a4:2b:c1:5e:f4:55:7a:65:50:29: 67:25:9b:25:5b:d2:0b:30:9f:f6:82:ed:5f:47:26: 89:bd:31:58:90:08:9b:73:ff:58:a3:ef:fe:90:e2: 22:0f:f4:8b:1a:5f:19:92:b6:6e:59:51:a6:fc:66: bc:8f:d9:d8:34:e0:50:b9:b6:dc:2d:8e:93:3b:f8: 51:7c:db:4f:7b:a9:2e:bb:63:e7:24:37:27:9f:1d: 4e:f9:49:3d:82:71:2e:e9:a9:4b:3c:db:41:aa:c0: 61:e3:b9:79:cd:c2:08:63:ec:4e:e6:82:fb:bd:12: 7e:a8:2f:9a:56:22:8b:03:1f:09:d6:a4:06:15:1c: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:7D:AC:AB:24:66:61:FF:6D:49:15:28:8A:05:7F:39:BF:E9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:22:04:bb:9c:f9:11:b8:27:e1:77:6a:a2:05:48:20:2c:b2: 5d:8f:f9:53:5a:73:37:c3:4a:dc:a7:ba:7e:18:bb:1f:4f:b4: d3:d1:61:d8:42:6a:5c:cc:15:58:a2:59:f1:57:0e:f5:f2:40: e9:64:40:ec:a6:02:a4:bf:c8:d3:fb:b5:fa:7d:47:5e:51:75: b4:73:8f:35:5b:e6:c0:ea:36:58:2e:8f:1f:21:af:87:78:5c: dc:be:29:7e:c8:e8:57:7e:c7:7a:8d:99:0a:e1:22:b8:11:76: 0a:88:89:b6:7c:6c:04:fe:40:ce:74:f7:65:1b:cc:b8:38:ab: e2:c4:94:cb:59:a2:17:d7:c6:a3:d7:c6:df:ee:65:0d:41:5f: 16:2e:71:ef:38:6d:a3:92:a0:d4:68:f5:70:be:4a:4b:02:18: f2:f6:4c:9b:46:e0:5f:14:ff:95:2f:0d:70:03:97:e9:04:ee: a0:85:55:18:0b:6e:e5:e5:9a:b8:e7:ca:52:4f:88:84:c4:f2: c5:ae:03:1c:ce:19:f2:d1:87:88:ae:35:20:b7:3c:b1:61:27: ad:fc:ef:4c:b5:ed:71:32:87:4a:0a:a9:52:36:3a:ad:bd:1b: 0e:eb:8b:da:50:bf:75:b9:c1:8f:a5:17:47:64:d7:f4:06:25: 3f:92:37:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18yDrQgvKioeHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTIwOTA2NmUtOTliMy00ODc0LTgyNDUtZjgyZTE5ZTI2YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTaHrEcdl1CC93lwQRzFNj2M9vVLuWocsiNM qrem0XW60CAj7yDLyBPu3k7WhDpVr0H3muycRn2+2hapqkLTFY2qR2uUkr+4mSEH Y71IN2y1338o9MPZkuJccQNqPofRVz4lxSC43VjOLChu6pCEh3DP70m7zBwJHa1U aaQrwV70VXplUClnJZslW9ILMJ/2gu1fRyaJvTFYkAibc/9Yo+/+kOIiD/SLGl8Z krZuWVGm/Ga8j9nYNOBQubbcLY6TO/hRfNtPe6kuu2PnJDcnnx1O+Uk9gnEu6alL PNtBqsBh47l5zcIIY+xO5oL7vRJ+qC+aViKLAx8J1qQGFRyAkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFofayrJGZh/21JFSiKBX85v+kIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzA0NDQ1YmEtNmRkYS0z MDZiLTlhNGEtNjRkYjJiMTIzOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK8iBLuc+RG4J+F3aqIFSCAssl2P+VNaczfDStynun4Yux9PtNPR YdhCalzMFViiWfFXDvXyQOlkQOymAqS/yNP7tfp9R15RdbRzjzVb5sDqNlgujx8h r4d4XNy+KX7I6Fd+x3qNmQrhIrgRdgqIibZ8bAT+QM5092UbzLg4q+LElMtZohfX xqPXxt/uZQ1BXxYuce84baOSoNRo9XC+SksCGPL2TJtG4F8U/5UvDXADl+kE7qCF VRgLbuXlmrjnylJPiITE8sWuAxzOGfLRh4iuNSC3PLFhJ63870y17XEyh0oKqVI2 Oq29Gw7ri9pQv3W5wY+lF0dk1/QGJT+SN80= -----END CERTIFICATE-----Generated at Tue Nov 4 19:26:26 2025 by rpki-client