$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa File: 853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa (raw, json) Hash identifier: gHx4VpfUSD+QPFTcM7r70zpdePJeS6QohRuv/Y6t/KM= Subject key identifier: 07:D3:18:80:74:C7:54:45:F1:D2:F7:46:A1:F2:E6:49:BC:56:2C:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F0262332DC8591ACF840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 46506 IP address blocks: 2001:470:211::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f0:26:23:32:dc:85:91:ac:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2a166509-4ebf-4da1-8b41-122250b342e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:53:b1:5d:b6:a8:4a:49:93:8d:0a:9e:59: fe:c5:9c:a2:8f:71:e9:ce:4f:4c:a0:fa:13:21:65: 59:11:8d:5e:b1:57:b3:eb:88:c4:bb:fd:19:9d:9d: c2:59:5d:f4:6a:79:2b:f5:3f:a8:d2:78:dc:f7:ac: 65:9e:bc:77:62:47:50:f9:38:ab:8b:f1:e7:63:66: ec:42:a2:c7:7b:dd:51:86:d2:8d:12:36:33:22:d9: aa:72:2d:ba:b4:6a:e4:10:db:51:b7:2e:4f:25:99: 83:93:e4:38:64:08:ac:dc:db:42:23:fb:52:79:c6: e2:7d:60:d7:ef:e0:26:2d:40:e3:9b:09:51:b8:92: eb:9f:37:36:3e:2a:50:4d:1b:ca:63:7d:67:4d:e1: 2b:e1:c1:9d:20:38:14:b3:a7:32:8c:18:33:5a:4d: e5:de:71:e3:5f:80:11:99:f0:e7:12:2b:d5:af:3e: aa:1d:ec:06:1a:9c:8e:b6:a2:5d:44:46:e8:f2:0e: 82:65:2e:73:1b:f6:54:17:ef:e1:62:61:ac:14:9d: 72:48:22:5d:d3:a1:39:dc:00:41:d1:a1:22:89:2e: 9b:d5:49:51:ed:93:ef:9c:29:76:93:bf:ab:5c:ef: 7a:d9:01:57:ab:e4:64:4c:86:52:39:dd:9a:b1:25: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:18:80:74:C7:54:45:F1:D2:F7:46:A1:F2:E6:49:BC:56:2C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/853da2ad-54d6-3ed9-b09f-07fc3b64a6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:211::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:96:0e:b0:f3:59:2c:50:fe:e0:c4:0b:92:49:cd:61:ce:19: 21:e4:4d:33:57:6a:86:e1:43:78:f4:c5:d9:3a:86:53:3a:a8: 62:4d:de:92:a3:44:95:c2:38:ad:de:34:d0:f0:f9:41:5e:5a: 92:78:af:c1:02:ab:4d:cb:58:24:5a:d6:36:d8:77:d9:9d:da: 9a:58:0b:58:4d:44:de:c3:c3:51:f3:53:18:72:60:dc:26:75: d4:80:54:2e:16:f6:3e:12:fe:f5:8a:3b:b8:bd:ed:71:d4:f3: 86:fa:96:28:91:6e:57:83:37:98:b6:36:a3:87:9d:f0:4c:e8: 09:eb:39:bc:02:f2:72:95:07:f5:bf:e3:03:a2:5e:72:7e:93: 46:24:4c:e0:7f:94:a7:ab:1c:e0:53:1b:57:0d:c8:5b:17:34: 6b:21:f1:32:c2:98:52:49:08:46:8a:a0:48:ec:23:45:c3:c6: 0c:52:fb:f5:52:12:75:2b:6e:b3:59:fd:88:e4:15:e8:99:d7: 39:ef:20:35:ae:e1:1e:c0:da:0b:39:3e:30:0a:fa:ff:1c:de: 77:d0:41:f8:8f:6c:2e:d6:c2:3b:4e:72:55:72:a1:88:83:2a: cc:1d:7e:4a:7d:c8:77:08:99:ce:0b:6d:88:cc:38:ac:ae:f7: 44:a5:ff:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/AmIzLchZGs+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmExNjY1MDktNGViZi00ZGExLThiNDEtMTIyMjUwYjM0MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUNTsV22qEpJk40Knln+xZyij3Hpzk9MoPoT IWVZEY1esVez64jEu/0ZnZ3CWV30ankr9T+o0njc96xlnrx3YkdQ+Tiri/HnY2bs QqLHe91RhtKNEjYzItmqci26tGrkENtRty5PJZmDk+Q4ZAis3NtCI/tSecbifWDX 7+AmLUDjmwlRuJLrnzc2PipQTRvKY31nTeEr4cGdIDgUs6cyjBgzWk3l3nHjX4AR mfDnEivVrz6qHewGGpyOtqJdREbo8g6CZS5zG/ZUF+/hYmGsFJ1ySCJd06E53ABB 0aEiiS6b1UlR7ZPvnCl2k7+rXO962QFXq+RkTIZSOd2asSUjAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfTGIB0x1RF8dL3RqHy5km8ViwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODUzZGEyYWQtNTRkNi0z ZWQ5LWIwOWYtMDdmYzNiNjRhNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCWDrDzWSxQ/uDEC5JJzWHOGSHkTTNXaobhQ3j0xdk6hlM6qGJN 3pKjRJXCOK3eNNDw+UFeWpJ4r8ECq03LWCRa1jbYd9md2ppYC1hNRN7Dw1HzUxhy YNwmddSAVC4W9j4S/vWKO7i97XHU84b6liiRbleDN5i2NqOHnfBM6AnrObwC8nKV B/W/4wOiXnJ+k0YkTOB/lKerHOBTG1cNyFsXNGsh8TLCmFJJCEaKoEjsI0XDxgxS +/VSEnUrbrNZ/YjkFeiZ1znvIDWu4R7A2gs5PjAK+v8c3nfQQfiPbC7WwjtOclVy oYiDKswdfkp9yHcImc4LbYjMOKyu90Sl/4c= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:57 2025 by rpki-client