$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa File: 9390f67b-d69f-38c9-803b-a3928f297159.roa (raw, json) Hash identifier: bjJ7qJ3Xa+PwgYRQX013NPHLBM/GQgfuhWUz2Vnp67Q= Subject key identifier: 88:66:F8:E5:EA:26:88:56:8A:79:91:0C:B0:1D:2E:6D:BE:BD:F8:ED Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D3D04327252093441BA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395717 IP address blocks: 2001:470:2e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d3:d0:43:27:25:20:93:44:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b4101c3d-da69-4203-a4e6-cef143f6606d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:b9:7a:24:29:e0:d2:26:1e:c5:a0:20:44: ea:4e:d1:e8:9f:86:35:99:98:f3:50:a4:c3:39:d8: 63:13:f4:e0:e6:89:91:d3:4e:59:71:b7:8d:72:e2: 60:b0:e2:c9:9d:18:6a:71:27:60:5a:e1:4a:bd:81: c8:b9:64:f7:8e:d5:74:4f:b3:c9:fb:1c:39:9f:0a: 42:ed:bd:e8:2c:ef:be:45:8a:42:a9:11:13:c5:14: 94:d8:9c:bf:63:be:4b:56:b9:2c:4b:7b:0c:f6:ab: 41:9d:48:35:82:3e:0f:c2:32:ee:aa:9c:b9:92:14: 1e:db:0c:90:af:49:8f:3e:70:0a:17:6f:49:c8:6f: 58:2d:e3:0e:da:06:33:4d:2b:f7:3d:e7:fd:f4:c8: c0:ad:52:7d:6d:ac:5a:5c:da:bf:2a:d2:bc:1a:58: 6e:49:80:e1:ae:49:0c:30:2f:31:8d:78:cd:72:68: 09:bc:93:51:c5:cc:fa:40:d6:7e:56:a4:a9:f9:9a: 1e:50:5c:e2:ec:c8:7c:7f:ec:ed:d4:4d:03:e0:d0: 0a:f0:b4:69:bd:6c:84:79:54:f8:b9:53:0e:7a:1f: f9:7f:8c:45:d0:34:ff:bc:d6:10:76:e6:1e:37:7d: 5d:9f:10:64:ff:c4:b6:07:ac:15:2f:b2:b5:3e:21: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:F8:E5:EA:26:88:56:8A:79:91:0C:B0:1D:2E:6D:BE:BD:F8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9390f67b-d69f-38c9-803b-a3928f297159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8c:c3:58:65:08:1b:2a:d6:ee:6b:48:94:1c:e2:df:c6:05: 97:ff:3a:49:7a:0f:f5:59:25:57:d0:e9:fe:28:c2:db:97:60: 96:f4:c4:a7:25:04:56:d2:b1:72:a3:62:67:98:23:26:d4:4f: 07:60:6d:a3:fa:6a:6f:36:65:bb:2e:9f:76:7e:af:12:fa:4e: 9f:15:cb:ac:95:17:14:49:fa:7a:2e:ef:31:0b:c4:d9:ff:8b: ca:b6:e2:74:f9:73:be:bd:87:01:25:28:63:fa:88:4f:56:69: 43:ac:80:9e:da:bc:5f:64:4c:15:fc:69:9d:13:14:13:9d:85: 4f:93:c4:0c:a2:33:24:0a:4c:72:68:1c:52:de:87:b1:56:64: 7c:26:dd:b3:81:64:51:e6:4d:ca:9b:25:25:a2:4c:04:1b:34: 3f:d8:f6:2d:4d:26:da:b6:6e:6e:65:a7:da:e4:ff:4b:97:bf: d1:9f:ff:29:03:80:16:35:98:12:93:07:1b:c6:09:9f:e1:b4: 39:9b:7b:3f:2b:1a:ac:40:0c:a6:2b:ac:a1:5f:29:34:15:0f: 32:ec:5d:3a:18:f4:1c:5e:93:8e:77:d5:9c:7e:49:6a:5f:81: 32:e8:fc:61:16:fc:4f:e9:75:af:c7:42:a2:20:2d:7a:84:ed: 5d:0e:66:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19PQQyclIJNEG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjQxMDFjM2QtZGE2OS00MjAzLWE0ZTYtY2VmMTQzZjY2MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvu5eiQp4NImHsWgIETqTtHon4Y1mZjzUKTD OdhjE/Tg5omR005ZcbeNcuJgsOLJnRhqcSdgWuFKvYHIuWT3jtV0T7PJ+xw5nwpC 7b3oLO++RYpCqRETxRSU2Jy/Y75LVrksS3sM9qtBnUg1gj4PwjLuqpy5khQe2wyQ r0mPPnAKF29JyG9YLeMO2gYzTSv3Pef99MjArVJ9baxaXNq/KtK8GlhuSYDhrkkM MC8xjXjNcmgJvJNRxcz6QNZ+VqSp+ZoeUFzi7Mh8f+zt1E0D4NAK8LRpvWyEeVT4 uVMOeh/5f4xF0DT/vNYQduYeN31dnxBk/8S2B6wVL7K1PiHZxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhm+OXqJohWinmRDLAdLm2+vfjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTM5MGY2N2ItZDY5Zi0z OGM5LTgwM2ItYTM5MjhmMjk3MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqMw1hlCBsq1u5rSJQc4t/GBZf/Okl6D/VZJVfQ6f4owtuXYJb0 xKclBFbSsXKjYmeYIybUTwdgbaP6am82Zbsun3Z+rxL6Tp8Vy6yVFxRJ+nou7zEL xNn/i8q24nT5c769hwElKGP6iE9WaUOsgJ7avF9kTBX8aZ0TFBOdhU+TxAyiMyQK THJoHFLeh7FWZHwm3bOBZFHmTcqbJSWiTAQbND/Y9i1NJtq2bm5lp9rk/0uXv9Gf /ykDgBY1mBKTBxvGCZ/htDmbez8rGqxADKYrrKFfKTQVDzLsXToY9Bxek4531Zx+ SWpfgTLo/GEW/E/pda/HQqIgLXqE7V0OZu8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:18 2025 by rpki-client