$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa File: 9482ce06-338e-3ced-92c2-54a0db92c001.roa (raw, json) Hash identifier: EeM06UkRJ6Zq9notYo2DSre62Y5rlGIyvZxAeE/wVlQ= Subject key identifier: CB:A3:3F:41:3B:0D:E6:92:42:D5:C1:4A:8E:0B:FC:61:AF:C6:0A:2E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB19267BA1D425808D272E140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 3925 IP address blocks: 2001:470:38f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:67:ba:1d:42:58:08:d2:72:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=92ea1a8a-1e44-42c6-b121-031b13b1cb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:12:8b:4e:bd:bd:cc:68:b9:39:e0:21:23: 80:68:4b:0e:b2:86:21:6a:5c:09:d1:41:de:72:fe: 06:73:dc:a4:a4:25:63:e1:db:ca:4d:77:f6:bb:9c: 7e:31:01:ad:ca:37:a1:a1:3a:bc:eb:0c:62:f0:12: 1a:6c:8a:b8:7b:ad:06:75:10:ef:11:de:71:5b:c2: e0:52:26:a7:3b:9b:74:a3:da:7d:ab:71:31:40:b9: 46:fb:67:e5:e5:9d:3d:e1:1b:bb:58:5d:d9:f1:96: 43:c0:fd:f6:4b:de:87:06:89:c4:59:13:76:6f:48: 8b:35:ff:ae:f5:01:e5:0e:53:95:ee:73:96:38:79: 0b:bb:d3:c6:57:59:85:c0:4f:bc:e0:7c:80:62:06: c5:da:64:8a:97:c3:6f:62:8e:be:6d:31:cc:63:26: 61:18:7c:eb:d6:47:41:70:59:6c:ae:02:31:82:18: b1:68:a0:94:d1:2c:1e:59:d3:3c:6f:0f:c9:13:2d: 4f:ca:62:00:14:68:8c:88:b7:04:c3:6f:47:f3:ff: c5:85:14:de:2f:f4:68:1f:85:74:e1:ca:4a:5c:8d: 5f:a3:e2:6e:e4:ca:a9:33:c7:4d:a1:d7:31:06:de: bb:c7:42:dc:56:4f:78:49:88:50:e8:ec:ab:a3:6d: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:3F:41:3B:0D:E6:92:42:D5:C1:4A:8E:0B:FC:61:AF:C6:0A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9482ce06-338e-3ced-92c2-54a0db92c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c4:fb:06:75:db:8c:15:47:eb:ee:d8:90:59:10:34:f1:db: 05:96:55:65:e4:26:03:2c:5a:c3:54:25:5b:a8:d5:0b:4b:4e: 1f:ab:db:94:9a:78:c2:9a:aa:8f:56:88:c2:89:88:34:41:6c: b6:0d:08:48:66:65:01:1f:ba:6a:26:c7:77:70:08:b2:d0:75: 55:d1:92:d9:7b:cf:ba:66:7c:36:02:00:e1:ce:40:31:4f:e3: 71:54:6b:48:43:7f:f6:54:15:be:da:d0:de:ab:22:70:65:1a: c4:59:20:4c:8b:43:7e:42:2a:5d:65:2b:e1:2c:9d:12:95:43: 0d:29:48:5f:42:ea:36:55:d0:72:2f:2c:8f:41:ce:a8:85:9c: ba:a2:e9:5c:5d:05:5f:15:f3:66:da:ae:7e:c0:8f:20:37:a4: bb:44:bc:a5:a6:b9:e9:5b:37:17:52:41:77:de:ca:3c:4f:63: 4d:cf:c7:79:b1:12:b7:10:ff:0c:71:e0:b4:1c:1d:97:be:2e: 2b:dc:68:57:27:94:5f:3a:58:94:56:71:84:5d:c4:1b:6c:c4: e9:07:d7:88:01:93:31:e4:72:32:23:62:50:32:4f:72:cd:96: 7d:be:06:75:4c:09:e1:3c:4a:a4:91:ed:55:0b:cd:cd:96:0c: cd:fc:53:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkme6HUJYCNJy4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OTJlYTFhOGEtMWU0NC00MmM2LWIxMjEtMDMxYjEzYjFjYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGkSi069vcxouTngISOAaEsOsoYhalwJ0UHe cv4Gc9ykpCVj4dvKTXf2u5x+MQGtyjehoTq86wxi8BIabIq4e60GdRDvEd5xW8Lg UianO5t0o9p9q3ExQLlG+2fl5Z094Ru7WF3Z8ZZDwP32S96HBonEWRN2b0iLNf+u 9QHlDlOV7nOWOHkLu9PGV1mFwE+84HyAYgbF2mSKl8NvYo6+bTHMYyZhGHzr1kdB cFlsrgIxghixaKCU0SweWdM8bw/JEy1PymIAFGiMiLcEw29H8//FhRTeL/RoH4V0 4cpKXI1fo+Ju5MqpM8dNodcxBt67x0LcVk94SYhQ6Oyro22GPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMujP0E7DeaSQtXBSo4L/GGvxgouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTQ4MmNlMDYtMzM4ZS0z Y2VkLTkyYzItNTRhMGRiOTJjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPE+wZ124wVR+vu2JBZEDTx2wWWVWXkJgMsWsNUJVuo1QtLTh+r 25SaeMKaqo9WiMKJiDRBbLYNCEhmZQEfumomx3dwCLLQdVXRktl7z7pmfDYCAOHO QDFP43FUa0hDf/ZUFb7a0N6rInBlGsRZIEyLQ35CKl1lK+EsnRKVQw0pSF9C6jZV 0HIvLI9BzqiFnLqi6VxdBV8V82barn7AjyA3pLtEvKWmuelbNxdSQXfeyjxPY03P x3mxErcQ/wxx4LQcHZe+LivcaFcnlF86WJRWcYRdxBtsxOkH14gBkzHkcjIjYlAy T3LNln2+BnVMCeE8SqSR7VULzc2WDM38UwY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:34 2025 by rpki-client