$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/980e955b-444e-3ce1-bc7a-41a96c77125e.roa File: 980e955b-444e-3ce1-bc7a-41a96c77125e.roa (raw, json) Hash identifier: zRCElfO8THJtM6xyG35BNWYapkN5XzBotob87nyPl10= Subject key identifier: 3E:B5:7B:96:3F:F1:76:5C:0F:98:CE:9B:39:87:9F:CB:C0:8F:85:4E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F124E6BA7497D8B9CEC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/980e955b-444e-3ce1-bc7a-41a96c77125e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6718 IP address blocks: 2001:470:22f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f1:24:e6:ba:74:97:d8:b9:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9435f799-2230-4f35-a3ad-67bdd7bb0ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:f2:2a:91:6e:fa:00:59:64:66:1f:46:9b: 00:c0:ed:fe:a2:65:22:96:24:b1:07:db:62:af:0e: 11:ad:fb:d8:b0:d5:5a:2c:c5:4e:ec:bd:b3:70:21: 20:f9:e7:39:19:18:09:8e:76:8f:6d:95:d6:63:48: 48:34:6b:34:a4:82:d3:cc:c6:1d:d5:65:46:cf:71: 38:3c:2f:f1:90:89:d8:a9:1a:34:a3:8a:c1:be:74: dd:2c:b1:4d:db:ca:f6:d1:49:eb:ef:e9:54:b9:a0: a1:11:c3:5d:61:d7:26:ab:6e:eb:02:cc:e9:03:1b: 06:e9:7b:e3:5f:cd:d7:fd:04:a3:55:81:27:ab:39: 20:a3:57:df:a7:ae:6d:18:07:b1:58:f9:4c:8e:d6: 2d:45:be:51:f8:71:e6:a7:0c:df:29:55:f2:93:38: 6c:f7:2d:d1:2e:89:bc:25:a5:31:2a:e4:a0:ba:8d: 66:b2:54:9c:21:d2:01:46:3c:87:08:60:9b:a3:f0: 3a:bc:6c:35:34:5a:8c:0c:27:fd:88:c7:42:40:d1: 26:6a:dc:56:7e:36:1b:79:8f:b2:ba:aa:9e:68:21: 7f:b1:18:ac:d1:a3:d7:46:06:b8:30:ad:b8:ce:47: cd:e0:55:13:93:a9:d6:09:87:f1:68:6e:10:b6:54: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B5:7B:96:3F:F1:76:5C:0F:98:CE:9B:39:87:9F:CB:C0:8F:85:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/980e955b-444e-3ce1-bc7a-41a96c77125e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:4e:8e:da:0b:eb:1a:d5:af:47:d9:39:4e:45:41:91:b9:c5: 86:d7:a6:ae:28:02:02:18:81:04:62:ec:68:cc:93:a9:a5:32: d1:5d:a4:f4:fe:e5:15:5c:4c:bc:ed:6f:b3:14:85:33:51:75: ec:9c:be:25:bd:c2:16:88:47:08:6f:80:3f:db:a6:e3:28:8f: c0:18:77:91:45:6c:86:c8:34:db:0b:07:3e:95:7c:de:6c:15: 45:98:cc:6e:71:f8:fa:f2:f3:c9:be:eb:de:d2:c7:56:43:be: 7b:d7:8c:d4:e2:91:2f:ac:de:ad:75:ee:b6:08:00:28:6b:d0: db:ac:77:47:26:b4:03:8a:bb:81:d0:f0:aa:33:74:55:a0:20: 89:52:be:fe:f1:41:d9:33:e7:58:ee:83:d3:d3:e6:fc:bb:5c: ce:10:d1:36:0e:81:68:43:f3:f5:8e:f9:c7:ef:86:cd:cd:4f: 5c:b3:8f:5b:5d:52:72:05:65:ce:36:c1:a8:3e:c4:d5:93:3c: 67:50:84:3a:d5:26:4a:df:04:6d:2f:d8:0b:9d:8f:1f:53:03: ff:9a:a5:a5:99:54:94:89:01:d3:c6:93:8e:aa:92:18:bb:75: 52:28:b6:34:d1:4d:e5:17:03:75:bc:ff:62:22:10:81:61:a3: f9:50:eb:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/Ek5rp0l9i5zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTQzNWY3OTktMjIzMC00ZjM1LWEzYWQtNjdiZGQ3YmIwYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGnyKpFu+gBZZGYfRpsAwO3+omUiliSxB9ti rw4RrfvYsNVaLMVO7L2zcCEg+ec5GRgJjnaPbZXWY0hINGs0pILTzMYd1WVGz3E4 PC/xkInYqRo0o4rBvnTdLLFN28r20Unr7+lUuaChEcNdYdcmq27rAszpAxsG6Xvj X83X/QSjVYEnqzkgo1ffp65tGAexWPlMjtYtRb5R+HHmpwzfKVXykzhs9y3RLom8 JaUxKuSguo1mslScIdIBRjyHCGCbo/A6vGw1NFqMDCf9iMdCQNEmatxWfjYbeY+y uqqeaCF/sRis0aPXRga4MK24zkfN4FUTk6nWCYfxaG4QtlSfEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD61e5Y/8XZcD5jOmzmHn8vAj4VOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTgwZTk1NWItNDQ0ZS0z Y2UxLWJjN2EtNDFhOTZjNzcxMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALdOjtoL6xrVr0fZOU5FQZG5xYbXpq4oAgIYgQRi7GjMk6mlMtFd pPT+5RVcTLztb7MUhTNRdeycviW9whaIRwhvgD/bpuMoj8AYd5FFbIbINNsLBz6V fN5sFUWYzG5x+Pry88m+697Sx1ZDvnvXjNTikS+s3q117rYIAChr0Nusd0cmtAOK u4HQ8KozdFWgIIlSvv7xQdkz51jug9PT5vy7XM4Q0TYOgWhD8/WO+cfvhs3NT1yz j1tdUnIFZc42wag+xNWTPGdQhDrVJkrfBG0v2Audjx9TA/+apaWZVJSJAdPGk46q khi7dVIotjTRTeUXA3W8/2IiEIFho/lQ658= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:57 2025 by rpki-client