$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa File: a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa (raw, json) Hash identifier: CgJPkevjgNkUHhUHG38kzbbLU0LpDL3ly7GKoVgaIdE= Subject key identifier: 79:F2:B3:26:D8:F7:48:FB:7E:09:FF:BC:70:89:15:2E:05:C1:75:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F5C08F672754B0BD0800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 3255 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f5:c0:8f:67:27:54:b0:bd:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b232712a-e2bb-42af-b445-fe87d94684b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:51:04:6c:03:ea:c9:01:e7:a8:24:5b:46: c4:bf:97:91:e6:d6:53:e6:86:e0:50:43:d4:7d:d4: c6:f1:a6:9d:25:62:77:22:ca:69:48:13:7b:00:cc: b3:c0:5f:34:97:63:8d:c8:b8:41:ef:a6:85:f7:8b: cc:2f:e6:6c:e5:c0:56:3c:57:2a:93:b5:c3:50:0c: d9:07:a5:e0:15:80:ba:62:1e:cf:d4:87:79:8a:b6: bd:a9:78:e8:48:ad:ce:3b:46:bd:49:58:e1:5b:1d: 92:5d:3d:4f:c2:b2:1f:95:ed:21:4a:06:03:d4:4c: f4:03:c8:0c:e0:ee:f7:1b:0e:23:87:71:72:ae:ed: 9b:48:8a:cc:91:92:0e:ce:e5:ac:27:b1:5e:d1:20: 89:81:9a:98:21:d6:b6:d1:4b:22:a7:07:91:4d:0d: c4:ca:9d:35:5b:b2:44:cb:f4:9f:74:79:7f:9a:ca: 97:8e:9d:76:15:8b:71:3d:5d:dd:3c:5e:94:26:2d: 82:af:5f:ee:7d:1a:04:10:cf:a4:67:c6:c0:89:b7: a1:d8:4e:74:45:21:ad:bf:36:5a:e6:3f:2b:36:1a: c7:0b:82:6e:1f:80:a4:70:cf:1e:0d:20:3a:7a:1c: d5:04:ae:b3:8d:cb:6e:69:3d:fd:fb:75:03:ee:d7: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F2:B3:26:D8:F7:48:FB:7E:09:FF:BC:70:89:15:2E:05:C1:75:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d7:50:f4:9d:cf:76:38:17:4e:55:d6:7d:e9:8e:50:ef:ee: 7c:25:2e:ff:a5:2a:a0:4c:39:fa:cd:82:d5:ca:be:2f:ee:ae: 2d:cc:12:3b:92:5a:3b:5e:bc:5b:f0:7f:42:cc:ed:0a:89:39: e9:f4:c4:62:1a:ea:ea:b2:27:32:3f:83:1c:cd:c4:19:b5:b5: 41:bb:d5:5c:d6:d2:a3:bc:dd:5c:88:bf:6d:9e:78:f6:b9:d4: 57:6f:19:96:88:79:3a:f1:ba:f9:ca:a5:5b:43:49:43:cd:27: 0e:64:e2:f4:80:cb:ff:ae:ec:0c:9c:db:41:68:ab:f1:16:12: 03:fe:ae:99:07:41:f3:ad:3f:44:af:ec:0f:b2:ab:bb:46:b7: f1:28:65:33:fa:8d:cf:87:f7:67:10:80:da:89:2f:59:87:a5: 44:4c:fa:b3:f4:fc:e0:8e:2f:58:56:ef:74:67:e3:c8:b9:d3: fe:79:41:40:6e:04:1a:9c:d8:02:80:ec:41:51:1d:e7:23:f2: 77:0f:72:4e:cd:0f:69:2a:eb:ca:58:71:fc:ed:73:f6:7e:33: ee:5c:ac:6a:07:0c:ae:15:7a:1c:0f:6f:b5:9b:45:c0:76:40: f6:6b:64:79:1c:fe:06:2a:53:b5:54:5a:4a:81:c3:17:af:ac: c1:15:55:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/XAj2cnVLC9CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjIzMjcxMmEtZTJiYi00MmFmLWI0NDUtZmU4N2Q5NDY4NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKZRBGwD6skB56gkW0bEv5eR5tZT5obgUEPU fdTG8aadJWJ3IsppSBN7AMyzwF80l2ONyLhB76aF94vML+Zs5cBWPFcqk7XDUAzZ B6XgFYC6Yh7P1Id5ira9qXjoSK3OO0a9SVjhWx2SXT1PwrIfle0hSgYD1Ez0A8gM 4O73Gw4jh3Fyru2bSIrMkZIOzuWsJ7Fe0SCJgZqYIda20UsipweRTQ3Eyp01W7JE y/SfdHl/msqXjp12FYtxPV3dPF6UJi2Cr1/ufRoEEM+kZ8bAibeh2E50RSGtvzZa 5j8rNhrHC4JuH4CkcM8eDSA6ehzVBK6zjctuaT39+3UD7tdGywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnysybY90j7fgn/vHCJFS4FwXV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBmN2JlNjgtNjhkMy0z YmQxLWEyYWMtODdiOTY5NGVjNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfXUPSdz3Y4F05V1n3pjlDv7nwlLv+lKqBMOfrNgtXKvi/uri3M EjuSWjtevFvwf0LM7QqJOen0xGIa6uqyJzI/gxzNxBm1tUG71VzW0qO83VyIv22e ePa51FdvGZaIeTrxuvnKpVtDSUPNJw5k4vSAy/+u7Ayc20Foq/EWEgP+rpkHQfOt P0Sv7A+yq7tGt/EoZTP6jc+H92cQgNqJL1mHpURM+rP0/OCOL1hW73Rn48i50/55 QUBuBBqc2AKA7EFRHecj8ncPck7ND2kq68pYcfztc/Z+M+5crGoHDK4VehwPb7Wb RcB2QPZrZHkc/gYqU7VUWkqBwxevrMEVVYk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:56 2025 by rpki-client