$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa File: a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa (raw, json) Hash identifier: yHEZMzL4iUdL1xjsKrnVm9vbnr5Mw8a59l8tyZCvFi4= Subject key identifier: 54:20:4E:AA:B9:FF:B7:24:CA:54:BB:4C:11:8B:25:50:C2:04:87:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CA472D3CB2A89F7F6860 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398538 IP address blocks: 2001:470:201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ca:47:2d:3c:b2:a8:9f:7f:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4ba53794-669e-431d-8f26-973983a31856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:ff:88:1f:ed:95:48:d2:4f:8c:87:3f:b4: 1c:76:5d:d3:c5:59:b3:cd:f9:70:a0:49:ff:c4:0e: 9f:61:dc:7b:20:3a:fe:04:c9:44:74:15:77:83:01: 02:c6:b7:79:51:99:d2:7f:9a:8f:28:55:e4:64:cd: f6:c5:1d:e8:eb:c0:7d:b5:de:95:f5:df:8c:5f:ac: cb:a0:98:8f:2c:ac:09:31:fb:97:80:a3:c9:ac:63: 77:ca:c6:ed:de:fb:6d:ed:a5:fa:fb:87:e9:8c:25: 8b:4b:95:82:14:e5:85:07:73:97:e5:9d:ea:56:8c: 26:46:4c:3a:23:40:4d:41:67:e9:9f:0d:bf:0f:05: 21:2f:d9:5b:41:57:7b:d5:59:be:34:03:8d:d7:32: 35:7b:88:2c:32:d3:46:1f:55:10:08:ac:83:b1:1b: 84:66:00:6e:9a:2a:98:96:c7:a5:09:42:8d:41:79: 98:f8:32:e3:ad:b7:52:0a:1e:40:80:89:36:db:1f: e0:5a:4a:9f:06:ff:14:bd:20:a0:fc:38:bc:5e:8c: e0:aa:b6:ec:f6:c4:7f:5c:b8:23:7a:44:4b:35:8b: e1:54:13:a1:91:f4:1a:8a:18:2d:a1:fe:32:c1:c7: 55:b0:dc:4c:ec:20:4a:d8:c5:0c:73:50:71:02:b6: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:4E:AA:B9:FF:B7:24:CA:54:BB:4C:11:8B:25:50:C2:04:87:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a40791d7-fba6-378d-bdd1-e69e8fbdf2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:25:1e:70:6e:a6:aa:f2:e6:36:f5:06:93:54:b9:96:39:a5: 4d:3e:44:55:51:12:80:38:13:a1:7c:79:a2:d9:1f:bc:4d:0b: 84:05:3c:34:dd:5f:b7:49:39:e6:14:d4:d8:1b:d2:6e:01:6b: 5a:e1:8d:db:37:39:cf:74:15:09:72:1d:94:6b:63:7d:6d:28: e7:3d:38:15:9f:e4:bd:c4:fb:96:3f:62:6c:09:cd:e0:3e:fe: 8d:3c:ac:d0:ec:ce:df:02:bf:be:a2:a6:93:f3:81:e8:8c:e5: e1:1b:30:7f:ad:b6:0b:6f:eb:64:46:96:ef:4f:ef:0a:9e:25: 79:0e:ca:cc:6d:9d:b1:8c:66:59:77:e2:5c:75:67:38:20:df: e3:15:6b:86:98:78:e7:da:fa:38:5e:00:78:f8:c9:18:06:e6: cf:a2:82:d1:cb:86:40:a0:7c:48:31:3e:47:68:4d:bf:67:bf: 57:6b:24:bc:92:e2:9e:58:da:28:7a:b2:04:85:97:bc:35:f2: f4:80:07:29:1b:19:85:6a:24:9a:1f:22:23:a7:d3:6c:d3:57: e5:e1:e7:3a:1a:0c:43:e5:21:05:6e:74:aa:a2:90:92:8f:91: 62:03:ea:8f:c0:c0:9a:20:9d:e0:aa:41:50:ec:53:a4:21:8c: f1:0b:9c:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18pHLTyyqJ9/aGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NGJhNTM3OTQtNjY5ZS00MzFkLThmMjYtOTczOTgzYTMxODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqT/iB/tlUjST4yHP7Qcdl3TxVmzzflwoEn/ xA6fYdx7IDr+BMlEdBV3gwECxrd5UZnSf5qPKFXkZM32xR3o68B9td6V9d+MX6zL oJiPLKwJMfuXgKPJrGN3ysbt3vtt7aX6+4fpjCWLS5WCFOWFB3OX5Z3qVowmRkw6 I0BNQWfpnw2/DwUhL9lbQVd71Vm+NAON1zI1e4gsMtNGH1UQCKyDsRuEZgBumiqY lselCUKNQXmY+DLjrbdSCh5AgIk22x/gWkqfBv8UvSCg/Di8Xozgqrbs9sR/XLgj ekRLNYvhVBOhkfQaihgtof4ywcdVsNxM7CBK2MUMc1BxArbSdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQgTqq5/7ckylS7TBGLJVDCBIdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQwNzkxZDctZmJhNi0z NzhkLWJkZDEtZTY5ZThmYmRmMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHslHnBupqry5jb1BpNUuZY5pU0+RFVREoA4E6F8eaLZH7xNC4QF PDTdX7dJOeYU1Ngb0m4Ba1rhjds3Oc90FQlyHZRrY31tKOc9OBWf5L3E+5Y/YmwJ zeA+/o08rNDszt8Cv76ippPzgeiM5eEbMH+ttgtv62RGlu9P7wqeJXkOysxtnbGM Zll34lx1Zzgg3+MVa4aYeOfa+jheAHj4yRgG5s+igtHLhkCgfEgxPkdoTb9nv1dr JLyS4p5Y2ih6sgSFl7w18vSABykbGYVqJJofIiOn02zTV+Xh5zoaDEPlIQVudKqi kJKPkWID6o/AwJogneCqQVDsU6QhjPELnOM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:38 2025 by rpki-client