$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa File: ae8b4cde-5136-3123-adcf-b51f1392d563.roa (raw, json) Hash identifier: 7UNPswjp9qtKd4AVSSbpamo2D2+4+PkMiAUYdCJ+B/8= Subject key identifier: DB:72:E8:78:4A:CE:C5:2F:29:51:8A:54:84:AE:C1:61:AB:C4:43:BE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CBA933DD0B042CFEE900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 61356 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cb:a9:33:dd:0b:04:2c:fe:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e0cf4cd8-0131-4d57-887a-3e084fff52f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:1f:a4:c5:3f:27:27:77:d7:ec:54:ba:d7: 80:5a:de:f6:55:03:b2:06:b4:af:a5:17:d7:cb:27: 18:a2:3e:74:e3:26:5a:16:28:28:19:44:30:d1:f6: bb:c0:9b:e3:d7:3e:9a:01:92:b9:34:4f:4f:01:1b: 2a:a5:e7:4e:a2:bf:3d:31:11:ec:cd:e9:8c:2c:56: 92:df:31:2e:a1:cd:c2:e6:7c:18:5f:61:93:9a:15: 16:d8:64:9a:9d:f0:19:30:1d:f2:22:e7:03:0b:57: e6:9b:1a:4c:97:80:9d:04:c5:27:42:b8:fd:57:d7: 16:54:c9:eb:5d:b3:25:dc:5a:b4:a5:a0:fc:74:c3: de:69:13:61:61:b0:a0:08:2e:37:67:44:09:49:b8: 72:52:75:ee:49:70:77:b5:dc:a2:9b:71:99:37:98: b6:03:9b:e3:b2:b1:ad:5b:ac:4d:bb:9e:87:05:2a: 0b:d8:f4:13:db:84:14:49:9f:a9:e9:6a:ca:a6:84: 2d:7a:88:f4:e9:f2:7e:de:85:1c:9f:e5:f9:5a:43: de:cf:bb:e2:02:57:06:42:d9:59:4f:eb:18:4a:de: 1a:7a:fb:b0:ee:b1:d7:cb:a3:89:88:2d:c0:04:f8: 32:29:5d:53:b6:1b:75:2a:38:07:0d:9f:e0:de:fd: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:E8:78:4A:CE:C5:2F:29:51:8A:54:84:AE:C1:61:AB:C4:43:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4a:40:e1:50:b6:60:5f:7e:fa:f7:0d:77:a6:a8:59:cd:7e: f7:79:b3:f1:d0:aa:04:65:0b:b7:20:36:02:7c:37:0c:ae:5f: 5d:fd:4a:73:de:51:82:3e:46:45:da:7a:50:07:a2:b2:d5:95: b8:2d:01:66:d2:e8:d9:c3:38:25:ec:7b:eb:78:27:2c:ab:bf: 6c:9a:1c:56:bc:5d:de:08:e5:dc:1b:9d:39:73:75:8d:16:5d: fe:24:2f:49:4c:e7:15:a2:da:aa:a8:b9:33:94:e8:a5:af:a2: 8b:70:a6:ef:7c:c8:ce:52:27:3a:ed:73:8f:6e:ed:4d:8c:91: d0:b2:f5:15:b8:2f:98:c5:39:25:f3:56:23:bc:bd:22:df:b1: 13:dd:e7:61:06:ec:26:36:68:45:8e:44:b8:92:3f:4b:bb:76: 08:c8:96:61:aa:3b:2c:fc:2b:4a:a0:87:df:d9:71:04:eb:db: 5d:f2:67:ef:dc:15:10:c9:15:d6:40:a1:40:04:ae:9d:65:87: 14:83:a7:3e:8e:06:29:f2:70:1e:2b:53:e3:8b:40:7b:80:f4: e7:ce:f4:bc:7c:f9:8a:09:92:13:39:f9:cd:93:d5:8e:72:12: 5b:9f:b7:97:07:a9:9e:0a:4d:b5:30:64:b2:e0:18:ce:dc:b5: 0f:23:06:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18upM90LBCz+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTBjZjRjZDgtMDEzMS00ZDU3LTg4N2EtM2UwODRmZmY1MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghgfpMU/Jyd31+xUuteAWt72VQOyBrSvpRfX yycYoj504yZaFigoGUQw0fa7wJvj1z6aAZK5NE9PARsqpedOor89MRHszemMLFaS 3zEuoc3C5nwYX2GTmhUW2GSanfAZMB3yIucDC1fmmxpMl4CdBMUnQrj9V9cWVMnr XbMl3Fq0paD8dMPeaRNhYbCgCC43Z0QJSbhyUnXuSXB3tdyim3GZN5i2A5vjsrGt W6xNu56HBSoL2PQT24QUSZ+p6WrKpoQteoj06fJ+3oUcn+X5WkPez7viAlcGQtlZ T+sYSt4aevuw7rHXy6OJiC3ABPgyKV1Ttht1KjgHDZ/g3v3cTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNty6HhKzsUvKVGKVISuwWGrxEO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWU4YjRjZGUtNTEzNi0z MTIzLWFkY2YtYjUxZjEzOTJkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBKQOFQtmBffvr3DXemqFnNfvd5s/HQqgRlC7cgNgJ8NwyuX139 SnPeUYI+RkXaelAHorLVlbgtAWbS6NnDOCXse+t4Jyyrv2yaHFa8Xd4I5dwbnTlz dY0WXf4kL0lM5xWi2qqouTOU6KWvootwpu98yM5SJzrtc49u7U2MkdCy9RW4L5jF OSXzViO8vSLfsRPd52EG7CY2aEWORLiSP0u7dgjIlmGqOyz8K0qgh9/ZcQTr213y Z+/cFRDJFdZAoUAErp1lhxSDpz6OBinycB4rU+OLQHuA9OfO9Lx8+YoJkhM5+c2T 1Y5yEluft5cHqZ4KTbUwZLLgGM7ctQ8jBvY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:28 2025 by rpki-client