$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1854ee4-af34-3785-acbb-da8e2aa55e68.roa File: c1854ee4-af34-3785-acbb-da8e2aa55e68.roa (raw, json) Hash identifier: jiYCAwQoyxQNXYQYtATsafbpd9Xc4Wf8iWHdk4BSPvQ= Subject key identifier: 20:8B:8B:15:70:19:28:B6:BD:A5:14:0C:E2:85:14:19:E1:F5:4F:D4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7B7FFC359E664E2DD1480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1854ee4-af34-3785-acbb-da8e2aa55e68.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14426 IP address blocks: 2001:470:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b7:ff:c3:59:e6:64:e2:dd:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1751b25b-af05-4305-a8fa-6094f1a81b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:93:f5:94:df:f3:dd:a2:0d:fc:b4:2a:a8: d7:52:dd:3f:4a:78:90:05:71:d4:01:b5:a8:f3:2b: 8c:18:70:a1:c6:6b:5a:37:26:6b:ca:a7:9a:b0:97: c5:92:18:7b:10:84:e1:5f:83:af:34:64:cd:46:88: 31:90:38:d0:36:f2:f0:b7:cc:4c:42:ef:33:d6:85: 7c:d7:ba:11:fd:cd:a4:3a:2b:e0:64:ac:1b:ec:e3: 9f:7f:03:7a:86:4e:c5:1b:93:3b:49:89:fa:e8:92: 02:21:99:29:bf:6e:99:97:f3:86:3d:88:43:64:ac: 94:b7:0f:b0:89:f5:90:c9:32:b0:7c:c0:e3:b8:eb: 1d:3f:2f:3a:f9:80:0b:00:11:30:a1:b1:94:a1:2d: 5e:a2:be:f8:a0:2e:ef:ba:db:a4:ea:a2:07:8e:8c: a6:46:3a:7f:02:12:14:be:28:df:56:3f:f4:2f:f6: 0a:4a:36:ad:f9:f5:2b:2f:55:be:ae:71:f9:38:03: 6d:62:6e:5e:b7:94:e8:02:76:c1:76:cc:e2:b9:7f: f2:ef:cf:8a:2a:1e:b7:80:d7:5b:d4:d8:c0:23:47: 68:ef:04:a0:cc:15:8b:e1:5b:87:9c:12:88:f9:b4: 5c:b7:d3:a1:78:64:77:d6:d4:2d:02:9c:68:68:e1: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:8B:15:70:19:28:B6:BD:A5:14:0C:E2:85:14:19:E1:F5:4F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1854ee4-af34-3785-acbb-da8e2aa55e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:cd:42:a2:f5:15:92:e9:d8:c9:e8:e9:a9:87:17:7f:c7:08: 6a:6b:69:bf:e9:89:4b:75:25:87:18:1e:30:18:77:0e:ff:df: 54:30:d6:a6:08:ce:eb:30:c1:5e:c5:eb:fc:64:b7:04:ad:d7: 89:f8:1a:26:18:fb:4f:69:79:19:f8:01:ad:72:14:83:41:58: 30:1e:bf:1d:9c:ed:73:b9:87:18:6f:2a:19:7e:4d:f8:24:56: 97:0f:24:3f:89:53:bf:e1:cd:45:65:af:18:28:83:ad:64:a7: ff:db:bb:82:48:75:bd:c3:62:af:3d:bb:8e:96:17:4e:32:a3: 13:de:f9:46:a8:7f:31:d6:fd:bb:d1:bb:e4:a0:6e:36:b0:8e: 98:fc:7e:b1:1c:66:75:13:ca:40:37:b2:1c:c5:87:8e:c3:15: 4b:72:28:91:20:76:21:b1:b0:f4:79:07:c8:82:6b:77:23:49: cc:f5:32:84:b6:43:19:5e:d2:94:97:17:2b:6c:c8:ee:d9:44: a1:85:7b:3b:68:48:15:9d:31:f2:20:65:7a:98:6e:6e:50:60: 5e:4b:25:2f:99:d3:0d:26:02:95:2e:3a:0f:bd:fb:1e:cb:b8: 96:9e:d1:83:f2:04:d2:69:17:fb:b1:f5:e7:9d:78:e4:9f:1a: 06:ae:7d:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17f/w1nmZOLdFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTc1MWIyNWItYWYwNS00MzA1LWE4ZmEtNjA5NGYxYTgxYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbST9ZTf892iDfy0KqjXUt0/SniQBXHUAbWo 8yuMGHChxmtaNyZryqeasJfFkhh7EIThX4OvNGTNRogxkDjQNvLwt8xMQu8z1oV8 17oR/c2kOivgZKwb7OOffwN6hk7FG5M7SYn66JICIZkpv26Zl/OGPYhDZKyUtw+w ifWQyTKwfMDjuOsdPy86+YALABEwobGUoS1eor74oC7vutuk6qIHjoymRjp/AhIU vijfVj/0L/YKSjat+fUrL1W+rnH5OANtYm5et5ToAnbBdsziuX/y78+KKh63gNdb 1NjAI0do7wSgzBWL4VuHnBKI+bRct9OheGR31tQtApxoaOGPrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCLixVwGSi2vaUUDOKFFBnh9U/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzE4NTRlZTQtYWYzNC0z Nzg1LWFjYmItZGE4ZTJhYTU1ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALjNQqL1FZLp2Mno6amHF3/HCGprab/piUt1JYcYHjAYdw7/31Qw 1qYIzuswwV7F6/xktwSt14n4GiYY+09peRn4Aa1yFINBWDAevx2c7XO5hxhvKhl+ TfgkVpcPJD+JU7/hzUVlrxgog61kp//bu4JIdb3DYq89u46WF04yoxPe+UaofzHW /bvRu+Sgbjawjpj8frEcZnUTykA3shzFh47DFUtyKJEgdiGxsPR5B8iCa3cjScz1 MoS2Qxle0pSXFytsyO7ZRKGFeztoSBWdMfIgZXqYbm5QYF5LJS+Z0w0mApUuOg+9 +x7LuJae0YPyBNJpF/ux9eedeOSfGgaufZw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:12 2025 by rpki-client