$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa File: c2350e38-16a2-3e40-a213-1d8f24f3661c.roa (raw, json) Hash identifier: 1X+MUsVtXjefqmL/2N3DcT7XZ7hWlmr5IcrUpf+9pXY= Subject key identifier: 6E:5F:07:89:ED:D8:3B:D8:DA:02:61:7D:2E:2E:E0:DF:2E:78:35:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB1927672D006DF81BF155C40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 6698 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:72:d0:06:df:81:bf:15:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=b2e23eb0-29b7-4d3f-a91b-fb35c8ffffb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:9a:cf:6f:23:a1:1f:88:be:6a:09:99:e4: 0b:52:07:cf:bf:94:ae:26:f0:b6:87:90:6b:95:7a: ff:08:e8:2b:2d:d2:c8:ec:0e:e0:e7:68:9c:2d:10: 39:a6:7e:bf:ed:30:26:e3:62:21:be:3b:67:ed:e1: 53:ab:43:9f:b7:ec:97:3b:e4:b0:10:65:3d:34:e9: 41:22:4d:70:cd:1d:83:d2:bd:81:65:fb:98:6c:71: 6c:24:49:58:01:cb:df:2a:c5:0e:f5:b1:bf:b5:1b: 88:5b:19:a4:29:85:51:ca:6f:85:1a:14:54:fa:cb: c6:3b:d8:1d:6c:ab:c0:0f:72:59:02:13:b0:83:53: 0e:9b:b4:09:1f:5d:b2:60:ac:38:df:95:74:73:f1: db:32:dd:3a:59:4a:cd:a2:a8:3f:c4:44:c7:11:07: 6b:ad:5e:b1:00:b8:05:cf:ab:4a:12:df:de:8b:f0: e6:de:66:01:44:cf:2d:d7:62:07:48:02:06:e6:65: 23:33:48:30:6e:95:d8:1d:6e:52:3f:8b:32:40:dd: 82:68:59:b1:6c:c1:83:40:1a:e6:11:48:58:fc:b5: c3:ef:7d:4e:1f:50:27:a3:57:2a:98:8e:62:4b:5f: 82:6a:a0:9d:04:7a:3e:10:74:e4:2a:28:7f:d4:9b: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:07:89:ED:D8:3B:D8:DA:02:61:7D:2E:2E:E0:DF:2E:78:35:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2350e38-16a2-3e40-a213-1d8f24f3661c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:69:35:c2:44:69:17:01:79:6a:c9:c8:24:fa:0e:cd:f9:31: ba:48:54:6f:a4:14:84:c5:52:71:f0:39:1f:0e:19:ab:cc:4a: fb:fa:d8:3e:2d:83:44:df:85:6f:60:25:1c:c8:68:21:c6:75: 5d:b4:0e:d2:8a:00:4f:35:2a:f2:aa:13:56:26:73:b3:6f:09: d7:bf:a4:0d:a9:31:98:e0:e1:01:19:a0:45:2a:8b:26:af:f1: 28:0a:43:e8:73:d5:ec:97:a7:9e:55:aa:7d:01:39:b5:4a:27: 45:3e:f6:c7:c4:3a:12:b2:73:84:93:75:b9:87:e8:3a:3f:58: 01:44:ad:27:83:fd:b8:bb:18:85:c5:6a:2f:98:d6:65:a0:17: a5:a9:29:5b:d1:6a:73:5f:64:a2:ba:5a:81:29:29:25:6b:e6: 8a:96:5f:d6:2c:91:87:20:9d:70:ff:c1:cc:3b:4f:8e:e7:df: 1c:aa:e3:ee:13:aa:d5:1d:20:7c:ac:d7:f9:e5:6f:af:13:2c: 07:34:e4:a5:c3:e1:7a:ce:ec:37:2a:be:ca:68:ea:07:58:a9: 15:70:54:00:74:70:5a:16:05:1f:eb:4a:1d:99:6a:b1:9b:14: 9e:0c:77:f2:67:e9:66:e0:1a:e9:04:a8:b9:ca:2f:11:64:c5: 42:00:20:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxknZy0Abfgb8VXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YjJlMjNlYjAtMjliNy00ZDNmLWE5MWItZmIzNWM4ZmZmZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI2az28joR+IvmoJmeQLUgfPv5SuJvC2h5Br lXr/COgrLdLI7A7g52icLRA5pn6/7TAm42Ihvjtn7eFTq0Oft+yXO+SwEGU9NOlB Ik1wzR2D0r2BZfuYbHFsJElYAcvfKsUO9bG/tRuIWxmkKYVRym+FGhRU+svGO9gd bKvAD3JZAhOwg1MOm7QJH12yYKw435V0c/HbMt06WUrNoqg/xETHEQdrrV6xALgF z6tKEt/ei/Dm3mYBRM8t12IHSAIG5mUjM0gwbpXYHW5SP4syQN2CaFmxbMGDQBrm EUhY/LXD731OH1Ano1cqmI5iS1+CaqCdBHo+EHTkKih/1JvsUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG5fB4nt2DvY2gJhfS4u4N8ueDWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzIzNTBlMzgtMTZhMi0z ZTQwLWEyMTMtMWQ4ZjI0ZjM2NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABppNcJEaRcBeWrJyCT6Ds35MbpIVG+kFITFUnHwOR8OGavMSvv6 2D4tg0TfhW9gJRzIaCHGdV20DtKKAE81KvKqE1Ymc7NvCde/pA2pMZjg4QEZoEUq iyav8SgKQ+hz1eyXp55Vqn0BObVKJ0U+9sfEOhKyc4STdbmH6Do/WAFErSeD/bi7 GIXFai+Y1mWgF6WpKVvRanNfZKK6WoEpKSVr5oqWX9YskYcgnXD/wcw7T47n3xyq 4+4TqtUdIHys1/nlb68TLAc05KXD4XrO7Dcqvspo6gdYqRVwVAB0cFoWBR/rSh2Z arGbFJ4Md/Jn6WbgGukEqLnKLxFkxUIAIEw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:27 2025 by rpki-client