$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa File: cdfb66e4-27c6-35c1-8af5-d00d02307131.roa (raw, json) Hash identifier: mS+ulHwvM1CnqfWu2P3lA4bt3jjzCKXge2i8128cwPA= Subject key identifier: F8:53:DC:3E:56:CD:AF:E0:6A:6D:DF:0C:F8:3D:91:99:ED:00:0E:CC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C79148620326C98667A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398357 IP address blocks: 2001:470:1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c7:91:48:62:03:26:c9:86:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2954ecfa-43ad-4e47-90c9-15f566f6a892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:67:00:61:20:84:23:01:fa:7f:24:07:26: 6e:f3:75:2c:22:9e:ac:a7:93:e2:20:ce:20:f1:47: ea:64:48:96:4b:b3:f7:9f:c9:3b:3a:cd:21:d4:0b: 5b:11:35:cb:80:38:3d:f3:be:ff:78:16:49:17:42: ed:37:94:7e:12:40:3d:f1:72:a3:af:85:00:58:f5: 9b:a0:96:62:26:2e:77:24:e4:4e:ea:1b:e5:58:be: f6:b2:0f:c6:bc:01:f8:63:b6:c2:b1:1e:2c:1d:72: ee:47:01:29:9d:10:4f:21:63:6a:82:f6:ec:4e:c3: 9c:d9:b1:9b:0a:5e:8a:29:1d:ce:e0:a7:0e:ea:54: 5f:89:76:e3:10:b5:0e:be:0b:56:6c:e4:f3:b4:a3: 05:59:bd:9b:ad:ab:6f:3f:ed:30:69:2e:45:91:15: 33:9f:9c:fa:82:20:5e:4e:8b:4c:ca:c4:66:f8:0f: 7f:0b:ff:bf:d6:f3:c9:90:90:f3:ab:48:c7:af:32: 7f:fe:ed:f2:63:b3:67:9a:a3:0b:20:bc:5d:c8:e1: 80:a1:55:68:47:48:ac:54:73:12:15:1f:3a:5c:0a: 20:ba:ea:33:d1:87:aa:a6:a0:70:0c:59:a5:90:f4: 41:69:68:01:99:d7:36:6f:b3:6d:ca:a7:a0:19:b9: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:53:DC:3E:56:CD:AF:E0:6A:6D:DF:0C:F8:3D:91:99:ED:00:0E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4c:e3:2a:6c:41:d8:a3:87:35:11:d6:13:7b:22:80:4f:8c: a2:84:68:ed:0a:33:43:19:74:7e:e3:30:c0:32:54:f7:87:3d: e0:f3:22:5e:34:f7:29:0d:fe:24:27:02:78:b3:21:fd:25:78: 48:13:b4:84:a4:7b:61:0f:02:ea:31:fa:d7:1e:a2:6d:90:ab: 3d:d3:22:90:73:07:04:5f:f7:bc:5d:43:f7:4c:d1:5a:a8:d4: a2:ac:9e:0a:62:61:fc:0f:92:00:a7:e8:ac:87:30:5d:8c:a8: df:7b:ad:b9:59:72:0d:74:49:25:49:35:4d:04:d1:bf:eb:bb: 0a:f5:36:4b:f1:80:39:93:f1:2a:c0:b2:47:87:66:25:fe:bc: 2a:a3:45:42:da:c6:d0:42:4b:5f:23:d6:c0:d3:65:08:19:12: cd:96:ae:ca:09:63:b6:de:f1:02:80:fe:a3:90:30:7f:94:13: 51:54:fc:99:48:ce:78:4b:58:26:bf:c5:42:65:39:f2:09:3f: f3:d2:6d:0d:03:2e:18:56:d2:cf:78:66:f3:53:9e:1b:e3:f9: 71:80:12:bf:0a:3f:62:11:b4:a1:c4:00:55:30:b9:c3:6b:6e: 62:e8:4d:0b:88:94:6c:e6:aa:0a:e0:fd:48:8e:b1:6d:68:94: a5:de:65:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18eRSGIDJsmGZ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Mjk1NGVjZmEtNDNhZC00ZTQ3LTkwYzktMTVmNTY2ZjZhODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z9nAGEghCMB+n8kByZu83UsIp6sp5PiIM4g 8UfqZEiWS7P3n8k7Os0h1AtbETXLgDg9877/eBZJF0LtN5R+EkA98XKjr4UAWPWb oJZiJi53JORO6hvlWL72sg/GvAH4Y7bCsR4sHXLuRwEpnRBPIWNqgvbsTsOc2bGb Cl6KKR3O4KcO6lRfiXbjELUOvgtWbOTztKMFWb2bratvP+0waS5FkRUzn5z6giBe TotMysRm+A9/C/+/1vPJkJDzq0jHrzJ//u3yY7NnmqMLILxdyOGAoVVoR0isVHMS FR86XAoguuoz0YeqpqBwDFmlkPRBaWgBmdc2b7NtyqegGbmL5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhT3D5Wza/gam3fDPg9kZntAA7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RmYjY2ZTQtMjdjNi0z NWMxLThhZjUtZDAwZDAyMzA3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBM4ypsQdijhzUR1hN7IoBPjKKEaO0KM0MZdH7jMMAyVPeHPeDz Il409ykN/iQnAnizIf0leEgTtISke2EPAuox+tceom2Qqz3TIpBzBwRf97xdQ/dM 0Vqo1KKsngpiYfwPkgCn6KyHMF2MqN97rblZcg10SSVJNU0E0b/ruwr1NkvxgDmT 8SrAskeHZiX+vCqjRULaxtBCS18j1sDTZQgZEs2WrsoJY7be8QKA/qOQMH+UE1FU /JlIznhLWCa/xUJlOfIJP/PSbQ0DLhhW0s94ZvNTnhvj+XGAEr8KP2IRtKHEAFUw ucNrbmLoTQuIlGzmqgrg/UiOsW1olKXeZZc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:21 2025 by rpki-client