$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa File: d005338b-0108-318a-9989-f9d35f20ee23.roa (raw, json) Hash identifier: b5t88OyMN1n9DGYirc9lfrDMCfrrCRAYVZAI4EFjkgQ= Subject key identifier: CB:1B:C3:1E:40:16:16:50:08:F2:64:AA:E5:71:C3:BD:D0:80:D8:7B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7B623CB63B2DE7AE03060 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 11255 IP address blocks: 2001:470:b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b6:23:cb:63:b2:de:7a:e0:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6643d55c-729e-4e2d-b28a-26e66bc07fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:d5:ee:b8:f3:96:d4:3f:b2:33:47:14:ee: 44:47:1e:1b:98:e5:fb:2f:48:04:c1:09:1a:1c:eb: f6:f2:7c:57:51:49:42:b7:60:b0:92:e2:11:2d:fa: 20:b3:7d:a4:92:60:79:9f:ae:84:c7:af:67:97:3c: a6:67:da:0e:f6:cf:39:89:ca:ea:eb:96:4f:33:30: 76:05:b4:61:67:42:71:27:cf:45:25:02:76:81:4c: b8:66:60:ac:f6:d1:df:b6:60:12:7b:3a:d4:90:50: f5:10:d1:05:cd:32:dd:10:d8:fd:c0:f6:82:00:9f: 6d:9c:4a:87:7b:0d:1c:3f:57:2c:1b:2d:4a:78:8e: ca:14:e7:c5:1d:7e:a7:be:47:5d:dd:13:d5:e4:ae: b1:66:30:6f:10:2a:f9:6c:c3:e9:a2:21:df:bf:13: ba:ea:da:bb:7a:18:37:1c:b1:e6:ee:26:a5:65:77: b4:72:05:0d:19:9d:eb:d1:a0:a4:c5:15:4a:fd:60: d0:cd:c9:26:3d:b5:f2:7e:43:f5:b3:1c:df:5d:6b: 50:e1:53:1a:e5:5a:15:ff:9e:45:f1:cf:21:f0:2d: 00:4f:d1:88:7f:73:0b:22:47:5f:f3:c1:ce:5b:ca: c3:af:ff:75:86:fa:74:df:1e:ff:ab:c3:09:7c:bb: a3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:C3:1E:40:16:16:50:08:F2:64:AA:E5:71:C3:BD:D0:80:D8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:15:65:0a:f3:86:cf:92:f3:d8:d6:b9:a0:53:16:62:21:bb: 55:78:3e:4e:21:18:4e:f2:b8:85:17:7f:34:5f:75:1e:91:eb: ef:28:61:02:4a:71:f9:2a:d4:aa:f1:23:19:e6:67:03:c9:00: ed:e6:57:8e:87:13:cd:da:77:a3:66:90:46:13:f6:c9:54:ef: 2a:66:65:1c:80:48:4b:5b:e7:bd:d6:09:0f:45:31:ac:d8:e9: af:b0:1a:f6:a9:17:8b:98:eb:91:0c:ca:24:a7:c0:5b:af:6e: d4:6c:21:68:16:b5:05:06:17:90:8a:7f:cd:ae:26:38:9c:84: 6e:bb:78:78:f0:93:69:45:8c:32:bf:c0:b8:d5:8e:42:1a:9f: 12:b9:5c:9d:ba:80:e1:62:b5:ad:11:19:e5:a7:ea:e2:1a:7a: 76:76:99:74:27:04:1d:ba:09:c7:b0:6d:f1:7c:47:f6:28:81: c5:c7:a7:e7:6c:44:26:9a:eb:e8:5b:4d:4e:20:7d:df:67:3e: a6:8f:73:a4:fc:42:bd:75:ad:b1:f2:cf:98:d9:dd:0f:5f:38: f3:ce:d2:9a:e1:8f:3e:37:b8:b7:89:23:4f:4e:1a:12:18:48: d9:55:a6:70:85:13:fc:e0:f9:6e:c9:c3:92:e4:be:d9:fc:4c: 20:1b:95:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17Yjy2Oy3nrgMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjY0M2Q1NWMtNzI5ZS00ZTJkLWIyOGEtMjZlNjZiYzA3ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ADV7rjzltQ/sjNHFO5ERx4bmOX7L0gEwQka HOv28nxXUUlCt2CwkuIRLfogs32kkmB5n66Ex69nlzymZ9oO9s85icrq65ZPMzB2 BbRhZ0JxJ89FJQJ2gUy4ZmCs9tHftmASezrUkFD1ENEFzTLdENj9wPaCAJ9tnEqH ew0cP1csGy1KeI7KFOfFHX6nvkdd3RPV5K6xZjBvECr5bMPpoiHfvxO66tq7ehg3 HLHm7ialZXe0cgUNGZ3r0aCkxRVK/WDQzckmPbXyfkP1sxzfXWtQ4VMa5VoV/55F 8c8h8C0AT9GIf3MLIkdf88HOW8rDr/91hvp03x7/q8MJfLujZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsbwx5AFhZQCPJkquVxw73QgNh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNTMzOGItMDEwOC0z MThhLTk5ODktZjlkMzVmMjBlZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkVZQrzhs+S89jWuaBTFmIhu1V4Pk4hGE7yuIUXfzRfdR6R6+8o YQJKcfkq1KrxIxnmZwPJAO3mV46HE83ad6NmkEYT9slU7ypmZRyASEtb573WCQ9F MazY6a+wGvapF4uY65EMyiSnwFuvbtRsIWgWtQUGF5CKf82uJjichG67eHjwk2lF jDK/wLjVjkIanxK5XJ26gOFita0RGeWn6uIaenZ2mXQnBB26CcewbfF8R/YogcXH p+dsRCaa6+hbTU4gfd9nPqaPc6T8Qr11rbHyz5jZ3Q9fOPPO0prhjz43uLeJI09O GhIYSNlVpnCFE/zg+W7Jw5Lkvtn8TCAbld8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:59 2025 by rpki-client