$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d021286c-39a9-3a2b-8c36-71bf2519a788.roa File: d021286c-39a9-3a2b-8c36-71bf2519a788.roa (raw, json) Hash identifier: KBOPwmMn/Ku9D2Xx1cZzOPDVU5zgbjMg+BIcV0myhsA= Subject key identifier: 5A:6C:EF:D5:5E:27:27:0A:61:EE:47:A0:B3:9B:B0:B7:1A:93:FD:EF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D2729ECCBB4782F2F400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d021286c-39a9-3a2b-8c36-71bf2519a788.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 41568 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d2:72:9e:cc:bb:47:82:f2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f7aabc63-253a-4304-af19-104e2463627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:10:a0:ee:0c:e0:de:ac:de:c3:cf:0d:55: 81:a8:d4:99:5e:cb:e9:bc:60:ae:03:d8:d3:1b:3e: a4:d9:20:00:6a:06:d9:4e:24:10:00:e3:54:47:04: c7:4e:2e:12:c8:ff:dd:4b:f2:ec:be:72:d5:42:0b: a7:7c:6c:05:e6:67:ec:f8:0f:4b:9f:e0:1e:2b:39: a8:71:74:cc:13:cb:4c:b4:af:76:7b:74:92:cb:b5: 21:9d:0c:f6:7b:2e:e3:cd:23:38:69:47:ae:0a:8b: b4:12:a3:07:7f:58:ef:f5:16:28:79:46:97:a1:59: 9c:19:1b:b9:2b:99:86:8b:31:18:dc:28:18:cb:43: b2:1f:35:2f:7f:6e:6b:5c:a7:a5:c6:61:11:fe:86: a4:2a:ec:4f:3c:49:df:ea:b2:98:84:e1:c7:46:dc: 91:86:92:de:65:af:bd:c5:cd:de:12:8b:fb:97:33: 84:51:81:61:b9:d8:32:3b:1a:4d:6f:67:f9:1b:46: f4:2c:1f:4c:0b:6a:f8:f1:10:ba:4e:d0:5f:5d:f1: 45:47:76:5f:3a:fa:9c:98:fa:ed:85:43:f5:6a:f9: f6:b3:40:05:7d:0f:d4:eb:e7:98:8b:5c:76:32:77: 3a:42:50:c0:24:5e:80:01:b9:01:c2:de:02:6e:e0: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:EF:D5:5E:27:27:0A:61:EE:47:A0:B3:9B:B0:B7:1A:93:FD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d021286c-39a9-3a2b-8c36-71bf2519a788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ea:b3:44:ba:8d:9b:4e:1a:68:d8:fa:87:e7:8e:45:34:ac: 8a:1a:f2:32:89:76:da:cb:1a:36:c0:16:04:bf:dd:83:51:dd: bd:9b:83:3e:10:1c:de:20:14:35:7b:3a:a6:7c:b3:f7:ad:e1: e1:35:f0:15:7d:9c:84:df:95:76:9f:96:04:ef:bb:a5:79:c0: b7:08:97:fe:99:a1:5c:8b:32:bf:dc:13:6a:37:4f:2e:7f:2c: 00:94:c3:87:d9:4e:70:23:61:d1:cf:bc:73:d3:35:34:ad:93: c5:12:1d:63:aa:7e:29:05:4a:8c:7e:1d:ea:f7:f2:ea:40:ba: 8f:ef:41:82:90:e8:f4:d9:44:f3:7f:1b:89:82:fe:dd:3d:af: 1b:f3:e6:8e:be:60:09:56:e8:bf:be:e7:a0:de:15:6d:25:e7: 27:b8:83:0f:db:be:66:f4:7e:0d:18:a4:ae:0b:c3:f2:fc:a4: eb:cc:98:b1:f6:54:1d:c5:4b:86:26:00:8e:66:19:7a:6b:9a: af:2b:f7:d4:e5:d1:a8:fe:4a:6f:1a:20:30:b7:75:d1:5b:d2: 3d:82:c2:ae:4c:28:8b:70:ca:26:04:6c:fe:a0:c4:a9:57:67: df:9d:55:c0:c8:12:5f:5e:f8:f9:97:7a:9b:db:bd:36:2a:28: 29:2e:48:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19Jynsy7R4Ly9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjdhYWJjNjMtMjUzYS00MzA0LWFmMTktMTA0ZTI0NjM2MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyUQoO4M4N6s3sPPDVWBqNSZXsvpvGCuA9jT Gz6k2SAAagbZTiQQAONURwTHTi4SyP/dS/LsvnLVQgunfGwF5mfs+A9Ln+AeKzmo cXTME8tMtK92e3SSy7UhnQz2ey7jzSM4aUeuCou0EqMHf1jv9RYoeUaXoVmcGRu5 K5mGizEY3CgYy0OyHzUvf25rXKelxmER/oakKuxPPEnf6rKYhOHHRtyRhpLeZa+9 xc3eEov7lzOEUYFhudgyOxpNb2f5G0b0LB9MC2r48RC6TtBfXfFFR3ZfOvqcmPrt hUP1avn2s0AFfQ/U6+eYi1x2Mnc6QlDAJF6AAbkBwt4CbuD3FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFps79VeJycKYe5HoLObsLcak/3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAyMTI4NmMtMzlhOS0z YTJiLThjMzYtNzFiZjI1MTlhNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvqs0S6jZtOGmjY+ofnjkU0rIoa8jKJdtrLGjbAFgS/3YNR3b2b gz4QHN4gFDV7OqZ8s/et4eE18BV9nITflXaflgTvu6V5wLcIl/6ZoVyLMr/cE2o3 Ty5/LACUw4fZTnAjYdHPvHPTNTStk8USHWOqfikFSox+Her38upAuo/vQYKQ6PTZ RPN/G4mC/t09rxvz5o6+YAlW6L++56DeFW0l5ye4gw/bvmb0fg0YpK4Lw/L8pOvM mLH2VB3FS4YmAI5mGXprmq8r99Tl0aj+Sm8aIDC3ddFb0j2Cwq5MKItwyiYEbP6g xKlXZ9+dVcDIEl9e+PmXepvbvTYqKCkuSEg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:26 2025 by rpki-client