$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa File: d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa (raw, json) Hash identifier: dPpYPe8MzAY460Vss4JJJnMtw9rG4wUdbZmK0L+CA7w= Subject key identifier: 7C:1A:3C:00:64:60:40:C4:27:86:C5:07:73:28:E0:B8:18:60:4E:EF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB45D3B91A7B364340B250A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 394740 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3b:91:a7:b3:64:34:0b:25:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=14f350f5-7150-41db-8c64-345a34e15e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:fe:32:45:10:91:17:3f:cb:b8:73:8e:25: 51:02:17:09:50:36:dc:ae:e2:4a:e7:f0:4b:5a:65: 53:00:f5:8c:db:b4:09:1c:88:61:ca:f3:b1:ac:d3: e9:c0:3a:f0:b9:20:c5:d6:c8:02:ad:ef:66:9f:fa: b8:dc:18:f3:7e:4c:0b:1e:0e:6d:02:2a:73:29:05: c3:aa:13:84:1d:23:f3:ca:62:9a:dd:5d:e2:4b:b2: 01:86:84:7e:1c:d0:39:86:17:84:65:6f:d1:1b:22: e9:de:c0:18:8a:2e:db:e5:6a:a1:a3:b0:e7:9b:fc: fa:8e:df:98:2f:c3:b0:4c:a7:30:95:21:52:5a:9c: 20:d4:08:5c:3b:ab:51:44:91:0f:34:72:8f:52:ca: 93:18:34:bb:09:43:1d:08:48:25:64:a8:8d:d3:a4: 29:1e:fe:be:2f:ca:9e:81:52:b2:06:18:f8:2a:82: fe:59:eb:96:fd:f5:53:16:3a:34:a9:c2:7e:85:03: e2:86:c3:ec:69:5e:d9:20:47:36:3d:d6:77:ff:5e: 76:93:af:30:14:66:67:7b:a3:f3:bc:20:fe:ca:14: 4b:43:f0:f0:b6:f9:5a:65:77:a9:d6:24:50:03:61: 21:cd:85:15:e9:b4:36:ef:1e:94:ad:4b:6c:69:84: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1A:3C:00:64:60:40:C4:27:86:C5:07:73:28:E0:B8:18:60:4E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ea:b1:a6:8d:a8:f3:86:a5:c1:10:60:42:11:d9:2b:00:5b: bf:de:ca:37:28:78:00:e2:72:39:87:48:f2:60:f5:1e:19:9d: 4c:c3:52:4c:21:5f:d3:01:25:28:73:9b:9f:fb:58:48:98:bc: bd:c3:92:40:6f:9c:30:52:2a:b3:1e:98:72:07:01:6f:dc:0b: 35:98:a9:0e:7b:99:49:b8:5d:13:80:01:59:09:28:d6:04:07: 23:84:95:ed:14:d1:02:28:ad:4a:4d:14:92:c5:09:e8:75:06: 17:a6:64:73:48:48:c7:21:ed:7e:19:04:fa:52:8f:65:67:c8: 01:7f:57:13:68:4c:ab:8b:5a:7e:14:41:71:96:e2:ed:0e:89: 20:7f:66:c5:0b:4a:03:25:e2:e7:e3:67:22:05:40:e1:16:22: c6:5f:f4:92:05:4f:a8:1a:ea:b4:65:3d:05:4b:44:27:f8:59: 38:60:e7:c3:2c:28:78:e4:bd:f7:c1:8a:56:4d:25:ee:93:97: 29:cd:6e:20:ed:60:3c:02:a8:97:f8:e2:8e:60:32:c0:6b:71: 1b:7d:3a:75:f6:6d:b0:26:01:a0:d1:81:db:f0:71:ed:19:c1: 53:f2:6c:50:d9:ba:14:99:b3:41:fa:32:ea:e0:12:23:2d:13: d7:61:ee:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTuRp7NkNAslCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MTRmMzUwZjUtNzE1MC00MWRiLThjNjQtMzQ1YTM0ZTE1ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeT+MkUQkRc/y7hzjiVRAhcJUDbcruJK5/BL WmVTAPWM27QJHIhhyvOxrNPpwDrwuSDF1sgCre9mn/q43BjzfkwLHg5tAipzKQXD qhOEHSPzymKa3V3iS7IBhoR+HNA5hheEZW/RGyLp3sAYii7b5Wqho7Dnm/z6jt+Y L8OwTKcwlSFSWpwg1AhcO6tRRJEPNHKPUsqTGDS7CUMdCEglZKiN06QpHv6+L8qe gVKyBhj4KoL+WeuW/fVTFjo0qcJ+hQPihsPsaV7ZIEc2PdZ3/152k68wFGZne6Pz vCD+yhRLQ/DwtvlaZXep1iRQA2EhzYUV6bQ27x6UrUtsaYTowQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHwaPABkYEDEJ4bFB3Mo4LgYYE7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDY0YTQ5ZjgtMWY2Yi0z N2RhLWI5ZDEtZmRlNGU3ZjgwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMbqsaaNqPOGpcEQYEIR2SsAW7/eyjcoeADicjmHSPJg9R4ZnUzD UkwhX9MBJShzm5/7WEiYvL3DkkBvnDBSKrMemHIHAW/cCzWYqQ57mUm4XROAAVkJ KNYEByOEle0U0QIorUpNFJLFCeh1BhemZHNISMch7X4ZBPpSj2VnyAF/VxNoTKuL Wn4UQXGW4u0OiSB/ZsULSgMl4ufjZyIFQOEWIsZf9JIFT6ga6rRlPQVLRCf4WThg 58MsKHjkvffBilZNJe6TlynNbiDtYDwCqJf44o5gMsBrcRt9OnX2bbAmAaDRgdvw ce0ZwVPybFDZuhSZs0H6MurgEiMtE9dh7r8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:37 2025 by rpki-client