$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa File: f491cc0c-6406-3d62-91f5-9ba427432eb7.roa (raw, json) Hash identifier: 4RX0UyYAQ+qK2fOxV5n5//V2LmSVOZSDMBoUCA4SEJA= Subject key identifier: D8:BC:30:3D:83:CB:A0:2F:3E:41:C1:81:B6:FC:EC:CB:B0:3F:09:8A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BF348EAAA7120206F380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 7500 IP address blocks: 2001:470:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:34:8e:aa:a7:12:02:06:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=30f6b206-d074-482d-88f8-4546615e8073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:05:d3:47:9a:da:be:0d:29:b8:bf:2a:76: 9e:e3:41:84:18:22:9d:89:b8:50:1b:59:40:e2:9b: ae:7d:85:7d:73:54:cf:10:1a:16:44:e0:c4:bb:33: 6e:f8:7b:eb:ed:5f:eb:9f:c6:6b:01:a4:8c:b7:e4: 8f:ea:0f:76:56:b2:d8:6a:f5:8b:c0:29:c5:00:ec: 4a:24:9e:59:02:39:d4:e7:ba:c1:62:0f:c5:39:5f: 27:5a:d0:66:51:69:42:69:e5:1a:a6:d4:6b:95:ba: 7c:ba:47:ec:4b:ca:2c:e1:51:98:f1:ff:bd:ba:fc: 32:9c:4e:eb:f4:4d:fa:1d:26:b7:fc:fd:7d:8b:15: 14:ac:45:0a:46:d7:64:ae:7a:5b:82:f2:71:e8:01: 4e:5b:e1:4d:69:be:e3:3a:40:8e:2d:1a:5a:b8:51: dd:50:29:fc:e3:56:66:14:7d:de:0b:7c:c4:5b:6f: b8:ee:90:2b:de:1f:73:84:75:16:4f:cc:eb:cc:d1: 83:df:3a:63:5c:2b:69:37:52:a5:84:c2:be:7e:f0: 98:de:09:1b:f2:d0:7e:6d:6e:81:b9:bb:01:8f:e8: 62:db:17:b1:64:31:9c:3d:a5:8a:d8:e0:c0:cf:c1: 32:8a:72:df:79:38:42:b0:c0:e8:ba:39:d6:29:40: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:30:3D:83:CB:A0:2F:3E:41:C1:81:B6:FC:EC:CB:B0:3F:09:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a0:98:c0:5a:a4:b4:26:dd:77:fc:a4:23:1f:42:f4:7e:d2: 99:6f:e1:21:67:39:d8:f5:03:0b:f6:72:96:f1:19:e2:c3:44: 6c:ba:3d:9b:d6:c5:ff:b1:67:e0:2a:a3:e3:ed:8c:43:5d:14: 0e:46:27:13:53:51:99:8f:2e:88:93:25:63:25:e6:55:2a:99: 55:16:31:7b:c7:03:d7:ad:61:d0:a2:9a:43:4c:51:76:ad:37: c7:29:0c:26:03:97:d3:79:ea:47:57:4d:3d:a8:f6:44:3b:14: 1f:67:aa:2d:d6:95:86:ba:ae:48:e4:e3:4f:98:63:9a:53:69: 3d:4c:53:fe:fe:f7:8a:88:1e:48:fe:41:68:d2:28:69:12:71: c7:d5:53:49:f3:2f:6d:b6:36:fc:c9:71:48:2c:2e:eb:16:df: 84:ca:f4:85:e9:18:53:c4:02:31:ce:52:c5:bb:f7:42:ed:83: 3e:aa:bf:71:a3:52:8b:78:b4:89:6d:c4:74:4a:c4:1a:ba:7d: 40:6c:f5:92:dc:a4:ec:5a:ff:2e:21:d7:62:fa:e0:c7:d7:b7: d1:45:8a:df:bf:33:28:8f:c4:97:09:c9:30:3d:b4:4e:22:72: ff:1c:9f:23:f6:f0:99:9e:5f:56:8b:1c:94:71:e4:6a:71:e9: 61:a2:22:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1780jqqnEgIG84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzBmNmIyMDYtZDA3NC00ODJkLTg4ZjgtNDU0NjYxNWU4MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt4F00ea2r4NKbi/Knae40GEGCKdibhQG1lA 4puufYV9c1TPEBoWRODEuzNu+Hvr7V/rn8ZrAaSMt+SP6g92VrLYavWLwCnFAOxK JJ5ZAjnU57rBYg/FOV8nWtBmUWlCaeUaptRrlbp8ukfsS8os4VGY8f+9uvwynE7r 9E36HSa3/P19ixUUrEUKRtdkrnpbgvJx6AFOW+FNab7jOkCOLRpauFHdUCn841Zm FH3eC3zEW2+47pAr3h9zhHUWT8zrzNGD3zpjXCtpN1KlhMK+fvCY3gkb8tB+bW6B ubsBj+hi2xexZDGcPaWK2ODAz8EyinLfeThCsMDoujnWKUAGRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNi8MD2Dy6AvPkHBgbb87MuwPwmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjQ5MWNjMGMtNjQwNi0z ZDYyLTkxZjUtOWJhNDI3NDMyZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKOgmMBapLQm3Xf8pCMfQvR+0plv4SFnOdj1Awv2cpbxGeLDRGy6 PZvWxf+xZ+Aqo+PtjENdFA5GJxNTUZmPLoiTJWMl5lUqmVUWMXvHA9etYdCimkNM UXatN8cpDCYDl9N56kdXTT2o9kQ7FB9nqi3WlYa6rkjk40+YY5pTaT1MU/7+94qI Hkj+QWjSKGkSccfVU0nzL222NvzJcUgsLusW34TK9IXpGFPEAjHOUsW790Ltgz6q v3GjUot4tIltxHRKxBq6fUBs9ZLcpOxa/y4h12L64MfXt9FFit+/MyiPxJcJyTA9 tE4icv8cnyP28JmeX1aLHJRx5Gpx6WGiIlQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:42 2025 by rpki-client