$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f95d5e07-509f-3ff9-a9c2-0f965203590c.roa File: f95d5e07-509f-3ff9-a9c2-0f965203590c.roa (raw, json) Hash identifier: Vq0W1+C+zSJr01YbtX0IieNXdD8Qiwzum/7/cxYn1s0= Subject key identifier: 3F:13:9B:97:9F:E7:30:FB:A3:12:C3:F2:D7:16:30:3F:7D:80:3E:27 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7B973233A49B374056100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f95d5e07-509f-3ff9-a9c2-0f965203590c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 25943 IP address blocks: 2001:470:e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b9:73:23:3a:49:b3:74:05:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1e846a86-db75-4a1d-a89b-fea981905063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:2c:d3:6e:c1:e9:3c:2b:33:9d:4c:06:e4: 05:e3:7b:f9:06:cc:82:1f:da:99:b4:ce:99:ec:25: 1a:d3:4c:4e:c8:64:9a:fa:6f:4e:3f:f9:c2:32:88: c5:00:4b:1f:48:fe:39:f9:00:6c:02:65:57:3b:fa: b5:61:d8:bf:e1:28:bd:0f:7e:3f:77:dc:44:f4:a7: 44:ac:b1:46:06:18:36:a3:92:2a:88:41:fc:68:fc: cd:9e:53:b8:f7:37:3e:44:f4:ff:7c:e0:86:6b:c8: 14:e7:cc:b0:4e:7a:c1:0f:30:96:3b:2d:94:0e:94: 8b:8b:57:a1:3b:ca:4c:1c:5d:55:37:86:fd:dc:98: 71:c7:9e:bd:ff:1f:f7:6d:29:c1:13:5d:9c:60:98: c7:4e:6c:d5:c4:55:48:d2:76:d9:b3:6b:b3:3a:07: 95:bd:34:ac:7e:c7:c6:41:73:17:c4:8d:44:18:aa: 72:2d:fb:8d:6c:4c:0d:eb:97:43:30:2a:ec:a0:b7: 7c:ed:51:fb:4d:d1:4b:74:6a:f3:40:d3:8d:b2:06: 97:86:8b:b9:4c:b4:9b:06:25:f2:2f:a4:ab:c7:e4: 81:c0:11:d4:e7:00:17:2e:b7:9b:15:48:48:62:b6: ca:95:3f:32:77:eb:16:8d:dc:7f:a8:46:eb:6d:ba: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:9B:97:9F:E7:30:FB:A3:12:C3:F2:D7:16:30:3F:7D:80:3E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f95d5e07-509f-3ff9-a9c2-0f965203590c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7d:ce:aa:09:e6:69:43:6a:98:25:cf:a4:7f:d4:6f:5d:e1: cb:85:b8:fe:be:f8:4b:1b:d5:d8:4a:92:44:c9:5f:f3:4d:88: ea:69:28:ee:71:14:9f:04:98:20:df:bf:35:e4:d5:16:b1:65: 04:18:34:ff:5e:b0:d2:3e:8a:f6:dc:3b:41:f5:27:a1:cb:15: 58:e7:6e:70:bc:cb:3a:93:5f:b8:3d:8c:74:ce:f4:4f:a8:d1: af:f4:e4:c0:79:b0:cb:74:71:27:21:4f:9b:c2:ac:fa:a3:f8: 1d:af:aa:6a:58:22:f9:6a:7b:87:86:f7:3e:89:43:47:1a:1c: 92:82:e6:e7:8a:b7:71:c3:53:ec:93:38:73:8b:b7:dc:2d:28: a3:e4:0d:df:b6:25:24:8c:b8:07:65:5a:17:b1:10:46:76:d3: 8b:1f:f8:60:40:2c:c8:60:b7:66:2b:c2:a5:d1:bb:db:70:ae: 14:8c:26:b8:39:86:23:21:6d:04:7f:ac:b8:73:aa:c5:5b:ba: bf:38:b9:1f:5c:56:01:34:b9:60:f7:26:20:1a:a0:2c:25:81: 33:e3:34:ae:f9:aa:95:ca:82:95:bf:37:63:2f:62:62:3e:67: 22:56:93:31:34:d3:17:47:c7:02:2b:77:52:c1:b0:a0:ba:f0: a9:16:97:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17lzIzpJs3QFYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWU4NDZhODYtZGI3NS00YTFkLWE4OWItZmVhOTgxOTA1MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Es027B6TwrM51MBuQF43v5BsyCH9qZtM6Z 7CUa00xOyGSa+m9OP/nCMojFAEsfSP45+QBsAmVXO/q1Ydi/4Si9D34/d9xE9KdE rLFGBhg2o5IqiEH8aPzNnlO49zc+RPT/fOCGa8gU58ywTnrBDzCWOy2UDpSLi1eh O8pMHF1VN4b93Jhxx569/x/3bSnBE12cYJjHTmzVxFVI0nbZs2uzOgeVvTSsfsfG QXMXxI1EGKpyLfuNbEwN65dDMCrsoLd87VH7TdFLdGrzQNONsgaXhou5TLSbBiXy L6Srx+SBwBHU5wAXLrebFUhIYrbKlT8yd+sWjdx/qEbrbbqLbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8Tm5ef5zD7oxLD8tcWMD99gD4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjk1ZDVlMDctNTA5Zi0z ZmY5LWE5YzItMGY5NjUyMDM1OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADN9zqoJ5mlDapglz6R/1G9d4cuFuP6++Esb1dhKkkTJX/NNiOpp KO5xFJ8EmCDfvzXk1RaxZQQYNP9esNI+ivbcO0H1J6HLFVjnbnC8yzqTX7g9jHTO 9E+o0a/05MB5sMt0cSchT5vCrPqj+B2vqmpYIvlqe4eG9z6JQ0caHJKC5ueKt3HD U+yTOHOLt9wtKKPkDd+2JSSMuAdlWhexEEZ204sf+GBALMhgt2YrwqXRu9twrhSM Jrg5hiMhbQR/rLhzqsVbur84uR9cVgE0uWD3JiAaoCwlgTPjNK75qpXKgpW/N2Mv YmI+ZyJWkzE00xdHxwIrd1LBsKC68KkWl74= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:58 2025 by rpki-client