$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa File: fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa (raw, json) Hash identifier: dz7cP4EWchnVJNUx81GLzs8+6A1Jd7zkcx617uvdYNs= Subject key identifier: BF:E3:4C:93:23:F8:4D:BB:09:F8:C6:1B:B4:67:94:69:80:F9:87:4C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F5D157D306C527479900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 34187 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f5:d1:57:d3:06:c5:27:47:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8cab627f-993a-4420-8eae-456cd568d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:66:a8:ed:14:f1:3f:f8:c3:15:08:44:78: 00:72:a7:6e:d4:09:32:10:92:31:09:7b:92:b8:ae: 20:71:a9:97:7c:1a:86:69:29:15:a1:65:fa:b5:f7: 04:da:bb:7b:1c:6c:05:87:26:5d:01:53:a0:0c:37: 3d:43:10:95:ad:d9:56:30:d9:de:fb:f0:78:24:be: 6b:7d:24:3d:8e:a8:d9:97:31:ad:25:03:3e:82:e8: bf:96:15:30:8f:42:5b:ac:34:b2:75:dc:24:32:91: 00:37:95:c2:2f:87:61:d8:ec:24:2f:ed:03:13:1c: e1:cb:3f:4e:ca:1a:5b:c2:04:67:71:ba:11:6e:ed: db:e6:b3:c0:01:cb:a9:30:f1:a0:20:3c:e2:b9:85: 79:56:ec:09:63:08:e3:ac:a7:e0:4b:16:31:e0:96: 6d:78:0a:1e:e8:10:dd:55:de:ec:dd:b8:fe:37:28: 94:e7:41:95:02:73:81:a7:04:01:2b:c5:27:e2:16: 3d:8b:b6:6d:4e:e3:4f:87:6f:52:cc:8c:fa:c3:38: 73:49:6d:7b:20:c4:11:38:3e:c7:20:34:55:72:8a: 69:7a:20:db:43:19:a3:0e:fa:e4:57:62:75:c3:aa: 47:12:98:d9:7a:85:dc:d6:e1:09:c0:c8:83:47:04: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:4C:93:23:F8:4D:BB:09:F8:C6:1B:B4:67:94:69:80:F9:87:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa0d7819-a51a-36d8-bcb5-64d1e196a727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a7:9e:92:55:82:af:49:1a:ab:01:66:8d:cf:20:2e:83:12: bd:a4:a1:d3:07:43:a3:f7:85:2a:01:70:3b:29:8b:c3:d5:39: 37:2b:a6:1c:20:dc:18:b5:18:3e:0e:ef:07:ad:69:80:ab:73: b6:73:30:05:43:49:6f:a0:cc:34:69:84:69:ed:7b:8c:09:a4: 88:cb:91:f2:c5:a5:9d:d1:3a:5c:be:ca:7c:67:fb:bc:53:4c: cb:62:1e:fa:b1:b4:03:ee:18:3d:71:fc:8a:4d:93:ea:5e:4f: e6:70:08:15:76:77:52:08:2c:5c:23:83:a7:d4:20:52:b0:88: db:63:b3:47:54:e0:7e:db:27:df:bd:ce:ec:b4:37:90:53:6f: 8f:a4:6f:28:09:a5:da:16:0c:37:39:ea:a2:45:ce:d5:51:f7: c4:4a:c0:80:a0:a6:08:7d:a2:fc:d6:0a:52:47:9e:68:b3:70: 7e:25:ef:bc:2b:6c:b2:90:0a:53:9f:c1:cc:2d:e2:b4:e9:e0: 21:7d:5e:60:ad:c5:c4:4b:a5:1a:a8:0d:fc:30:0e:3d:17:85: 60:5c:9c:e2:52:04:9b:5b:ed:4a:7c:b5:9f:03:e9:10:8c:2d: b0:c9:68:fc:71:84:5e:f4:96:95:e7:62:56:db:79:6f:a5:11: 58:68:b3:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/XRV9MGxSdHmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OGNhYjYyN2YtOTkzYS00NDIwLThlYWUtNDU2Y2Q1NjhkNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgdmqO0U8T/4wxUIRHgAcqdu1AkyEJIxCXuS uK4gcamXfBqGaSkVoWX6tfcE2rt7HGwFhyZdAVOgDDc9QxCVrdlWMNne+/B4JL5r fSQ9jqjZlzGtJQM+gui/lhUwj0JbrDSyddwkMpEAN5XCL4dh2OwkL+0DExzhyz9O yhpbwgRncboRbu3b5rPAAcupMPGgIDziuYV5VuwJYwjjrKfgSxYx4JZteAoe6BDd Vd7s3bj+NyiU50GVAnOBpwQBK8Un4hY9i7ZtTuNPh29SzIz6wzhzSW17IMQROD7H IDRVcoppeiDbQxmjDvrkV2J1w6pHEpjZeoXc1uEJwMiDRwQx+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/jTJMj+E27CfjGG7RnlGmA+YdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmEwZDc4MTktYTUxYS0z NmQ4LWJjYjUtNjRkMWUxOTZhNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJKnnpJVgq9JGqsBZo3PIC6DEr2kodMHQ6P3hSoBcDspi8PVOTcr phwg3Bi1GD4O7wetaYCrc7ZzMAVDSW+gzDRphGnte4wJpIjLkfLFpZ3ROly+ynxn +7xTTMtiHvqxtAPuGD1x/IpNk+peT+ZwCBV2d1IILFwjg6fUIFKwiNtjs0dU4H7b J9+9zuy0N5BTb4+kbygJpdoWDDc56qJFztVR98RKwICgpgh9ovzWClJHnmizcH4l 77wrbLKQClOfwcwt4rTp4CF9XmCtxcRLpRqoDfwwDj0XhWBcnOJSBJtb7Up8tZ8D 6RCMLbDJaPxxhF70lpXnYlbbeW+lEVhos/0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:50 2025 by rpki-client