$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe3eb3dd-fc3f-36da-82f8-23995a714d2e.roa File: fe3eb3dd-fc3f-36da-82f8-23995a714d2e.roa (raw, json) Hash identifier: gqU1rxPi+Ir8ESnHHq/Q1YV0ACf2vI3f1n70afUoFmc= Subject key identifier: F7:1A:6B:50:BF:F6:7E:0D:E9:25:B1:D5:E5:1B:DE:3D:39:63:46:9F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BA9329354EBB8188AF3890480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe3eb3dd-fc3f-36da-82f8-23995a714d2e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 22748 IP address blocks: 2001:470:1a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:93:54:eb:b8:18:8a:f3:89:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a17434d8-a680-4afe-b6c1-8b966eb7656d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:74:ff:30:83:92:fd:22:cf:93:16:ea:e2: 42:0d:b2:c7:63:f1:24:ff:a0:f5:7b:08:9a:d9:aa: 01:dd:f5:f5:c9:6d:55:2d:00:13:7f:b0:2d:7b:0b: 47:fa:35:03:0e:32:65:9d:ca:4a:c0:80:e5:fb:97: d1:42:5d:15:7d:75:e6:8a:27:f1:44:56:4f:9b:14: eb:ca:07:7e:7e:f3:b7:87:30:e6:09:88:fb:95:26: 84:f7:c7:02:98:a7:66:fc:86:7f:54:e5:2a:00:98: 5b:ca:4e:59:63:d8:4b:80:89:22:f5:ed:85:2d:8d: 1f:c7:b8:30:a6:95:f9:c5:fa:89:59:3f:63:22:c5: 89:00:26:eb:04:29:27:b8:cf:8a:d4:eb:87:b8:3a: fe:0b:45:75:50:de:7d:ab:a6:ab:51:fd:6a:69:2a: f0:56:bc:82:f4:52:cc:fe:7b:19:db:8f:4a:84:4a: 7d:63:06:70:ea:2f:13:13:93:7f:eb:96:c9:b8:5d: e1:86:a0:53:08:53:29:87:06:f1:36:90:58:58:82: 5f:ec:7f:0f:ef:f0:f6:91:c9:81:84:54:39:80:b4: 2d:56:79:e5:a8:82:b6:4e:58:df:32:99:8e:4e:d4: c1:b1:e5:b4:8c:f3:7a:09:cb:34:f1:28:45:72:67: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1A:6B:50:BF:F6:7E:0D:E9:25:B1:D5:E5:1B:DE:3D:39:63:46:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe3eb3dd-fc3f-36da-82f8-23995a714d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:4f:f5:2c:57:ee:0d:e5:73:8b:44:d3:5c:0d:8e:a6:89:e6: c1:ae:67:5e:6e:3e:7d:e3:7e:01:28:75:c2:28:8f:8f:ee:54: db:9f:e9:96:75:c6:46:1b:e7:52:b4:1d:3a:a3:d1:4f:f8:5f: ab:a4:cd:88:6a:5e:9c:2a:b1:d6:e9:a8:97:9b:61:ec:47:ec: 5a:d6:dc:29:d2:5f:44:38:72:ff:46:10:0e:0a:d4:33:9b:f3: f5:ce:2d:e2:26:82:20:34:f4:37:aa:f0:ba:70:bd:e1:77:cf: 03:ed:c3:80:3c:16:ec:dc:b9:b6:51:ba:c5:af:6d:f7:66:98: fc:2c:e0:6d:58:13:de:68:a7:d0:66:02:9e:02:aa:39:31:d7: fe:cc:02:a6:82:1d:1a:41:b5:71:1f:1e:a8:87:b5:1e:3e:7f: 95:bc:30:7e:ed:b9:cb:2e:ab:56:de:a8:0c:eb:68:e0:b8:54: aa:92:36:80:8b:9a:82:a2:b1:6e:f4:38:28:c5:43:d4:74:0a: 67:23:b8:9a:8c:60:16:45:eb:4c:12:43:fe:bc:ae:94:a2:12: 67:f1:86:3d:53:e2:71:55:b8:50:11:92:af:1e:89:f5:c7:ae: 83:20:9b:a6:a4:fe:18:8c:38:4c:ca:08:73:84:0e:05:5e:5b: 90:d8:dd:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMpNU67gYivOJBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTE3NDM0ZDgtYTY4MC00YWZlLWI2YzEtOGI5NjZlYjc2NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluN0/zCDkv0iz5MW6uJCDbLHY/Ek/6D1ewia 2aoB3fX1yW1VLQATf7AtewtH+jUDDjJlncpKwIDl+5fRQl0VfXXmiifxRFZPmxTr ygd+fvO3hzDmCYj7lSaE98cCmKdm/IZ/VOUqAJhbyk5ZY9hLgIki9e2FLY0fx7gw ppX5xfqJWT9jIsWJACbrBCknuM+K1OuHuDr+C0V1UN59q6arUf1qaSrwVryC9FLM /nsZ249KhEp9YwZw6i8TE5N/65bJuF3hhqBTCFMphwbxNpBYWIJf7H8P7/D2kcmB hFQ5gLQtVnnlqIK2TljfMpmOTtTBseW0jPN6Ccs08ShFcmer6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPcaa1C/9n4N6SWx1eUb3j05Y0afMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmUzZWIzZGQtZmMzZi0z NmRhLTgyZjgtMjM5OTVhNzE0ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKxP9SxX7g3lc4tE01wNjqaJ5sGuZ15uPn3jfgEodcIoj4/uVNuf 6ZZ1xkYb51K0HTqj0U/4X6ukzYhqXpwqsdbpqJebYexH7FrW3CnSX0Q4cv9GEA4K 1DOb8/XOLeImgiA09Deq8LpwveF3zwPtw4A8FuzcubZRusWvbfdmmPws4G1YE95o p9BmAp4Cqjkx1/7MAqaCHRpBtXEfHqiHtR4+f5W8MH7tucsuq1beqAzraOC4VKqS NoCLmoKisW70OCjFQ9R0CmcjuJqMYBZF60wSQ/68rpSiEmfxhj1T4nFVuFARkq8e ifXHroMgm6ak/hiMOEzKCHOEDgVeW5DY3V4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:00 2025 by rpki-client