$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa File: 06a918e5-1f36-37c2-837c-e541e562cc74.roa (raw, json) Hash identifier: dZRikviqCWMtKdCxcGuuHyZulKkVgXD6q0d7+iRDWZ8= Subject key identifier: 61:89:8A:94:4A:66:56:DE:74:44:C0:58:06:2E:9D:F7:A8:D2:33:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B9012313BA4B382F792B205C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 214618 IP address blocks: 2001:470:4a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:31:3b:a4:b3:82:f7:92:b2:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=a2c44bfa-6483-4873-adc6-e08b9f776f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:e1:76:b2:8d:25:7f:29:57:18:a1:b0:5c: e6:68:21:49:36:9f:57:28:bf:fa:d5:ec:8e:51:a5: 8b:2c:5b:6a:68:d5:fb:9a:af:53:34:3a:5c:9b:1c: 4f:0b:d1:62:b3:54:7a:1a:68:e4:70:5e:9b:4e:4c: b4:52:3a:28:02:0f:44:94:db:55:55:e3:b1:43:08: 9f:0c:6a:89:6e:50:1d:52:5e:87:31:3a:07:85:60: a4:31:a9:92:30:43:63:2a:ae:78:54:95:19:9f:7b: 34:fe:95:11:3d:20:49:7d:bb:8a:c8:75:19:ce:a0: fe:0a:f2:ab:62:fc:88:b8:2c:1b:b9:00:e1:3e:20: b8:33:7f:f9:d5:e9:9b:06:b0:80:90:ff:69:94:cd: 1c:77:72:71:ea:0d:81:3f:9e:13:b8:d4:d2:d9:7b: 56:1d:13:ce:b6:d5:9b:82:b8:bc:cd:1b:3e:40:b6: 06:35:82:4b:44:1f:6f:47:34:08:cd:9b:01:9c:a6: a8:10:c4:ab:b2:9d:b1:7f:80:7f:46:99:95:0b:ad: 48:af:57:10:3a:07:54:ce:8e:73:50:26:46:3e:86: 97:02:97:f8:1f:0d:39:74:0e:e1:62:01:fc:cd:3e: 1e:c0:01:5a:40:41:21:07:38:a9:c6:b8:cb:5d:35: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:8A:94:4A:66:56:DE:74:44:C0:58:06:2E:9D:F7:A8:D2:33:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:8e:82:df:3b:cd:57:90:9b:6c:01:09:11:d5:ef:b5:a6:dd: 0a:66:dc:ae:f2:8c:77:b4:ff:dd:3e:8f:1c:68:bc:44:e5:6d: c6:e2:da:31:e6:14:b7:47:54:a7:18:53:0f:6b:5b:9e:b5:f7: c3:ec:cd:76:d7:33:f6:98:85:cf:32:e5:88:a1:f5:63:dc:e1: 0e:66:dc:49:78:76:db:4d:77:f8:28:95:d8:14:42:39:5d:52: f0:3a:74:d0:24:8e:77:11:f7:7d:4c:6f:a5:0d:0a:59:e0:30: fb:0f:d1:48:7b:d6:c1:b9:8d:2c:2d:0b:69:15:65:0e:a5:86: bd:64:5f:04:b2:d5:09:e1:37:37:64:cd:25:f2:aa:af:f2:b9: e4:b4:a4:5b:e3:bb:32:34:91:99:ac:ef:ef:2b:c3:33:23:a8: e8:9f:80:6e:53:61:ec:e6:00:83:0f:20:03:cc:36:52:73:30: 8b:68:c7:b0:5c:05:c3:6f:e3:58:72:88:24:16:d6:5e:69:24: d1:c0:57:a2:95:07:86:51:c0:f2:13:22:0b:e8:27:2e:0d:d1: 8a:5c:67:33:36:04:a5:a9:f8:c7:67:a8:33:c2:7c:fd:54:67: e6:e8:f4:53:2d:4c:a5:ec:aa:79:e9:44:19:06:0a:57:c9:f4: ca:99:e9:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuQEjE7pLOC95KyBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk YTJjNDRiZmEtNjQ4My00ODczLWFkYzYtZTA4YjlmNzc2ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkXhdrKNJX8pVxihsFzmaCFJNp9XKL/61eyO UaWLLFtqaNX7mq9TNDpcmxxPC9Fis1R6GmjkcF6bTky0UjooAg9ElNtVVeOxQwif DGqJblAdUl6HMToHhWCkMamSMENjKq54VJUZn3s0/pURPSBJfbuKyHUZzqD+CvKr YvyIuCwbuQDhPiC4M3/51embBrCAkP9plM0cd3Jx6g2BP54TuNTS2XtWHRPOttWb gri8zRs+QLYGNYJLRB9vRzQIzZsBnKaoEMSrsp2xf4B/RpmVC61Ir1cQOgdUzo5z UCZGPoaXApf4Hw05dA7hYgH8zT4ewAFaQEEhBzipxrjLXTXDawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGGJipRKZlbedETAWAYunfeo0jOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDZhOTE4ZTUtMWYzNi0z N2MyLTgzN2MtZTU0MWU1NjJjYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMOOgt87zVeQm2wBCRHV77Wm3Qpm3K7yjHe0/90+jxxovETlbcbi 2jHmFLdHVKcYUw9rW56198PszXbXM/aYhc8y5Yih9WPc4Q5m3El4dttNd/goldgU QjldUvA6dNAkjncR931Mb6UNClngMPsP0Uh71sG5jSwtC2kVZQ6lhr1kXwSy1Qnh NzdkzSXyqq/yueS0pFvjuzI0kZms7+8rwzMjqOifgG5TYezmAIMPIAPMNlJzMIto x7BcBcNv41hyiCQW1l5pJNHAV6KVB4ZRwPITIgvoJy4N0YpcZzM2BKWp+MdnqDPC fP1UZ+bo9FMtTKXsqnnpRBkGClfJ9MqZ6eQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:35 2025 by rpki-client