$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcdab85-3bc5-3b3f-a7e9-0b4a8b51aa3e.roa File: 0dcdab85-3bc5-3b3f-a7e9-0b4a8b51aa3e.roa (raw, json) Hash identifier: j5Kwu7rxkNQjoF7iaciiO0R1jdVjpdbD6CGpjFCYdjg= Subject key identifier: F5:86:00:1F:E4:4A:56:1B:48:5C:93:D3:D3:DF:DF:E7:15:A2:3B:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B8EBB7461733365B1E4F05480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcdab85-3bc5-3b3f-a7e9-0b4a8b51aa3e.roa Signing time: Sat 18 Oct 2025 01:30:11 +0000 ROA not before: Sat 18 Oct 2025 01:30:11 +0000 ROA not after: Fri 16 Jan 2026 02:30:11 +0000 asID: 328323 IP address blocks: 2001:470:4f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:bb:74:61:73:33:65:b1:e4:f0:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 18 01:30:11 2025 GMT Not After : Jan 16 02:30:11 2026 GMT Subject: CN=df38a316-cdc3-4639-9bff-08c345438cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:ff:f0:7b:2d:65:0b:c4:df:d5:4e:1e:76: 3c:e8:53:82:4c:f4:a7:ef:bd:57:ea:fd:23:93:4c: 6c:64:93:13:96:5e:79:52:21:1f:0b:22:44:c4:cb: 05:c5:f7:50:3c:06:74:50:22:32:ee:0f:0f:c6:2d: b9:ee:1f:3b:ad:0b:54:6f:74:7d:61:8f:ab:98:43: de:79:8e:5d:58:b9:85:db:07:cc:1f:3e:33:a0:eb: 65:4b:1d:be:56:3d:a2:aa:93:0a:86:e7:61:26:d6: 86:1d:b6:73:bc:64:75:f4:29:b9:41:79:85:48:92: 8e:9c:e8:00:e1:28:95:2e:61:e8:3a:14:cb:3e:cd: 9f:e0:af:34:ce:44:03:bf:0c:8b:32:10:c1:88:fe: d3:97:77:e1:66:bd:ab:5a:7d:73:69:a9:60:39:01: 51:32:7d:e1:41:76:19:ab:f6:e0:a4:f6:8d:6f:64: 96:bc:97:95:b4:0f:de:79:4c:a6:ad:61:92:4c:03: ac:78:a2:8e:30:a4:97:a1:7b:21:43:4b:e5:8e:bb: 94:a2:bc:8f:55:1c:66:bc:66:2e:fd:6b:14:d4:b6: 4d:5f:9c:dd:3f:7d:85:a2:18:1f:e7:a9:8b:30:38: fa:9f:c1:c9:92:07:88:66:f8:8e:3e:f6:ec:9e:04: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:86:00:1F:E4:4A:56:1B:48:5C:93:D3:D3:DF:DF:E7:15:A2:3B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcdab85-3bc5-3b3f-a7e9-0b4a8b51aa3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:45:d5:f2:9a:48:77:bd:6d:d2:8b:d2:c3:21:0b:07:a1:02: 9b:06:57:c0:1f:a9:57:23:99:9f:0e:5d:a5:d7:ea:4a:51:60: 1a:5c:07:86:ea:9e:ce:ec:5a:7b:64:f9:7a:f6:7c:ea:a5:ff: 84:a6:67:a2:78:ce:b9:e6:85:4e:8c:56:d6:8e:2e:3e:d5:ac: 27:4f:9c:e0:bd:17:02:be:6b:66:87:29:90:47:a3:7c:21:73: 6f:8b:0c:c0:de:44:5a:6c:53:f7:44:48:47:09:67:dc:f4:ff: 05:79:94:8d:3a:de:82:cb:5a:0a:24:b8:d3:25:df:25:8c:15: 5f:90:f7:5c:18:5b:d5:b9:ef:5e:eb:31:9f:85:cd:f9:c5:80: 29:d4:8f:dc:6f:e9:d8:74:67:bd:50:70:60:38:a4:ba:67:8a: 4e:17:3a:fd:e2:fd:80:29:0c:81:0e:a3:f1:87:22:40:87:6b: a8:80:1b:e5:37:5b:38:8d:51:c4:e1:29:1f:87:28:5e:32:39: 0e:27:34:ac:c4:5a:c4:b3:00:85:55:95:91:50:bb:34:7e:3f: f0:ba:a3:dd:66:2c:3d:e2:17:f3:15:5e:86:4d:0b:b3:7d:8d: d9:0a:3a:3f:5e:bb:45:34:f4:3d:36:29:e5:92:16:01:03:66: a3:b9:e1:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOu3RhczNlseTwVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxODAxMzAxMVoXDTI2MDExNjAyMzAxMVowLzEtMCsGA1UEAxMk ZGYzOGEzMTYtY2RjMy00NjM5LTliZmYtMDhjMzQ1NDM4Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zn/8HstZQvE39VOHnY86FOCTPSn771X6v0j k0xsZJMTll55UiEfCyJExMsFxfdQPAZ0UCIy7g8Pxi257h87rQtUb3R9YY+rmEPe eY5dWLmF2wfMHz4zoOtlSx2+Vj2iqpMKhudhJtaGHbZzvGR19Cm5QXmFSJKOnOgA 4SiVLmHoOhTLPs2f4K80zkQDvwyLMhDBiP7Tl3fhZr2rWn1zaalgOQFRMn3hQXYZ q/bgpPaNb2SWvJeVtA/eeUymrWGSTAOseKKOMKSXoXshQ0vljruUoryPVRxmvGYu /WsU1LZNX5zdP32Fohgf56mLMDj6n8HJkgeIZviOPvbsngR12wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWGAB/kSlYbSFyT09Pf3+cVojuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGRjZGFiODUtM2JjNS0z YjNmLWE3ZTktMGI0YThiNTFhYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpF1fKaSHe9bdKL0sMhCwehApsGV8AfqVcjmZ8OXaXX6kpRYBpc B4bqns7sWntk+Xr2fOql/4SmZ6J4zrnmhU6MVtaOLj7VrCdPnOC9FwK+a2aHKZBH o3whc2+LDMDeRFpsU/dESEcJZ9z0/wV5lI063oLLWgokuNMl3yWMFV+Q91wYW9W5 717rMZ+FzfnFgCnUj9xv6dh0Z71QcGA4pLpnik4XOv3i/YApDIEOo/GHIkCHa6iA G+U3WziNUcThKR+HKF4yOQ4nNKzEWsSzAIVVlZFQuzR+P/C6o91mLD3iF/MVXoZN C7N9jdkKOj9eu0U09D02KeWSFgEDZqO54TU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:49 2025 by rpki-client