$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1040dec7-f3bf-3a87-ba77-91f83cad60a3.roa File: 1040dec7-f3bf-3a87-ba77-91f83cad60a3.roa (raw, json) Hash identifier: QakC7G2/BN41cEljsD2l+ww8Ei+zBIJQIba/rdibgBg= Subject key identifier: FA:AA:C2:04:5D:C3:3D:02:06:2C:F3:49:30:8B:44:11:3B:F2:DE:53 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B715CEE44A82B6FEC1D7CEDE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1040dec7-f3bf-3a87-ba77-91f83cad60a3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 139009 IP address blocks: 2001:470:1f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ee:44:a8:2b:6f:ec:1d:7c:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e692816e-0448-4ba0-ab42-4f2518cb3f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:50:d4:16:94:f8:f0:ba:ef:78:f1:b7:7a: 45:21:10:90:bf:8b:33:23:02:92:4b:26:90:06:1c: e5:bc:18:02:98:ff:f7:9e:78:34:6f:f0:b6:91:4a: c3:56:c2:53:bb:d9:6d:62:3b:5e:88:a5:b2:da:01: 73:bc:c4:8e:92:1e:38:03:2f:65:e2:34:8f:48:5e: 67:ff:5c:9d:c7:85:78:20:21:03:1e:ce:e3:e1:3d: 9f:bb:ff:c1:d4:12:cb:ea:63:08:df:b7:cc:1d:df: 1a:1c:0e:72:1a:5d:08:6a:56:7f:58:ef:4b:bc:07: 59:f5:1c:34:48:fa:05:c1:11:20:12:6c:6b:f6:a7: c7:ce:f1:4a:af:d3:8a:c5:06:f4:b9:a8:26:9f:c7: 7d:fe:0c:c4:76:7e:9a:8b:6a:10:26:5f:4b:60:4d: 1b:ec:6b:75:d1:b6:59:23:69:bc:05:4d:c2:9c:f5: 45:6a:6f:10:01:bd:93:d9:e5:53:41:72:72:28:80: cf:55:13:56:0f:b0:7e:a1:40:0e:c3:36:54:f5:e4: 96:c7:58:c6:d1:c0:38:42:b4:c4:1d:ba:21:df:07: 73:82:f4:8d:f2:ba:10:43:d5:8d:31:49:94:38:ed: bd:30:37:ea:b6:19:be:1e:ae:6b:f2:79:da:40:7b: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:C2:04:5D:C3:3D:02:06:2C:F3:49:30:8B:44:11:3B:F2:DE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1040dec7-f3bf-3a87-ba77-91f83cad60a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1f3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:b5:2a:ad:b1:53:3a:ba:0e:a7:af:17:1e:aa:2b:94:23: 3b:a0:53:75:58:69:3c:ef:84:4f:61:29:83:6d:5a:1e:68:b7: 5d:51:0e:d8:5d:94:09:cf:b1:d0:08:e0:fe:ed:07:fc:6e:e6: d7:0d:db:71:0f:60:54:a1:97:6c:ee:1b:4b:42:d4:c5:69:12: 6a:0d:22:c6:51:17:44:e6:14:c3:c5:fc:88:5a:f8:15:08:16: 85:f1:f1:fb:eb:3e:4b:92:64:a0:3f:26:e8:fe:7c:3b:11:ea: e0:3f:ce:95:d5:4d:96:a9:11:89:8f:5e:17:1d:a4:21:ba:58: fb:06:e0:79:e1:7a:e5:fd:8f:aa:cb:53:3e:ee:93:0b:50:21: 81:aa:e9:99:07:c1:21:dc:73:d2:b6:ee:c8:a5:75:76:51:46: 80:32:5f:9f:bb:31:a6:5c:d2:02:f4:13:07:d1:24:31:8c:a1: 4f:08:c6:e3:de:9d:e1:88:e7:da:01:c3:47:00:5a:f6:af:02: f1:d9:b1:54:a8:13:5b:72:2a:64:79:b5:3a:19:c9:a0:f8:27: 55:fb:79:34:53:77:c6:b0:0f:53:65:e2:a1:ec:c6:a4:ce:2a: ed:6c:c2:ae:4d:24:85:d6:60:bb:af:78:de:e8:8d:6b:e4:1a: 5f:16:0f:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXO5EqCtv7B187eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTY5MjgxNmUtMDQ0OC00YmEwLWFiNDItNGYyNTE4Y2IzZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqolQ1BaU+PC673jxt3pFIRCQv4szIwKSSyaQ BhzlvBgCmP/3nng0b/C2kUrDVsJTu9ltYjteiKWy2gFzvMSOkh44Ay9l4jSPSF5n /1ydx4V4ICEDHs7j4T2fu//B1BLL6mMI37fMHd8aHA5yGl0IalZ/WO9LvAdZ9Rw0 SPoFwREgEmxr9qfHzvFKr9OKxQb0uagmn8d9/gzEdn6ai2oQJl9LYE0b7Gt10bZZ I2m8BU3CnPVFam8QAb2T2eVTQXJyKIDPVRNWD7B+oUAOwzZU9eSWx1jG0cA4QrTE Hboh3wdzgvSN8roQQ9WNMUmUOO29MDfqthm+Hq5r8nnaQHuG4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqqwgRdwz0CBizzSTCLRBE78t5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTA0MGRlYzctZjNiZi0z YTg3LWJhNzctOTFmODNjYWQ2MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOttSqtsVM6ug6nrxceqiuUIzugU3VYaTzvhE9hKYNtWh5ot11R DthdlAnPsdAI4P7tB/xu5tcN23EPYFShl2zuG0tC1MVpEmoNIsZRF0TmFMPF/Iha +BUIFoXx8fvrPkuSZKA/Juj+fDsR6uA/zpXVTZapEYmPXhcdpCG6WPsG4HnheuX9 j6rLUz7ukwtQIYGq6ZkHwSHcc9K27sildXZRRoAyX5+7MaZc0gL0EwfRJDGMoU8I xuPeneGI59oBw0cAWvavAvHZsVSoE1tyKmR5tToZyaD4J1X7eTRTd8awD1Nl4qHs xqTOKu1swq5NJIXWYLuveN7ojWvkGl8WDw8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:45 2025 by rpki-client