$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa File: 4947f72d-f17f-3923-a6b4-73d966ab58ed.roa (raw, json) Hash identifier: 2dwU6kfBfHvAtFDpTy4X/OdL/wu0pkpNsI19h7R5ZAg= Subject key identifier: FC:97:AB:28:6C:B7:8F:35:9E:D4:2E:E1:F4:A8:81:78:5F:54:6A:51 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7005F5D44D30AD1BA5F72180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa Signing time: Tue 07 Oct 2025 01:30:15 +0000 ROA not before: Tue 07 Oct 2025 01:30:15 +0000 ROA not after: Mon 05 Jan 2026 02:30:15 +0000 asID: 393474 IP address blocks: 2001:470:44a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:05:f5:d4:4d:30:ad:1b:a5:f7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 01:30:15 2025 GMT Not After : Jan 5 02:30:15 2026 GMT Subject: CN=75999770-8a0b-4cb4-8662-99988fddcf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:a6:36:63:06:ed:dc:e1:96:4a:c4:02:12: 4b:24:4a:28:6c:68:be:e8:f4:de:5c:e9:a8:28:bd: 1e:b3:cb:9b:0b:5c:60:6b:56:16:4e:5e:60:1c:ce: da:dd:1e:ad:81:a9:ff:1d:1e:66:b8:68:ec:ee:e2: 45:57:6b:34:d8:13:90:99:50:88:d2:f3:10:73:fb: 8c:f4:ce:44:9f:ce:3c:f8:e6:36:cf:32:1c:a1:49: df:27:2b:cf:3a:f6:5b:69:9d:d8:21:7f:66:a2:82: 5c:ef:7c:2b:dc:be:11:41:83:b7:18:a0:2a:b4:3e: 7f:4d:26:f6:bb:01:0f:44:75:7e:5a:ef:08:8c:b7: bd:60:29:f1:a5:b2:83:d3:3a:c9:a1:47:24:cf:4e: 28:c8:3f:0d:41:ae:ba:9f:5b:47:4a:c2:85:44:98: 1b:d3:9c:0d:3d:eb:2a:9d:fc:29:25:9e:c2:26:b3: db:aa:4a:dc:9d:32:4a:29:23:27:bd:f5:78:5a:b5: 5b:b3:b7:d6:b9:4a:3a:3d:7f:46:f6:4b:26:ad:ef: ac:60:21:e1:94:e7:c5:e2:9a:c8:4f:0b:06:69:a1: 28:0e:55:f6:90:5f:a6:b8:6b:01:f9:97:e7:09:f6: 3e:40:56:68:9c:cf:e4:cc:3f:d3:4f:66:6d:17:d3: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:AB:28:6C:B7:8F:35:9E:D4:2E:E1:F4:A8:81:78:5F:54:6A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:03:43:18:d1:d1:c6:87:44:e1:a9:ea:14:95:48:d8:4a:2b: f4:4f:7d:1f:0f:75:50:7f:d5:40:69:2c:17:bc:df:b2:ce:88: 32:63:66:ed:43:4b:28:52:d5:29:df:4f:9d:7d:1b:ab:6f:29: 61:1d:a4:39:cf:45:ef:a2:1e:fa:28:64:63:1a:d6:1c:3f:75: e7:45:a8:14:e5:13:88:60:0a:bb:3c:ee:0f:83:ec:3f:a6:a5: d0:d5:2c:01:9f:69:5d:c9:02:b2:0a:77:9d:b4:1d:e7:93:83: 03:0c:b2:63:20:39:c5:8d:ca:b0:48:5a:76:98:4d:f2:c1:3f: e3:b4:be:5c:af:1b:5e:47:b3:b4:76:b0:ca:ff:f6:5b:0d:0c: 3d:d4:2f:6b:6c:2e:80:29:32:35:dd:fb:94:08:d4:34:f2:e1: 2e:1b:fd:49:38:f9:3f:bf:27:12:40:05:ea:0a:a0:ef:bb:7b: 5c:f3:9c:ae:dc:55:89:51:a9:49:8a:6f:9a:75:8f:09:53:b5: 04:7b:91:b6:41:26:c6:be:bb:fe:59:36:17:d3:e6:78:cf:e4: 43:ec:83:05:ff:41:21:db:e4:68:3b:26:0f:4d:96:5f:be:3a: 95:34:76:6f:b9:1b:97:16:f9:c2:69:2a:80:5c:5c:d1:32:b9: 80:55:bf:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtwBfXUTTCtG6X3IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzAxMzAxNVoXDTI2MDEwNTAyMzAxNVowLzEtMCsGA1UEAxMk NzU5OTk3NzAtOGEwYi00Y2I0LTg2NjItOTk5ODhmZGRjZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukqmNmMG7dzhlkrEAhJLJEoobGi+6PTeXOmo KL0es8ubC1xga1YWTl5gHM7a3R6tgan/HR5muGjs7uJFV2s02BOQmVCI0vMQc/uM 9M5En848+OY2zzIcoUnfJyvPOvZbaZ3YIX9mooJc73wr3L4RQYO3GKAqtD5/TSb2 uwEPRHV+Wu8IjLe9YCnxpbKD0zrJoUckz04oyD8NQa66n1tHSsKFRJgb05wNPesq nfwpJZ7CJrPbqkrcnTJKKSMnvfV4WrVbs7fWuUo6PX9G9ksmre+sYCHhlOfF4prI TwsGaaEoDlX2kF+muGsB+ZfnCfY+QFZonM/kzD/TT2ZtF9NDSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPyXqyhst481ntQu4fSogXhfVGpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDk0N2Y3MmQtZjE3Zi0z OTIzLWE2YjQtNzNkOTY2YWI1OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwDQxjR0caHROGp6hSVSNhKK/RPfR8PdVB/1UBpLBe837LOiDJj Zu1DSyhS1SnfT519G6tvKWEdpDnPRe+iHvooZGMa1hw/dedFqBTlE4hgCrs87g+D 7D+mpdDVLAGfaV3JArIKd520HeeTgwMMsmMgOcWNyrBIWnaYTfLBP+O0vlyvG15H s7R2sMr/9lsNDD3UL2tsLoApMjXd+5QI1DTy4S4b/Uk4+T+/JxJABeoKoO+7e1zz nK7cVYlRqUmKb5p1jwlTtQR7kbZBJsa+u/5ZNhfT5njP5EPsgwX/QSHb5Gg7Jg9N ll++OpU0dm+5G5cW+cJpKoBcXNEyuYBVv5k= -----END CERTIFICATE-----Generated at Mon Oct 20 13:28:32 2025 by rpki-client