$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8187fcd1-4bc4-320c-9875-e62700c4f05b.roa File: 8187fcd1-4bc4-320c-9875-e62700c4f05b.roa (raw, json) Hash identifier: nLiLwac4QMxxPIdy88T1k6Y6L6UnrUnwe9067m4uSGc= Subject key identifier: 32:1E:BB:DE:F1:CB:E5:5F:EF:B7:F5:D2:D9:D6:6F:2D:72:36:03:3B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7005F2BAA625265DD650C758 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8187fcd1-4bc4-320c-9875-e62700c4f05b.roa Signing time: Tue 07 Oct 2025 01:30:13 +0000 ROA not before: Tue 07 Oct 2025 01:30:13 +0000 ROA not after: Mon 05 Jan 2026 02:30:13 +0000 asID: 393474 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:05:f2:ba:a6:25:26:5d:d6:50:c7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 01:30:13 2025 GMT Not After : Jan 5 02:30:13 2026 GMT Subject: CN=1b2296df-7a30-4b38-9df1-c06fc53e0289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3a:db:57:81:42:d3:d7:56:37:a6:0f:00:3f: 53:0b:98:97:2d:49:06:c2:a2:c5:6f:d6:2b:d9:3c: 69:2c:79:d7:60:88:f2:fd:53:37:1f:54:5a:1a:a3: 75:45:2e:65:62:d1:f9:bf:00:0c:3f:f1:b1:5a:25: 75:63:53:22:d0:de:29:1a:b1:e3:f1:26:83:d2:d1: 41:d1:6f:11:7f:42:3c:33:f4:c9:5b:10:19:73:a0: 9b:8f:72:8c:68:db:af:a9:de:97:32:c0:40:ba:dd: c3:1b:13:f8:7c:f0:e9:31:ef:d8:b1:90:9b:ee:72: 0b:49:b9:b7:57:ce:46:af:37:81:9b:e4:5c:8a:13: df:e6:2e:6d:7b:d6:a5:d8:62:3a:cc:3d:d4:c5:6d: 53:c1:46:c2:2f:58:98:5e:5b:84:e5:0b:06:13:6b: 6b:95:f5:16:03:b7:6c:42:e9:4f:9d:d5:ed:ed:99: 0d:3b:cd:32:15:99:d7:ad:89:52:bd:df:f1:54:f0: a4:18:b1:5c:7d:21:c8:15:21:b4:15:a6:c0:62:70: 74:51:9a:10:66:b7:8a:b9:6c:57:4b:6f:89:cd:02: d3:38:27:32:56:c4:c9:b3:c5:3f:19:61:9d:61:0f: 19:a3:7c:be:44:29:bb:58:29:60:1a:12:f0:31:56: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:BB:DE:F1:CB:E5:5F:EF:B7:F5:D2:D9:D6:6F:2D:72:36:03:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8187fcd1-4bc4-320c-9875-e62700c4f05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e3:17:ea:98:56:a8:c0:85:45:21:04:8f:d4:3d:3c:50:97: f5:1a:68:b5:58:7b:be:da:84:09:97:1f:5c:dd:49:d5:f7:28: bc:7c:d9:e6:43:dd:fa:27:99:c6:15:9d:90:9f:ef:8d:ba:28: e2:9d:60:50:f7:32:bd:81:c5:0e:e9:7a:b6:a5:32:73:b7:93: 40:3d:5b:ac:7d:c7:23:39:5e:fd:db:dd:8b:29:f0:88:12:6e: ae:09:58:cb:5e:f5:9a:7f:ee:30:68:cc:35:45:f5:57:91:08: d4:28:f7:c3:7c:32:f3:b6:5d:ee:3d:aa:99:93:f4:35:f8:83: 15:51:27:42:e0:4e:1a:e3:67:83:bf:d8:59:db:51:5d:2a:dd: b4:02:44:32:29:e7:62:07:36:1d:77:20:25:9b:42:b2:91:87: 07:9f:79:d2:32:26:84:33:29:13:6f:4d:74:08:62:d7:b2:db: f0:dc:b6:1c:ec:77:14:d3:3b:f3:03:02:c4:c2:b0:9b:41:ec: 73:70:4b:e5:73:e0:fa:b5:5f:d3:a6:0d:29:bf:d6:8c:26:a8: 27:3e:68:02:a9:70:60:a6:a5:3f:10:4f:e3:52:0b:7e:b5:4e: 7f:be:7b:af:e0:cf:73:6d:9e:b5:13:13:f3:98:4c:48:06:bd: 7b:f4:be:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtwBfK6piUmXdZQx1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzAxMzAxM1oXDTI2MDEwNTAyMzAxM1owLzEtMCsGA1UEAxMk MWIyMjk2ZGYtN2EzMC00YjM4LTlkZjEtYzA2ZmM1M2UwMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDrbV4FC09dWN6YPAD9TC5iXLUkGwqLFb9Yr 2TxpLHnXYIjy/VM3H1RaGqN1RS5lYtH5vwAMP/GxWiV1Y1Mi0N4pGrHj8SaD0tFB 0W8Rf0I8M/TJWxAZc6Cbj3KMaNuvqd6XMsBAut3DGxP4fPDpMe/YsZCb7nILSbm3 V85GrzeBm+RcihPf5i5te9al2GI6zD3UxW1TwUbCL1iYXluE5QsGE2trlfUWA7ds QulPndXt7ZkNO80yFZnXrYlSvd/xVPCkGLFcfSHIFSG0FabAYnB0UZoQZreKuWxX S2+JzQLTOCcyVsTJs8U/GWGdYQ8Zo3y+RCm7WClgGhLwMVa9nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDIeu97xy+Vf77f10tnWby1yNgM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODE4N2ZjZDEtNGJjNC0z MjBjLTk4NzUtZTYyNzAwYzRmMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXjF+qYVqjAhUUhBI/UPTxQl/UaaLVYe77ahAmXH1zdSdX3KLx8 2eZD3fonmcYVnZCf7426KOKdYFD3Mr2BxQ7peralMnO3k0A9W6x9xyM5Xv3b3Ysp 8IgSbq4JWMte9Zp/7jBozDVF9VeRCNQo98N8MvO2Xe49qpmT9DX4gxVRJ0LgThrj Z4O/2FnbUV0q3bQCRDIp52IHNh13ICWbQrKRhwefedIyJoQzKRNvTXQIYtey2/Dc thzsdxTTO/MDAsTCsJtB7HNwS+Vz4Pq1X9OmDSm/1owmqCc+aAKpcGCmpT8QT+NS C361Tn++e6/gz3NtnrUTE/OYTEgGvXv0vuw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:13 2025 by rpki-client