$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa File: 857f8519-5259-3051-b3a3-cbed201e7089.roa (raw, json) Hash identifier: 3UqZZKKOfof6qmhdc84rc81Gshbk0LWOInjx4vkNeuI= Subject key identifier: 5E:4C:24:A6:25:E6:76:85:E1:4D:E3:E1:43:C1:3D:82:0D:5E:45:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B785747E9C25327F9344E74E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 213291 IP address blocks: 2001:470:453::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:47:e9:c2:53:27:f9:34:4e:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=476db47e-25fe-4a8e-ab6d-9c24f6f14bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:56:d7:6e:8d:3e:59:bd:41:d8:3f:3f:e9: 04:40:3c:d3:cb:eb:1f:00:da:1d:e1:a3:dd:a0:c9: 57:28:ea:ea:3a:9c:d9:5b:d6:e8:58:c0:f3:c4:02: 30:0a:15:d8:b9:4d:1a:4e:3e:ab:a7:c3:cc:b3:b3: 98:8a:37:5f:34:34:5c:e6:a1:ff:a1:86:06:64:35: 63:9e:d7:4c:0c:4e:d9:02:56:2b:36:82:c9:80:7e: 43:1a:22:e7:96:eb:e2:a7:fb:5d:b1:0f:60:c8:93: 6b:9c:19:e7:34:47:7d:f1:44:87:ed:09:ea:69:84: 59:d5:7e:2b:1c:7d:dc:4b:11:5e:a7:95:ca:03:0c: 58:0e:3a:10:a1:75:91:14:1d:b1:33:1a:73:18:e7: fe:81:ff:72:e1:71:c8:d8:f5:67:70:1e:4a:22:14: 37:ee:58:81:98:e7:7c:25:66:1a:e1:7d:60:0e:30: 7f:de:ba:a5:15:88:ab:76:d7:22:de:7a:6e:56:83: 6a:8f:76:32:60:d2:8b:70:95:26:d9:1d:57:a6:70: 65:85:e2:1f:44:2b:09:a3:fa:34:1b:e1:1d:b0:c9: dc:e5:1f:02:ea:89:8f:73:73:94:89:cf:68:27:32: cc:47:0a:38:01:32:8f:8e:9f:c9:fd:fe:cc:ea:76: ed:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:24:A6:25:E6:76:85:E1:4D:E3:E1:43:C1:3D:82:0D:5E:45:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:453::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:50:8e:f0:d5:06:cb:5f:28:af:f1:1e:a0:77:9b:14:f1:9c: 8f:79:bd:1a:e6:9c:23:20:6c:82:60:b2:f0:b0:b7:4a:84:ca: 79:d5:46:40:fa:f6:10:c1:03:84:06:e8:59:13:ae:7a:4d:7c: ca:8e:30:7b:ac:e7:91:86:aa:ac:10:4c:46:40:bd:f2:ba:21: 81:d9:8c:67:51:eb:34:dd:2c:12:67:a7:c4:49:b9:ee:d3:b6: 07:7e:02:3b:6a:97:19:6a:a4:c0:41:2c:5a:87:d6:f9:fb:03: 6c:89:07:0c:3a:d1:81:b9:15:73:e7:c4:3d:eb:7f:fe:2a:22: 44:bb:52:6e:5d:fc:9d:72:c2:fe:6f:70:17:28:08:c2:46:94: e9:a2:c1:27:00:5b:31:05:b2:93:13:a2:a9:91:e5:6c:63:73: e4:37:7a:f5:fb:3c:5a:11:5c:ce:be:66:d7:e8:42:8e:d2:6a: 80:da:5f:06:f5:2d:85:5e:95:e2:eb:ed:2b:59:ce:8c:90:0b: 08:21:05:22:65:e7:ed:ea:30:4d:bb:ff:58:9d:3f:85:06:eb: 47:ac:56:fa:6d:70:6f:4a:30:c5:90:36:2b:6c:3e:70:5d:70: 39:c9:f9:02:77:39:26:a4:f9:45:23:08:8d:12:44:a8:c5:5d: 5f:e3:01:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V0fpwlMn+TROdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NDc2ZGI0N2UtMjVmZS00YThlLWFiNmQtOWMyNGY2ZjE0YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQRW126NPlm9Qdg/P+kEQDzTy+sfANod4aPd oMlXKOrqOpzZW9boWMDzxAIwChXYuU0aTj6rp8PMs7OYijdfNDRc5qH/oYYGZDVj ntdMDE7ZAlYrNoLJgH5DGiLnluvip/tdsQ9gyJNrnBnnNEd98USH7QnqaYRZ1X4r HH3cSxFep5XKAwxYDjoQoXWRFB2xMxpzGOf+gf9y4XHI2PVncB5KIhQ37liBmOd8 JWYa4X1gDjB/3rqlFYirdtci3npuVoNqj3YyYNKLcJUm2R1XpnBlheIfRCsJo/o0 G+EdsMnc5R8C6omPc3OUic9oJzLMRwo4ATKPjp/J/f7M6nbtwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5MJKYl5naF4U3j4UPBPYINXkVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU3Zjg1MTktNTI1OS0z MDUxLWIzYTMtY2JlZDIwMWU3MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcART MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdQjvDVBstfKK/xHqB3mxTxnI95vRrmnCMgbIJgsvCwt0qEynnV RkD69hDBA4QG6FkTrnpNfMqOMHus55GGqqwQTEZAvfK6IYHZjGdR6zTdLBJnp8RJ ue7Ttgd+AjtqlxlqpMBBLFqH1vn7A2yJBww60YG5FXPnxD3rf/4qIkS7Um5d/J1y wv5vcBcoCMJGlOmiwScAWzEFspMToqmR5Wxjc+Q3evX7PFoRXM6+ZtfoQo7SaoDa Xwb1LYVeleLr7StZzoyQCwghBSJl5+3qME27/1idP4UG60esVvptcG9KMMWQNits PnBdcDnJ+QJ3OSak+UUjCI0SRKjFXV/jARM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:53 2025 by rpki-client