$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa File: 95f1b5de-c98a-3860-b4ed-db462a659e9a.roa (raw, json) Hash identifier: 2mUH7eIWDaiTZEJwfVdQPEbtxlQa0o5hjt3R4onZCCg= Subject key identifier: 8B:44:75:5A:49:C7:9F:1C:79:1A:CB:46:43:29:BD:9B:E3:8F:52:D9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B785748C88DE1EEBB0A53A8C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 26857 IP address blocks: 2001:470:494::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:48:c8:8d:e1:ee:bb:0a:53:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=529c1f7f-2a8d-4901-b038-bff2b21e73e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:ef:a9:d6:20:28:b8:5a:85:7d:10:05:65: 0e:de:9c:4e:45:2d:dc:06:7c:4c:55:8a:5c:ff:11: 02:5b:ce:af:6e:53:e7:dd:e4:10:2c:ae:21:11:08: 62:09:3c:4e:0b:47:c0:da:ec:52:1e:74:ea:63:f5: 25:a8:24:39:0d:f4:70:f3:90:d5:1d:ad:cf:c0:72: fd:e6:14:4a:68:f6:cb:05:b1:ff:a4:ba:d4:ca:58: 88:d3:be:6a:62:a9:01:5a:dd:23:e3:fa:dd:33:18: 00:9d:bf:08:df:0e:32:35:93:71:ad:9f:86:17:bf: 8b:32:f5:f7:15:fe:94:a4:99:c6:95:a6:56:17:a4: c8:17:93:07:dc:00:ff:d3:0c:fe:1a:78:34:39:8c: 72:be:65:9b:3e:f2:df:d6:52:c2:38:0d:9a:62:8a: c1:a9:49:d8:86:9e:05:f1:ae:f9:2e:6b:27:7f:2e: 28:18:52:80:a0:3f:95:05:c0:92:09:93:45:d5:59: 4b:3a:93:53:75:e0:24:85:1f:1d:19:d7:f5:32:b8: ab:19:af:00:a5:9f:d0:df:cc:9c:56:c3:74:9f:0c: cc:3b:85:80:bc:5e:79:b6:60:db:3e:6a:ec:bb:20: 60:30:10:ef:93:2b:24:99:72:bc:ab:5e:43:cc:11: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:44:75:5A:49:C7:9F:1C:79:1A:CB:46:43:29:BD:9B:E3:8F:52:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f1b5de-c98a-3860-b4ed-db462a659e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:494::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7d:93:25:44:51:07:7f:71:83:75:fe:c9:b6:c3:19:99:66: bb:80:9f:11:8b:5d:ea:1b:1b:be:d9:66:6c:21:b6:99:d0:78: 16:23:45:06:86:71:ca:17:b7:da:c6:5c:0a:38:c4:e1:74:aa: cc:3a:f3:f6:38:02:fe:6b:b9:06:fc:e1:77:38:f9:cb:cf:be: 09:7d:d6:91:f7:c2:44:6b:22:b5:31:17:64:cf:67:bc:f5:34: e7:f7:be:9b:dd:89:d8:be:f2:3a:c1:40:d9:a7:bc:35:5e:6e: 66:a5:07:05:70:6e:25:1d:b4:43:c0:f6:8c:95:82:ad:a4:b4: bb:99:52:33:ac:fc:5e:10:77:ab:d5:a1:68:ce:69:f0:c7:53: c2:c4:d0:7d:d2:9d:bd:e1:85:6b:f3:c0:d9:59:2c:94:5f:b5: 61:37:dc:44:84:79:a9:45:a0:8c:f1:ec:2e:85:9a:99:2b:31: c3:81:18:98:14:4d:84:43:07:f2:80:b9:1e:a9:56:92:a8:4f: 3f:c0:a0:a5:77:3a:f5:94:ae:a3:65:60:80:15:b1:8b:75:f6: ca:42:dd:9b:58:ef:63:cc:17:2c:4b:51:9b:9d:62:b8:bb:d8: 16:79:70:de:ec:d3:52:2d:64:e0:d3:6d:79:5e:64:fa:4b:fe: ba:dc:8d:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V0jIjeHuuwpTqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NTI5YzFmN2YtMmE4ZC00OTAxLWIwMzgtYmZmMmIyMWU3M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/fvqdYgKLhahX0QBWUO3pxORS3cBnxMVYpc /xECW86vblPn3eQQLK4hEQhiCTxOC0fA2uxSHnTqY/UlqCQ5DfRw85DVHa3PwHL9 5hRKaPbLBbH/pLrUyliI075qYqkBWt0j4/rdMxgAnb8I3w4yNZNxrZ+GF7+LMvX3 Ff6UpJnGlaZWF6TIF5MH3AD/0wz+Gng0OYxyvmWbPvLf1lLCOA2aYorBqUnYhp4F 8a75Lmsnfy4oGFKAoD+VBcCSCZNF1VlLOpNTdeAkhR8dGdf1MrirGa8ApZ/Q38yc VsN0nwzMO4WAvF55tmDbPmrsuyBgMBDvkyskmXK8q15DzBFuBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFItEdVpJx58ceRrLRkMpvZvjj1LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTVmMWI1ZGUtYzk4YS0z ODYwLWI0ZWQtZGI0NjJhNjU5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABR9kyVEUQd/cYN1/sm2wxmZZruAnxGLXeobG77ZZmwhtpnQeBYj RQaGccoXt9rGXAo4xOF0qsw68/Y4Av5ruQb84Xc4+cvPvgl91pH3wkRrIrUxF2TP Z7z1NOf3vpvdidi+8jrBQNmnvDVebmalBwVwbiUdtEPA9oyVgq2ktLuZUjOs/F4Q d6vVoWjOafDHU8LE0H3Snb3hhWvzwNlZLJRftWE33ESEealFoIzx7C6FmpkrMcOB GJgUTYRDB/KAuR6pVpKoTz/AoKV3OvWUrqNlYIAVsYt19spC3ZtY72PMFyxLUZud Yri72BZ5cN7s01ItZODTbXleZPpL/rrcjRk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:08 2025 by rpki-client