$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa File: 9a280199-671e-3015-85af-6f8e964d86e3.roa (raw, json) Hash identifier: DO0N9RgdegjTFwvyrmpKEsgR7hsF7++7vxoQiYKk6EI= Subject key identifier: 2F:7B:51:1E:E9:E5:59:8C:8B:19:E6:32:E2:78:08:8D:08:75:DB:56 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B92DD877AD114D60C1F0F6400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 62371 IP address blocks: 2001:470:325::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:87:7a:d1:14:d6:0c:1f:0f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=2bb77a73-5647-409e-96e0-e04b0a9c4d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:26:20:5e:f6:b2:cf:87:ea:ac:1f:f1:cd:52: e7:75:91:72:7d:72:6f:51:9f:cf:ef:6a:3d:6a:b8: 0b:12:07:c9:6e:d5:06:e8:e8:83:53:35:d7:dd:9b: 65:de:7b:bf:9c:ca:4a:ae:66:de:c8:ca:10:35:12: 42:39:ca:4f:da:25:95:44:f8:d7:b4:e5:0a:2e:f4: 68:51:ad:8d:d7:13:3a:08:95:bc:d9:cd:19:b4:91: 24:2c:65:81:f9:31:c0:a6:d6:72:a1:39:68:0a:bd: 97:6b:54:2c:ad:fa:b7:6a:69:93:b1:b7:e0:0d:b3: 0a:39:62:14:0b:fd:7d:82:64:42:62:60:38:cd:77: 74:71:e7:cb:39:6d:bd:a3:6a:47:8b:7b:fd:db:b5: 82:a8:09:70:a1:67:f0:d5:2a:59:58:ab:49:68:00: 53:1c:7f:2a:97:d4:33:7d:88:ea:c4:89:72:4d:1d: b9:c9:06:e5:0e:71:ed:03:77:85:e7:24:48:31:26: f8:c2:11:54:23:f4:d1:7a:35:7e:77:91:33:81:32: b4:fa:88:f3:13:0b:6e:d0:3f:4a:9f:29:63:18:fe: f9:82:df:55:d3:3f:71:67:d2:26:92:81:cd:48:ca: 1b:f1:a0:ba:a5:0f:e8:f1:b6:d2:6f:9e:da:84:36: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7B:51:1E:E9:E5:59:8C:8B:19:E6:32:E2:78:08:8D:08:75:DB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:325::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:aa:28:7c:14:0c:52:ac:b4:cb:19:04:04:5f:76:5f:86:2a: 3b:94:d0:5c:4c:b2:22:58:26:45:8e:f3:4f:04:0b:80:ae:78: 1c:28:e2:61:29:8f:3a:09:f1:87:eb:dd:2c:44:99:69:9d:95: 6e:4c:9f:f6:d5:d0:66:ae:2e:cf:f2:ba:3b:d7:e4:74:59:b2: b3:95:9a:0e:6a:ed:17:54:9a:ca:ef:8b:43:54:8b:92:dd:af: 88:96:15:a0:1d:4d:cf:b4:82:18:29:f3:9a:2a:06:c2:6a:9c: cf:81:31:19:a9:89:a7:18:52:03:d2:92:96:3c:8b:ea:ca:63: fc:b1:c4:0f:a6:9e:84:42:9b:62:86:3c:1d:07:1d:fc:c9:bc: b7:74:d5:d2:4e:76:92:ec:1e:b0:07:77:82:9f:cb:9c:44:9a: 69:2a:21:eb:1d:de:ed:a8:33:08:79:9e:44:e6:5e:4f:d6:b2: 35:d3:ae:6e:45:b2:a7:53:98:f0:51:9c:7c:2d:13:42:ac:1f: 1d:1f:a7:84:3e:92:99:4d:52:26:4b:cb:35:fc:2c:61:f0:30: 57:eb:8d:57:66:96:d7:99:3d:7d:61:ec:74:6e:4f:57:3d:d4: f0:6f:79:12:31:75:9e:de:a2:f6:f4:68:e4:cb:87:4f:7c:82: a3:75:33:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuS3Yd60RTWDB8PZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MmJiNzdhNzMtNTY0Ny00MDllLTk2ZTAtZTA0YjBhOWM0ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiYgXvayz4fqrB/xzVLndZFyfXJvUZ/P72o9 argLEgfJbtUG6OiDUzXX3Ztl3nu/nMpKrmbeyMoQNRJCOcpP2iWVRPjXtOUKLvRo Ua2N1xM6CJW82c0ZtJEkLGWB+THAptZyoTloCr2Xa1Qsrfq3ammTsbfgDbMKOWIU C/19gmRCYmA4zXd0cefLOW29o2pHi3v927WCqAlwoWfw1SpZWKtJaABTHH8ql9Qz fYjqxIlyTR25yQblDnHtA3eF5yRIMSb4whFUI/TRejV+d5EzgTK0+ojzEwtu0D9K nyljGP75gt9V0z9xZ9ImkoHNSMob8aC6pQ/o8bbSb57ahDaaJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC97UR7p5VmMixnmMuJ4CI0IddtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWEyODAxOTktNjcxZS0z MDE1LTg1YWYtNmY4ZTk2NGQ4NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAKqKHwUDFKstMsZBARfdl+GKjuU0FxMsiJYJkWO808EC4CueBwo 4mEpjzoJ8Yfr3SxEmWmdlW5Mn/bV0GauLs/yujvX5HRZsrOVmg5q7RdUmsrvi0NU i5Ldr4iWFaAdTc+0ghgp85oqBsJqnM+BMRmpiacYUgPSkpY8i+rKY/yxxA+mnoRC m2KGPB0HHfzJvLd01dJOdpLsHrAHd4Kfy5xEmmkqIesd3u2oMwh5nkTmXk/WsjXT rm5FsqdTmPBRnHwtE0KsHx0fp4Q+kplNUiZLyzX8LGHwMFfrjVdmlteZPX1h7HRu T1c91PBveRIxdZ7eovb0aOTLh098gqN1M9M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:17 2025 by rpki-client