$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa File: a45e4c31-8efd-3023-9f76-b2204a6a884e.roa (raw, json) Hash identifier: gxMfA0JaqaTigycK8F9VjkZPL6LPst4a2nYbXpF/+qM= Subject key identifier: FA:3B:5D:D0:FA:A7:38:AB:9F:F2:63:9A:4A:33:DE:2C:4B:66:24:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B72D0A176669DCF0A18A25E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa Signing time: Wed 08 Oct 2025 01:30:13 +0000 ROA not before: Wed 08 Oct 2025 01:30:13 +0000 ROA not after: Tue 06 Jan 2026 02:30:13 +0000 asID: 17306 IP address blocks: 2001:470:4e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:d0:a1:76:66:9d:cf:0a:18:a2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 8 01:30:13 2025 GMT Not After : Jan 6 02:30:13 2026 GMT Subject: CN=eeaa6c59-5742-4a7a-a822-c832427d6737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:41:37:81:64:b6:99:5a:e9:cc:fb:12:e1: 6e:2b:c4:a3:8b:42:aa:ac:f8:91:5f:12:8c:a7:97: fe:d5:7a:76:78:1e:83:b0:d9:27:1f:8d:4e:a4:c3: e5:7a:86:9c:a6:a3:b3:5c:45:4f:ad:19:e8:b0:01: 04:55:7c:01:dd:95:c8:54:47:b6:cf:f7:10:1f:a3: d3:a6:18:cb:7b:c3:a4:d5:0a:ef:1f:3d:45:ca:9b: c3:3a:91:9f:5f:a5:dd:8a:9f:28:07:0d:fe:e0:c6: 2f:ae:8e:a7:10:20:23:d4:cf:91:7e:b2:42:df:72: 14:84:46:b1:b8:3e:8d:44:72:7e:ab:c7:32:f5:50: 03:af:96:be:eb:52:98:1c:36:e9:1a:28:99:15:f0: e2:49:54:5b:20:48:f8:b9:7b:61:ea:b0:af:de:fa: e4:5c:2b:09:12:bd:fd:75:8b:9e:ed:82:0c:d7:6b: e9:b3:87:c6:db:63:ca:a6:2c:08:3f:1d:4c:5c:ae: 72:b9:e0:66:52:56:18:7e:4a:da:c7:8f:6f:9a:19: cf:fb:ce:bf:53:a1:19:7c:7c:75:b7:c6:3d:e5:68: d8:b1:33:03:8f:45:fa:bb:fe:bc:80:8a:58:14:8a: 4a:c0:df:38:f6:d9:cb:24:ad:da:67:da:ca:da:e5: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3B:5D:D0:FA:A7:38:AB:9F:F2:63:9A:4A:33:DE:2C:4B:66:24:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6b:0c:40:6f:cb:ac:55:87:d9:38:83:f5:56:2c:e7:ac:c4: 7b:0e:b6:d9:ac:46:b3:66:7d:1d:c4:db:31:26:bb:f0:7d:85: 15:79:f1:be:17:51:0d:d4:4d:6f:a1:d7:53:8c:5f:ff:3d:68: 24:61:36:d5:d7:12:2b:86:06:83:46:ab:8d:5f:ed:d2:20:02: 6f:0f:48:23:d9:b4:91:e8:1e:d4:b2:1e:19:96:06:fe:b4:80: 0e:5a:80:f1:b5:8f:dd:0a:33:97:63:ca:5b:51:d2:74:4f:19: f4:69:fe:b9:20:81:13:7b:c1:7d:7b:93:6c:a7:eb:55:ee:45: 30:4b:56:30:c7:5f:4f:56:6e:88:72:8f:b3:44:cb:40:c0:60: 37:95:4e:82:07:62:b0:e0:31:70:f5:c0:8b:d7:d4:a4:a5:b8: ff:84:0b:60:2b:7a:d0:2a:45:55:df:2c:3a:b9:63:44:75:ac: bf:91:4c:a9:e7:e2:30:d7:36:81:52:ec:97:01:18:85:20:54: db:a6:26:2c:22:a7:0a:0b:46:e2:4f:67:85:52:4b:5e:a4:24: ef:fa:ac:21:50:e5:aa:8b:a5:d1:6a:9c:6e:b2:a8:eb:96:05: 48:d9:21:f6:75:43:32:84:5a:d1:b4:df:0f:09:64:07:1f:8f: 75:83:97:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEty0KF2Zp3PChiiXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwODAxMzAxM1oXDTI2MDEwNjAyMzAxM1owLzEtMCsGA1UEAxMk ZWVhYTZjNTktNTc0Mi00YTdhLWE4MjItYzgzMjQyN2Q2NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt95BN4Fktpla6cz7EuFuK8Sji0KqrPiRXxKM p5f+1Xp2eB6DsNknH41OpMPleoacpqOzXEVPrRnosAEEVXwB3ZXIVEe2z/cQH6PT phjLe8Ok1QrvHz1FypvDOpGfX6Xdip8oBw3+4MYvro6nECAj1M+RfrJC33IUhEax uD6NRHJ+q8cy9VADr5a+61KYHDbpGiiZFfDiSVRbIEj4uXth6rCv3vrkXCsJEr39 dYue7YIM12vps4fG22PKpiwIPx1MXK5yueBmUlYYfkrax49vmhnP+86/U6EZfHx1 t8Y95WjYsTMDj0X6u/68gIpYFIpKwN849tnLJK3aZ9rK2uWK/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPo7XdD6pzirn/Jjmkoz3ixLZiT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQ1ZTRjMzEtOGVmZC0z MDIzLTlmNzYtYjIyMDRhNmE4ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdrDEBvy6xVh9k4g/VWLOesxHsOttmsRrNmfR3E2zEmu/B9hRV5 8b4XUQ3UTW+h11OMX/89aCRhNtXXEiuGBoNGq41f7dIgAm8PSCPZtJHoHtSyHhmW Bv60gA5agPG1j90KM5djyltR0nRPGfRp/rkggRN7wX17k2yn61XuRTBLVjDHX09W bohyj7NEy0DAYDeVToIHYrDgMXD1wIvX1KSluP+EC2AretAqRVXfLDq5Y0R1rL+R TKnn4jDXNoFS7JcBGIUgVNumJiwipwoLRuJPZ4VSS16kJO/6rCFQ5aqLpdFqnG6y qOuWBUjZIfZ1QzKEWtG03w8JZAcfj3WDl9c= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:21 2025 by rpki-client