$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6124dfa-b7c7-38e8-9f42-1261c13b42e6.roa File: b6124dfa-b7c7-38e8-9f42-1261c13b42e6.roa (raw, json) Hash identifier: OjMc5FXrXihdgTJ9Iwu3AelmlMrl2N0iXPbjvzm3oYs= Subject key identifier: 4F:84:81:E9:79:2C:94:17:21:03:50:68:47:0F:81:7D:E9:A6:87:1C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7005EE0E47FB341906E9CB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6124dfa-b7c7-38e8-9f42-1261c13b42e6.roa Signing time: Tue 07 Oct 2025 01:30:11 +0000 ROA not before: Tue 07 Oct 2025 01:30:11 +0000 ROA not after: Mon 05 Jan 2026 02:30:11 +0000 asID: 328323 IP address blocks: 2001:470:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:05:ee:0e:47:fb:34:19:06:e9:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 7 01:30:11 2025 GMT Not After : Jan 5 02:30:11 2026 GMT Subject: CN=65072b6b-d75e-4e68-a987-3e4fe673aa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:cb:48:10:25:8e:f1:c5:2b:86:3b:70:d6: 14:07:96:a3:78:08:26:da:4f:af:f9:d3:23:e8:52: 71:3f:7c:e5:44:0e:2c:7d:56:c1:f6:3f:7b:d4:f4: 99:0a:18:e2:e2:64:9f:c0:98:62:2a:80:ba:cb:92: 83:4c:7f:f2:ae:f8:c0:5d:57:26:74:82:44:be:bb: 5f:a9:d4:3f:58:b8:c4:3e:9b:24:1a:d9:dd:1f:8f: 41:3e:25:57:40:c6:12:51:c7:da:8f:5b:61:d8:ef: c7:e2:4b:42:0e:45:5d:cc:51:ad:e7:68:3f:e0:45: e7:2a:72:09:89:76:0d:fe:b2:0a:06:f6:bf:9b:de: ca:c1:8b:f5:bb:49:97:09:f9:f0:21:4a:aa:5b:99: ca:5d:69:03:5b:34:00:34:a5:66:5f:39:02:5e:04: 98:b2:cd:b7:25:ea:40:c7:28:ba:e2:85:59:b3:74: b1:8a:28:8c:5d:5b:8d:63:a6:1f:93:70:23:40:52: 1e:e4:42:e3:65:2b:00:60:de:ce:6f:89:53:b4:f7: 5b:a4:fe:f4:68:fc:21:60:a9:04:74:de:5e:25:56: 2b:59:a7:d3:12:94:12:cf:af:9b:20:e3:bf:bd:5c: 40:f8:fa:34:d8:4c:c0:32:96:c6:8e:e5:f3:33:30: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:84:81:E9:79:2C:94:17:21:03:50:68:47:0F:81:7D:E9:A6:87:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6124dfa-b7c7-38e8-9f42-1261c13b42e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:49:45:7d:e6:1e:3d:55:c7:46:51:32:25:9b:46:5e:b1:ca: dc:b1:e7:8c:49:46:c9:b4:fb:a1:b7:53:ab:79:29:73:74:21: a8:66:f2:41:bd:d9:2f:14:f7:f8:af:76:8b:d7:f8:ec:60:0f: 5a:f5:79:25:73:73:13:4e:98:97:85:52:7a:ac:72:5f:5e:aa: e5:4d:76:e4:89:fc:95:93:73:b3:ea:45:69:03:fb:1a:5a:7a: 55:c5:ea:58:38:95:a7:a4:dd:a1:cc:bd:a6:03:09:b4:90:2c: 72:4f:7f:ef:c9:3d:b9:df:86:cd:72:10:97:34:6f:fe:f9:d1: db:f1:8f:c6:99:aa:3d:16:96:fb:17:5e:24:c4:1a:e2:48:3b: 53:98:c3:d0:95:49:0e:89:3a:1a:e6:d3:39:90:8a:b1:24:12: 12:9b:7c:ff:3a:ba:4d:eb:a6:6d:a6:e6:8c:5c:97:74:bb:b3: 42:fb:1b:2c:a3:46:4d:c0:ca:f7:21:57:3f:c9:c1:06:27:ef: 6e:cd:2f:c5:a3:6e:c9:d7:5c:1b:c3:6e:aa:ce:52:56:61:1e: a9:ce:a7:b5:da:a6:d9:58:3d:60:3e:ba:79:e5:c1:b1:9f:ab: ba:95:89:a0:12:76:1f:8e:41:13:57:e5:5c:47:aa:e9:86:72: 01:9e:8a:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtwBe4OR/s0GQbpy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNzAxMzAxMVoXDTI2MDEwNTAyMzAxMVowLzEtMCsGA1UEAxMk NjUwNzJiNmItZDc1ZS00ZTY4LWE5ODctM2U0ZmU2NzNhYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7LSBAljvHFK4Y7cNYUB5ajeAgm2k+v+dMj 6FJxP3zlRA4sfVbB9j971PSZChji4mSfwJhiKoC6y5KDTH/yrvjAXVcmdIJEvrtf qdQ/WLjEPpskGtndH49BPiVXQMYSUcfaj1th2O/H4ktCDkVdzFGt52g/4EXnKnIJ iXYN/rIKBva/m97KwYv1u0mXCfnwIUqqW5nKXWkDWzQANKVmXzkCXgSYss23JepA xyi64oVZs3SxiiiMXVuNY6Yfk3AjQFIe5ELjZSsAYN7Ob4lTtPdbpP70aPwhYKkE dN5eJVYrWafTEpQSz6+bIOO/vVxA+Po02EzAMpbGjuXzMzBOyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+Egel5LJQXIQNQaEcPgX3ppoccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjYxMjRkZmEtYjdjNy0z OGU4LTlmNDItMTI2MWMxM2I0MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdJRX3mHj1Vx0ZRMiWbRl6xytyx54xJRsm0+6G3U6t5KXN0Iahm 8kG92S8U9/ivdovX+OxgD1r1eSVzcxNOmJeFUnqscl9equVNduSJ/JWTc7PqRWkD +xpaelXF6lg4laek3aHMvaYDCbSQLHJPf+/JPbnfhs1yEJc0b/750dvxj8aZqj0W lvsXXiTEGuJIO1OYw9CVSQ6JOhrm0zmQirEkEhKbfP86uk3rpm2m5oxcl3S7s0L7 GyyjRk3AyvchVz/JwQYn727NL8WjbsnXXBvDbqrOUlZhHqnOp7XaptlYPWA+unnl wbGfq7qViaASdh+OQRNX5VxHqumGcgGeivY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:13 2025 by rpki-client