$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa File: d5d32de2-9673-351a-9756-5db535ff0fd6.roa (raw, json) Hash identifier: 6AvDncEdYRebITKhHnViIxFRmMZImFMiyJ7rw8rY22I= Subject key identifier: FA:7D:E4:56:69:CF:8F:F2:69:D0:79:C5:A0:B8:21:2B:C9:55:E4:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B6D2C8F7A02130E24FFBA3600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 54934 IP address blocks: 2001:470:410::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:8f:7a:02:13:0e:24:ff:ba:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=6a5a6581-8afa-4294-8925-e912c6e2bd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:42:db:a3:a5:88:34:56:4a:66:a5:00:c9: 87:55:2c:5d:cf:f6:61:bb:f4:59:c1:8c:ee:7d:c5: ab:33:35:c6:9e:c6:f7:54:c7:03:36:17:25:53:c1: aa:4f:8d:c4:6c:4c:8d:54:bb:4f:2c:80:2d:be:b1: 50:14:26:a0:d3:63:95:50:7e:75:c6:6e:15:ad:b0: 8f:b3:82:a1:a3:d3:ec:cf:7c:dd:aa:7b:0e:08:76: 30:e7:85:13:13:a3:1d:84:2e:75:ce:21:4b:e6:86: 4e:1c:03:f4:15:3a:a8:5c:a8:df:c4:76:b0:47:60: 2b:5b:f3:c8:3b:50:18:7f:45:56:2d:a0:2f:df:f7: b7:13:df:03:98:e3:76:e6:8a:59:6c:7d:b2:96:e4: c1:37:3e:d8:37:2a:5c:cc:ea:b3:94:a3:5a:2f:11: 8a:a9:8f:57:1d:51:51:15:02:cd:27:29:25:11:07: 7d:79:ba:80:5e:f4:de:fd:67:c8:b3:4a:66:1b:58: 44:d7:ed:ad:2f:48:d5:0f:f1:12:77:40:b8:70:63: 7a:ed:25:e3:ad:5b:f8:b5:75:9d:01:97:01:43:93: 1a:bf:3a:32:da:74:54:3f:0d:89:b8:4d:13:07:ad: 7f:33:e6:9b:8d:6c:f8:78:50:e0:da:f7:c2:54:0d: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7D:E4:56:69:CF:8F:F2:69:D0:79:C5:A0:B8:21:2B:C9:55:E4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d32de2-9673-351a-9756-5db535ff0fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:410::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:56:df:6d:35:50:79:0d:c1:d4:96:32:c0:25:e7:bf:2a:66: 1c:2a:d5:e4:21:7f:7f:4f:d1:18:23:d3:52:0a:e1:c5:44:b5: 24:4b:47:d2:87:d9:5f:76:32:54:0c:2a:4f:32:97:c6:2c:cd: 99:a3:26:ee:58:37:eb:84:92:dd:66:44:4e:d5:4f:8f:a4:4f: e8:aa:10:59:f4:d7:80:aa:97:77:74:5b:4a:cc:35:ea:39:10: ae:3e:23:97:6e:75:64:c6:2b:d9:de:83:99:93:92:7f:03:df: 73:25:10:78:27:c5:c5:8d:a3:a1:c5:42:30:70:8a:5f:3b:84: cc:90:8c:97:65:b0:d8:28:7d:2a:f0:7b:ca:3b:c5:dd:49:f7: 06:de:11:d2:aa:5d:b2:0d:8e:cb:c4:46:06:d2:5f:9a:d6:49: 4d:f4:71:a2:e3:09:9d:2e:4f:21:d5:f9:cf:d4:70:20:9e:6f: ea:86:5d:c3:cf:89:7b:c7:42:47:50:03:c5:28:ab:4a:45:aa: 5c:b3:c3:8c:64:5b:ab:21:32:13:45:bd:92:68:9b:0a:5b:62: 70:72:ca:f5:c1:66:2c:08:47:5b:f7:42:02:e5:2f:67:59:ea: a8:f3:1b:0f:f8:d9:0b:89:de:33:ca:05:54:b0:0c:01:d9:94: e9:c4:25:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEttLI96AhMOJP+6NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NmE1YTY1ODEtOGFmYS00Mjk0LTg5MjUtZTkxMmM2ZTJiZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhatC26OliDRWSmalAMmHVSxdz/Zhu/RZwYzu fcWrMzXGnsb3VMcDNhclU8GqT43EbEyNVLtPLIAtvrFQFCag02OVUH51xm4VrbCP s4Kho9Psz3zdqnsOCHYw54UTE6MdhC51ziFL5oZOHAP0FTqoXKjfxHawR2ArW/PI O1AYf0VWLaAv3/e3E98DmON25opZbH2yluTBNz7YNypczOqzlKNaLxGKqY9XHVFR FQLNJyklEQd9ebqAXvTe/WfIs0pmG1hE1+2tL0jVD/ESd0C4cGN67SXjrVv4tXWd AZcBQ5Mavzoy2nRUPw2JuE0TB61/M+abjWz4eFDg2vfCVA0eawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPp95FZpz4/yadB5xaC4ISvJVeRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDVkMzJkZTItOTY3My0z NTFhLTk3NTYtNWRiNTM1ZmYwZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZW3201UHkNwdSWMsAl578qZhwq1eQhf39P0Rgj01IK4cVEtSRL R9KH2V92MlQMKk8yl8YszZmjJu5YN+uEkt1mRE7VT4+kT+iqEFn014Cql3d0W0rM Neo5EK4+I5dudWTGK9neg5mTkn8D33MlEHgnxcWNo6HFQjBwil87hMyQjJdlsNgo fSrwe8o7xd1J9wbeEdKqXbINjsvERgbSX5rWSU30caLjCZ0uTyHV+c/UcCCeb+qG XcPPiXvHQkdQA8Uoq0pFqlyzw4xkW6shMhNFvZJomwpbYnByyvXBZiwIR1v3QgLl L2dZ6qjzGw/42QuJ3jPKBVSwDAHZlOnEJR4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:20 2025 by rpki-client