$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d73f7b1d-6cd1-3f76-89d2-1817d4f5d32e.roa File: d73f7b1d-6cd1-3f76-89d2-1817d4f5d32e.roa (raw, json) Hash identifier: puBsxxHX6bjESJw1TLG5NbAhnl6QZrn9VaM9BbqZwBc= Subject key identifier: EA:C1:EE:C1:85:9F:E0:C3:D7:ED:89:E6:D6:7E:06:D2:AF:D8:A5:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7B21F1CDB7EEB804FCC41780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d73f7b1d-6cd1-3f76-89d2-1817d4f5d32e.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 33986 IP address blocks: 2001:470:455::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f1:cd:b7:ee:b8:04:fc:c4:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=c3a89a57-1b9f-40eb-9a31-62f6b7761632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:5b:8d:02:b9:32:36:10:80:a7:a0:f1:a4: d5:90:bd:55:73:92:d3:28:27:fe:c4:78:33:a0:2f: a3:60:b6:25:73:54:7f:f3:d2:31:58:e9:5c:44:8a: 23:d3:bd:e8:fc:91:fb:87:20:33:b7:21:9b:8c:02: 16:69:e9:1b:6b:10:18:6c:0e:2f:ac:f0:f5:31:73: 1a:a0:76:a8:f5:57:e7:59:0a:81:fc:bc:1a:88:85: e2:a2:26:e9:21:32:9c:bb:e6:35:60:9b:a9:96:3b: 55:2f:83:64:5d:1e:7a:6c:08:20:7a:a9:9f:fd:dd: 0d:a4:ae:85:2c:d3:c8:a4:3d:d8:72:94:79:51:e7: 58:12:51:11:8d:e5:27:c1:70:9e:46:80:69:f4:da: 03:44:fc:79:92:c6:56:8c:e2:f6:16:b6:52:82:18: c5:6d:7d:ae:d3:6f:74:f9:76:31:f8:1f:0b:18:58: 9e:cf:8a:a5:82:27:57:36:63:b9:51:c8:47:a5:22: 32:55:29:b3:ca:7c:61:8f:0f:b4:33:fe:ce:b2:43: 01:0a:ad:0e:e0:fe:38:2f:81:77:42:be:e8:71:ee: 16:ab:b1:c1:08:fb:94:a3:b5:2a:37:8d:97:20:c6: c1:79:1c:40:89:98:4e:96:d6:11:ff:47:32:76:2c: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:EE:C1:85:9F:E0:C3:D7:ED:89:E6:D6:7E:06:D2:AF:D8:A5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d73f7b1d-6cd1-3f76-89d2-1817d4f5d32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:455::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ed:77:ed:5a:3b:3f:6d:54:13:3c:07:f4:ff:09:f6:a6:34: 65:e7:1c:0c:de:f3:a4:ba:8f:f3:4f:4a:e9:3a:80:e1:bc:fa: 1d:1e:99:68:4a:5e:a4:e4:7e:f0:d8:01:10:62:52:3f:48:0e: 52:43:eb:45:c0:be:26:87:33:4f:0f:d8:0e:21:12:d7:b1:c2: 37:1f:0c:fc:8b:39:c2:1d:9f:46:12:86:b1:eb:d4:ae:f6:56: 6b:2d:1f:20:c7:fa:98:f3:69:bd:e7:fa:5a:a1:c3:70:b3:d7: b3:07:5b:a3:35:fa:51:b9:f2:b3:8a:bb:ef:44:cc:a3:c7:3c: 66:c9:d3:7a:f9:76:f3:7d:f9:d7:32:aa:76:e2:bf:ad:86:41: b6:3d:17:1a:6e:95:7e:ed:71:64:08:19:ec:fb:e4:5f:d1:fd: 74:0f:c8:9a:7e:0a:e3:f0:c1:48:ae:3f:69:7c:ac:8d:01:93: ed:dd:5e:79:b8:cf:e3:5d:ef:ca:bc:ec:72:7d:ab:1d:27:5a: 53:3d:95:16:2e:18:f3:07:ac:15:ed:5e:5e:50:b0:af:51:fb: 2f:dc:85:0c:69:fe:68:33:78:f2:95:37:02:66:c7:10:7a:32: 74:2d:08:ad:bb:c2:0c:a6:95:61:5e:29:a8:32:77:c7:5c:f6: b4:cc:2e:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt7IfHNt+64BPzEF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YzNhODlhNTctMWI5Zi00MGViLTlhMzEtNjJmNmI3NzYxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhbjQK5MjYQgKeg8aTVkL1Vc5LTKCf+xHgz oC+jYLYlc1R/89IxWOlcRIoj073o/JH7hyAztyGbjAIWaekbaxAYbA4vrPD1MXMa oHao9VfnWQqB/LwaiIXioibpITKcu+Y1YJupljtVL4NkXR56bAggeqmf/d0NpK6F LNPIpD3YcpR5UedYElERjeUnwXCeRoBp9NoDRPx5ksZWjOL2FrZSghjFbX2u0290 +XYx+B8LGFiez4qlgidXNmO5UchHpSIyVSmzynxhjw+0M/7OskMBCq0O4P44L4F3 Qr7oce4Wq7HBCPuUo7UqN42XIMbBeRxAiZhOltYR/0cydiyaHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrB7sGFn+DD1+2J5tZ+BtKv2KWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDczZjdiMWQtNmNkMS0z Zjc2LTg5ZDItMTgxN2Q0ZjVkMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA7td+1aOz9tVBM8B/T/CfamNGXnHAze86S6j/NPSuk6gOG8+h0e mWhKXqTkfvDYARBiUj9IDlJD60XAviaHM08P2A4hEtexwjcfDPyLOcIdn0YShrHr 1K72VmstHyDH+pjzab3n+lqhw3Cz17MHW6M1+lG58rOKu+9EzKPHPGbJ03r5dvN9 +dcyqnbiv62GQbY9FxpulX7tcWQIGez75F/R/XQPyJp+CuPwwUiuP2l8rI0Bk+3d Xnm4z+Nd78q87HJ9qx0nWlM9lRYuGPMHrBXtXl5QsK9R+y/chQxp/mgzePKVNwJm xxB6MnQtCK27wgymlWFeKagyd8dc9rTMLig= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:52 2025 by rpki-client