$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e33fbf6c-463f-39c6-8aab-4dee1acbce12.roa File: e33fbf6c-463f-39c6-8aab-4dee1acbce12.roa (raw, json) Hash identifier: 4erNz3RjcwVjVFPo7bs6u6ESYpEjEKZfhk1ArtQxf+k= Subject key identifier: F2:E8:56:A7:50:CA:A2:C5:85:BE:B9:2E:AB:D4:35:22:BD:0D:CA:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B821E22414086DFDD70445580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e33fbf6c-463f-39c6-8aab-4dee1acbce12.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20398 IP address blocks: 2001:470:49a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:22:41:40:86:df:dd:70:44:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cf6be031-88b9-40b5-98ca-6e3e90e55df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:32:e2:87:f1:b0:39:1b:7a:ed:45:35:09: 32:ae:db:ed:3a:ce:c9:3c:b3:bf:0d:b1:08:a7:f9: e0:74:3a:8a:39:c8:9b:f8:b7:68:51:8c:db:49:52: aa:f1:4e:0a:cf:3a:d1:37:2a:56:17:b3:54:22:c3: f8:56:36:f7:65:9f:95:4b:32:de:a5:58:a6:26:65: 9e:95:b6:73:d9:e7:38:c1:ee:da:6a:46:ff:9f:49: a2:78:db:d2:7d:00:ba:e8:7f:30:0b:aa:fd:0c:c5: 77:6e:3b:e5:eb:46:20:63:0f:77:c9:cf:96:5a:83: 2c:ca:92:b8:c5:09:07:17:d8:f2:6f:3f:f8:a3:b9: 49:9c:e2:61:3a:d1:84:d1:57:80:d6:b2:1f:36:6e: b5:8a:dd:91:07:77:ba:a2:1c:f1:39:be:1e:f8:04: 4b:b0:bf:5a:05:28:18:6b:86:e2:18:f8:d1:fa:fb: ce:29:6a:30:b7:92:ca:06:d0:13:34:1d:48:9e:54: b1:29:78:40:21:f3:26:a6:0f:7c:87:07:d6:1b:15: 8d:4b:12:43:ba:26:c5:6c:ad:ed:34:f8:71:55:0e: 7f:ce:24:c3:cc:a7:f6:8d:03:b7:2c:a1:6b:8d:fc: 86:99:96:e3:47:43:e4:91:ef:af:32:d1:d1:83:91: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E8:56:A7:50:CA:A2:C5:85:BE:B9:2E:AB:D4:35:22:BD:0D:CA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e33fbf6c-463f-39c6-8aab-4dee1acbce12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:49a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1f:b2:28:83:34:7e:0a:94:6c:29:75:59:96:e6:2c:de:f0: ae:72:69:4b:52:29:31:83:27:68:d2:fe:07:a8:1b:39:7a:15: 5b:51:f3:48:1a:cd:0c:b2:6f:4c:40:3a:0f:65:55:a0:5a:05: 21:83:44:2c:1c:be:a7:d8:91:6e:51:ff:78:1c:e8:48:fa:5a: f4:67:13:d3:be:2c:a5:b2:2e:93:0f:b2:7e:97:f1:24:a4:62: 28:52:97:be:8d:74:e9:83:7b:19:09:ad:bd:23:15:36:0b:79: 46:7c:e1:4b:40:ff:ff:76:73:93:7c:2a:cd:28:46:aa:c3:b2: 5b:96:bc:a4:f2:f4:82:c0:94:b3:cb:a6:19:d0:e6:7c:6e:36: de:7b:cb:06:4d:69:d4:b4:c6:5a:bb:a0:55:e4:f5:94:ad:3e: f5:7c:c8:1d:b9:8f:4b:c3:e6:71:3e:5f:35:fc:c1:65:5e:78: ad:1e:67:c3:77:47:46:72:66:aa:20:0b:1e:90:bf:7a:b6:1f: b8:83:44:a9:a7:c9:33:c4:92:b4:92:f8:ea:ab:89:75:cd:55: a8:96:d8:1f:c0:08:6d:f2:54:a0:15:a2:dd:0c:12:ca:ca:11: 15:2f:7b:49:aa:ba:83:c1:8e:50:1c:df:6a:84:ff:8d:9d:f6: 2a:02:36:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHiJBQIbf3XBEVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2Y2YmUwMzEtODhiOS00MGI1LTk4Y2EtNmUzZTkwZTU1ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGMy4ofxsDkbeu1FNQkyrtvtOs7JPLO/DbEI p/ngdDqKOcib+LdoUYzbSVKq8U4KzzrRNypWF7NUIsP4Vjb3ZZ+VSzLepVimJmWe lbZz2ec4we7aakb/n0mieNvSfQC66H8wC6r9DMV3bjvl60YgYw93yc+WWoMsypK4 xQkHF9jybz/4o7lJnOJhOtGE0VeA1rIfNm61it2RB3e6ohzxOb4e+ARLsL9aBSgY a4biGPjR+vvOKWowt5LKBtATNB1InlSxKXhAIfMmpg98hwfWGxWNSxJDuibFbK3t NPhxVQ5/ziTDzKf2jQO3LKFrjfyGmZbjR0Pkke+vMtHRg5EchwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLoVqdQyqLFhb65LqvUNSK9Dcq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTMzZmJmNmMtNDYzZi0z OWM2LThhYWItNGRlZTFhY2JjZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIfsiiDNH4KlGwpdVmW5ize8K5yaUtSKTGDJ2jS/geoGzl6FVtR 80gazQyyb0xAOg9lVaBaBSGDRCwcvqfYkW5R/3gc6Ej6WvRnE9O+LKWyLpMPsn6X 8SSkYihSl76NdOmDexkJrb0jFTYLeUZ84UtA//92c5N8Ks0oRqrDsluWvKTy9ILA lLPLphnQ5nxuNt57ywZNadS0xlq7oFXk9ZStPvV8yB25j0vD5nE+XzX8wWVeeK0e Z8N3R0ZyZqogCx6Qv3q2H7iDRKmnyTPEkrSS+OqriXXNVaiW2B/ACG3yVKAVot0M EsrKERUve0mquoPBjlAc32qE/42d9ioCNgI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:29:51 2025 by rpki-client