$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9f88b99-76a9-3972-ac56-ea15f6989736.roa File: f9f88b99-76a9-3972-ac56-ea15f6989736.roa (raw, json) Hash identifier: LVXShR4SAMW6QsRjPZ/IEYX+z1xA/L7+CeX4Cpun4NY= Subject key identifier: 27:54:41:53:CE:35:99:C4:08:A3:8F:46:AE:A5:8B:5D:24:0A:48:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B901230E710191070DE925A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9f88b99-76a9-3972-ac56-ea15f6989736.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 205384 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:30:e7:10:19:10:70:de:92:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=300ee01c-d32d-4b04-af51-ea083ff22d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:6a:ae:e2:56:b7:0d:be:1c:35:16:74:19: a4:4f:8d:02:02:0a:9a:ca:6d:98:f8:47:c4:fb:8f: 34:dd:f4:26:ea:79:e6:8c:c0:2e:73:5b:b8:16:6a: d6:48:fe:12:6d:1d:b3:d3:2f:70:9c:dd:86:dc:77: 89:5d:e0:4e:33:49:84:db:2c:d5:e7:5a:26:43:1c: c7:10:a8:84:a2:11:4c:ae:cf:2e:37:52:6b:9c:cd: af:03:09:dc:3f:cb:00:85:b3:9b:28:d8:51:2c:46: 61:de:ec:bb:f6:84:ba:b2:00:04:d0:0f:2e:6f:17: ba:e4:e0:dd:2c:84:d2:e7:2b:2f:e1:03:1a:99:d7: 35:f6:e6:f8:37:31:f3:9b:20:e8:ba:dc:04:23:e9: 4c:18:70:b1:8b:3b:f5:1b:bb:a8:3a:ad:03:22:79: 78:34:bd:d6:53:c5:f3:cb:37:74:df:48:c5:fc:ca: 20:b4:98:3b:77:79:da:3f:d9:3a:7b:55:81:6b:ea: 05:3f:10:6e:35:b6:bc:23:dc:d7:d7:95:d0:0e:57: ea:af:2c:18:3b:69:4b:72:9c:a2:e6:d9:ba:65:69: cd:c7:e0:3f:0a:8e:89:79:91:7d:9a:79:b7:dd:5a: 1e:6c:0e:4f:7a:6e:88:fd:19:38:ff:18:ca:78:03: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:41:53:CE:35:99:C4:08:A3:8F:46:AE:A5:8B:5D:24:0A:48:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9f88b99-76a9-3972-ac56-ea15f6989736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:dc:78:7c:fb:ce:42:4a:dc:b5:60:d0:d8:13:36:e7:fd:0b: 1c:b7:ca:9f:1a:bf:44:32:dd:d9:15:ce:df:43:08:af:18:ba: ef:c1:9d:1f:01:a2:36:57:fa:2a:75:4c:97:07:be:57:2f:4a: e5:52:1f:db:77:bd:6e:0f:4f:40:ff:01:b3:7a:09:39:17:1b: 18:a2:62:93:c7:47:91:a4:ac:3c:24:d4:cf:3c:7d:fc:61:cf: 0f:4d:2e:50:9c:39:dc:17:1e:07:66:bf:98:11:35:85:ef:51: 15:ef:ce:af:19:85:f4:77:40:20:77:8b:4d:1f:68:63:58:ee: 0b:dc:0c:f9:28:de:12:6f:67:f8:75:98:68:26:e8:f6:88:ee: 90:99:0a:b0:41:6d:0b:3e:3d:19:32:45:3e:22:40:95:11:8c: d9:6d:63:36:0a:72:7d:f9:84:72:ed:ec:33:06:9c:8c:ad:76: 8b:0e:2e:0b:58:2f:67:a0:ba:3f:48:ca:67:6e:94:4c:fc:fa: 71:97:cd:d8:46:f3:cb:47:3f:5e:2c:79:13:1f:db:b2:62:96: a9:c9:b0:ee:95:1e:42:c0:b7:2d:ac:b5:40:c1:11:b4:ef:6a: 4c:03:05:c2:6f:b8:ec:55:8c:1c:a3:82:82:93:67:fb:bc:1e: 75:fa:70:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuQEjDnEBkQcN6SWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk MzAwZWUwMWMtZDMyZC00YjA0LWFmNTEtZWEwODNmZjIyZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja9qruJWtw2+HDUWdBmkT40CAgqaym2Y+EfE +4803fQm6nnmjMAuc1u4FmrWSP4SbR2z0y9wnN2G3HeJXeBOM0mE2yzV51omQxzH EKiEohFMrs8uN1JrnM2vAwncP8sAhbObKNhRLEZh3uy79oS6sgAE0A8ubxe65ODd LITS5ysv4QMamdc19ub4NzHzmyDoutwEI+lMGHCxizv1G7uoOq0DInl4NL3WU8Xz yzd030jF/MogtJg7d3naP9k6e1WBa+oFPxBuNba8I9zX15XQDlfqrywYO2lLcpyi 5tm6ZWnNx+A/Co6JeZF9mnm33VoebA5Pem6I/Rk4/xjKeANAMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdUQVPONZnECKOPRq6li10kCkhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjlmODhiOTktNzZhOS0z OTcyLWFjNTYtZWExNWY2OTg5NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbceHz7zkJK3LVg0NgTNuf9Cxy3yp8av0Qy3dkVzt9DCK8Yuu/B nR8BojZX+ip1TJcHvlcvSuVSH9t3vW4PT0D/AbN6CTkXGxiiYpPHR5GkrDwk1M88 ffxhzw9NLlCcOdwXHgdmv5gRNYXvURXvzq8ZhfR3QCB3i00faGNY7gvcDPko3hJv Z/h1mGgm6PaI7pCZCrBBbQs+PRkyRT4iQJURjNltYzYKcn35hHLt7DMGnIytdosO LgtYL2eguj9IymdulEz8+nGXzdhG88tHP14seRMf27JilqnJsO6VHkLAty2stUDB EbTvakwDBcJvuOxVjByjgoKTZ/u8HnX6cNo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:43 2025 by rpki-client