$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa File: 01985611-2c3c-3167-a56b-c0c85d196318.roa (raw, json) Hash identifier: 5PutqcSmn+FccjvBncdQLcTLXZhJzPCIo2HToeLsOpU= Subject key identifier: B8:22:C5:21:02:24:07:8E:29:F7:DC:59:87:83:06:F9:05:51:05:D9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BE952DD97E8554C02580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54620 IP address blocks: 2001:470:e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:be:95:2d:d9:7e:85:54:c0:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d0ce94f4-d01a-480d-8b10-8e5f5385e2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:2a:d8:29:de:27:b5:4a:65:ac:93:85:cc: 29:d4:1f:ad:16:c2:4d:e9:fe:e7:ed:ca:bd:f4:19: 6f:3e:13:79:08:d4:b3:02:98:6b:28:64:ca:06:44: 6f:9e:c4:12:36:3e:12:4f:1b:30:98:06:04:26:f7: 16:52:6b:c0:b1:2c:46:c9:1d:6a:21:05:87:1d:b2: 4b:f1:5a:0d:82:8b:2d:00:de:b9:89:e0:42:ce:1d: 12:1d:59:a2:6a:9a:72:1f:b6:98:44:4a:b1:45:de: f4:0f:be:33:f9:bd:7f:7a:74:f3:63:d5:fa:7d:62: c7:de:0f:77:01:62:cb:8e:81:89:21:c8:cf:61:14: 24:89:8d:7b:93:1a:d1:9d:8e:c1:53:74:aa:27:f6: 2a:66:65:5b:70:29:ed:3d:52:13:c4:36:08:aa:dd: 73:f8:88:e5:92:84:2c:72:50:ee:0c:7d:61:b4:07: 6c:45:76:2b:a8:2d:5a:3b:26:62:b1:be:4c:10:d3: d0:36:13:6a:4d:08:9e:e5:8c:cd:b3:ea:c1:9a:72: 9a:dc:c5:8f:b5:34:ab:c8:58:a2:73:cd:14:fc:b1: cf:69:4b:76:28:33:c9:67:d5:ee:72:1b:d5:16:5e: 7f:d8:e0:8a:01:5e:84:01:07:46:13:8b:1e:25:44: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:22:C5:21:02:24:07:8E:29:F7:DC:59:87:83:06:F9:05:51:05:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:29:a7:13:a3:32:c9:ec:5b:58:d6:7a:a0:5f:66:2c:87:5d: a9:d5:62:60:65:02:91:f9:b6:38:f4:b4:f0:71:34:74:cc:4c: 9e:a0:ec:2e:54:44:48:af:c5:0d:54:67:a4:5c:d3:ac:59:34: 2a:70:d4:d0:c8:58:96:fe:56:3e:51:70:cc:10:0d:79:d7:19: d7:fe:5b:f9:f6:ed:c2:21:63:08:e4:6c:e0:de:04:82:ec:a3: 47:a4:ed:94:93:21:06:13:b0:77:fc:9e:5b:ce:20:c6:1c:bd: 8b:80:24:1f:58:c7:eb:71:b5:14:49:75:ce:f5:c1:a6:ff:1d: 72:c5:cb:59:62:61:8b:ea:6e:38:e7:1e:63:0a:13:4b:09:f7: a0:b9:51:06:b2:fd:54:3f:a5:a3:4c:69:a0:af:6c:51:8e:f3: 84:c8:a6:9f:30:b1:89:a9:a8:65:ae:5a:66:83:13:6a:2e:a2: ee:c8:99:dd:7c:e8:db:f1:69:de:d1:32:11:84:92:63:79:b3: 1b:20:c5:3f:fe:16:cb:ac:a5:7a:5b:8c:18:4b:2f:b0:21:6b: c5:3e:9c:c8:7f:68:a9:3b:10:63:ff:36:66:b8:99:cd:3a:09: d5:74:59:ad:bc:ec:30:9a:1c:37:cc:9c:18:cc:88:56:a9:a2: 81:1d:03:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ176VLdl+hVTAJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDBjZTk0ZjQtZDAxYS00ODBkLThiMTAtOGU1ZjUzODVlMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsgq2CneJ7VKZayThcwp1B+tFsJN6f7n7cq9 9BlvPhN5CNSzAphrKGTKBkRvnsQSNj4STxswmAYEJvcWUmvAsSxGyR1qIQWHHbJL 8VoNgostAN65ieBCzh0SHVmiappyH7aYREqxRd70D74z+b1/enTzY9X6fWLH3g93 AWLLjoGJIcjPYRQkiY17kxrRnY7BU3SqJ/YqZmVbcCntPVITxDYIqt1z+IjlkoQs clDuDH1htAdsRXYrqC1aOyZisb5MENPQNhNqTQie5YzNs+rBmnKa3MWPtTSryFii c80U/LHPaUt2KDPJZ9XuchvVFl5/2OCKAV6EAQdGE4seJUQBLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgixSECJAeOKffcWYeDBvkFUQXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE5ODU2MTEtMmMzYy0z MTY3LWE1NmItYzBjODVkMTk2MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4ppxOjMsnsW1jWeqBfZiyHXanVYmBlApH5tjj0tPBxNHTMTJ6g 7C5UREivxQ1UZ6Rc06xZNCpw1NDIWJb+Vj5RcMwQDXnXGdf+W/n27cIhYwjkbODe BILso0ek7ZSTIQYTsHf8nlvOIMYcvYuAJB9Yx+txtRRJdc71wab/HXLFy1liYYvq bjjnHmMKE0sJ96C5UQay/VQ/paNMaaCvbFGO84TIpp8wsYmpqGWuWmaDE2ouou7I md186Nvxad7RMhGEkmN5sxsgxT/+FsuspXpbjBhLL7Aha8U+nMh/aKk7EGP/Nma4 mc06CdV0Wa287DCaHDfMnBjMiFapooEdAxE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:42 2025 by rpki-client