$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16bdd386-8b66-3ba0-9223-0c6bd6a3a451.roa File: 16bdd386-8b66-3ba0-9223-0c6bd6a3a451.roa (raw, json) Hash identifier: qbNYGFGp0UQUWjzhN5T6WMgdKibQ8NZbh+fkwBuRfKs= Subject key identifier: 3C:59:35:9F:C3:57:1C:24:59:48:F1:F5:20:DF:1F:BB:23:06:1C:8F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F9C4E3D8AA79A2F35300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16bdd386-8b66-3ba0-9223-0c6bd6a3a451.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 400318 IP address blocks: 2001:470:2f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f9:c4:e3:d8:aa:79:a2:f3:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=51d80387-7245-46bc-a82b-17348609bdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:99:d2:50:22:0c:48:b4:c0:57:eb:e1:cf: d8:89:55:ed:f7:3c:7f:fc:14:a6:ef:f9:43:90:04: 4b:5c:02:a0:48:24:db:b7:a6:aa:bd:bd:b1:ad:bb: a0:65:db:4b:37:a1:e4:9d:67:32:64:2f:16:13:b9: 42:45:88:ac:e1:2f:4b:6d:8d:29:06:bc:63:15:73: a7:ba:a5:43:6b:97:78:26:cd:78:c0:4e:11:4e:0b: 6e:22:99:94:c1:08:62:c8:66:48:91:5a:8c:fa:0f: 37:8a:65:53:9e:99:fe:d7:aa:9a:88:be:a3:5f:16: e5:da:1c:97:d6:fe:af:fe:ea:db:e5:98:93:e4:b3: 53:0f:73:92:9a:6a:d7:ba:be:ce:e9:35:66:32:05: 25:9d:ab:fe:72:6d:dc:40:12:ee:15:47:ae:20:45: 36:62:cc:af:5a:87:3f:07:4a:8a:e3:d1:c7:77:5a: 35:22:cf:5e:30:b9:ef:f6:80:da:aa:73:1b:3b:2b: 1d:db:d0:56:1e:a6:c6:91:bf:74:bc:82:e1:99:2a: 6e:9c:54:54:30:93:ee:66:48:ea:cb:b1:49:55:ff: 25:da:09:a2:be:84:fa:5c:d6:79:06:88:4e:05:b3: 90:53:fe:93:0c:d4:27:df:9b:43:a7:23:42:66:36: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:35:9F:C3:57:1C:24:59:48:F1:F5:20:DF:1F:BB:23:06:1C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16bdd386-8b66-3ba0-9223-0c6bd6a3a451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c7:04:4b:d7:4d:2a:4f:82:df:7e:80:21:06:5a:b0:f9:d5: 81:d0:67:33:33:f6:ef:29:a1:bf:4a:1e:f2:71:e2:04:23:a2: 44:ac:15:5d:2f:b0:21:52:cc:df:0b:be:fc:e1:cd:35:c9:f9: 40:c9:12:3d:d3:3f:38:8f:5a:8f:62:c3:da:49:06:9f:4e:72: e3:82:52:ba:52:52:73:65:97:32:33:db:dc:3e:c3:99:95:cb: f0:69:a1:19:64:4c:3c:00:45:56:27:bd:f9:37:cd:23:59:b4: 3b:3a:b4:ed:f5:d5:c5:13:57:ca:e7:71:63:81:7f:b4:de:33: 90:c5:8d:3c:7f:da:45:75:92:10:80:ef:49:69:20:e7:c0:dd: bb:1c:d4:9d:4d:5d:65:9c:17:ab:b4:67:1c:d4:10:0c:85:fd: b7:7a:51:df:1a:19:e5:c3:c6:71:72:27:eb:9a:f5:f8:ed:75: a6:9e:b2:5d:12:97:32:0d:a4:6c:97:a0:a3:de:91:af:4b:21: 71:63:5e:ad:c4:e0:31:fe:da:27:51:97:fb:42:cd:7c:74:cf: 45:ee:b2:d1:9a:4a:cb:c4:9b:3c:e4:ac:93:ed:d0:7d:aa:62: 66:f4:48:6d:de:6b:08:13:fb:27:11:cd:d7:21:00:1a:65:be: 44:fd:15:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/nE49iqeaLzUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTFkODAzODctNzI0NS00NmJjLWE4MmItMTczNDg2MDliZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w6Z0lAiDEi0wFfr4c/YiVXt9zx//BSm7/lD kARLXAKgSCTbt6aqvb2xrbugZdtLN6HknWcyZC8WE7lCRYis4S9LbY0pBrxjFXOn uqVDa5d4Js14wE4RTgtuIpmUwQhiyGZIkVqM+g83imVTnpn+16qaiL6jXxbl2hyX 1v6v/urb5ZiT5LNTD3OSmmrXur7O6TVmMgUlnav+cm3cQBLuFUeuIEU2YsyvWoc/ B0qK49HHd1o1Is9eMLnv9oDaqnMbOysd29BWHqbGkb90vILhmSpunFRUMJPuZkjq y7FJVf8l2gmivoT6XNZ5BohOBbOQU/6TDNQn35tDpyNCZjbUBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxZNZ/DVxwkWUjx9SDfH7sjBhyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTZiZGQzODYtOGI2Ni0z YmEwLTkyMjMtMGM2YmQ2YTNhNDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITHBEvXTSpPgt9+gCEGWrD51YHQZzMz9u8pob9KHvJx4gQjokSs FV0vsCFSzN8LvvzhzTXJ+UDJEj3TPziPWo9iw9pJBp9OcuOCUrpSUnNllzIz29w+ w5mVy/BpoRlkTDwARVYnvfk3zSNZtDs6tO311cUTV8rncWOBf7TeM5DFjTx/2kV1 khCA70lpIOfA3bsc1J1NXWWcF6u0ZxzUEAyF/bd6Ud8aGeXDxnFyJ+ua9fjtdaae sl0SlzINpGyXoKPeka9LIXFjXq3E4DH+2idRl/tCzXx0z0XustGaSsvEmzzkrJPt 0H2qYmb0SG3eawgT+ycRzdchABplvkT9FRs= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:16 2025 by rpki-client