$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa File: 2628e785-3aa0-3d4c-b55f-53daa1551db8.roa (raw, json) Hash identifier: eSq0vSHL2Rtesa3qdLcDTMm1QyvL3K3yUTurusTcLwk= Subject key identifier: 89:1D:2A:E2:38:81:B4:86:48:94:41:80:60:08:DF:3A:6C:79:95:3C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B80B754E362FA210D71C76000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 39522 IP address blocks: 2001:470:32d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:54:e3:62:fa:21:0d:71:c7:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=650d97aa-0b17-485e-85c6-ed78a498bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:d3:75:68:54:1d:eb:4b:2d:61:79:90:53: 14:7b:64:3f:5b:b5:cf:49:73:5a:35:bd:0b:76:88: f2:dc:93:3d:12:94:1d:4a:0a:f5:fe:c7:bc:4e:8f: b0:00:f3:85:89:84:54:58:6f:5e:b8:f2:56:8b:d7: 5b:a7:c6:50:9b:78:4c:a2:6c:d7:6e:9d:ed:1e:6e: 50:12:ae:28:26:17:ef:d6:f8:75:dd:14:1b:4a:06: 65:04:d7:44:59:e1:48:ce:6f:7a:00:55:dc:3b:a9: 35:c2:b1:fe:b7:33:c4:ba:41:e1:cd:23:7c:ab:03: d6:b9:1e:cc:2a:e8:f0:4c:30:38:25:89:59:99:1a: 22:3a:b3:9e:6b:a3:eb:74:e4:5f:76:5d:a2:a1:8b: 4b:c5:c4:7c:a6:e9:1e:88:ad:30:bc:16:1e:00:25: 8e:e3:c8:d4:89:b4:b6:eb:80:c1:fa:6a:df:e3:05: f1:41:7b:66:f3:ba:eb:04:67:24:38:af:91:46:27: f5:9b:d6:e9:8b:6b:da:46:88:96:a8:74:d4:68:26: 0f:52:dc:2c:0c:13:8c:f4:30:08:48:ed:ff:55:24: a9:5b:a3:21:26:27:71:20:f8:80:3e:88:4c:f9:14: 04:21:2c:9c:da:ee:d7:96:45:42:93:e9:a2:24:dd: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1D:2A:E2:38:81:B4:86:48:94:41:80:60:08:DF:3A:6C:79:95:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:32d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a9:e7:69:fe:71:9f:24:06:f0:49:0b:7b:ff:34:9f:80:62: 3b:af:f5:87:b2:2e:f6:80:d6:b1:d8:31:7e:6c:99:aa:20:c1: bf:0c:a6:d5:5a:28:03:6d:0b:17:a0:0b:08:01:8e:20:cf:20: 98:f3:94:d5:13:23:75:c5:28:ac:e8:4b:52:52:9b:d0:5b:0d: fb:5e:04:d8:cd:b1:c9:b6:8c:54:31:f7:9c:1d:80:0d:22:e4: e0:5a:32:4c:9f:8d:3f:51:19:57:de:03:13:ee:64:cf:ae:8e: 7d:af:fd:02:af:90:c3:f6:f5:9c:79:50:ce:6f:64:1c:45:20: b7:e0:ad:35:49:b1:ce:ca:e0:46:7a:dc:56:75:84:e9:f2:25: 98:d9:03:10:22:25:d8:da:0d:5e:b6:20:31:54:31:44:ea:24: b8:3e:dc:32:e7:f8:f8:41:aa:a1:65:69:a9:74:6c:3f:f0:5d: 27:f5:4e:64:a0:0a:47:9f:ef:73:60:85:63:fb:62:8a:e4:f7: 0d:8d:21:84:77:be:e0:90:96:4c:e6:19:37:56:e9:9c:7d:7a: 07:bc:f5:1e:92:ac:f2:9d:5b:9f:38:02:85:cb:49:32:4e:47: 83:15:cd:d5:24:ac:be:7a:74:64:67:85:22:40:b2:30:fe:e7: 69:7a:2e:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt1TjYvohDXHHYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NjUwZDk3YWEtMGIxNy00ODVlLTg1YzYtZWQ3OGE0OThiZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLLTdWhUHetLLWF5kFMUe2Q/W7XPSXNaNb0L dojy3JM9EpQdSgr1/se8To+wAPOFiYRUWG9euPJWi9dbp8ZQm3hMomzXbp3tHm5Q Eq4oJhfv1vh13RQbSgZlBNdEWeFIzm96AFXcO6k1wrH+tzPEukHhzSN8qwPWuR7M KujwTDA4JYlZmRoiOrOea6PrdORfdl2ioYtLxcR8pukeiK0wvBYeACWO48jUibS2 64DB+mrf4wXxQXtm87rrBGckOK+RRif1m9bpi2vaRoiWqHTUaCYPUtwsDBOM9DAI SO3/VSSpW6MhJidxIPiAPohM+RQEISyc2u7XlkVCk+miJN2fjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIkdKuI4gbSGSJRBgGAI3zpseZU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjYyOGU3ODUtM2FhMC0z ZDRjLWI1NWYtNTNkYWExNTUxZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmp52n+cZ8kBvBJC3v/NJ+AYjuv9YeyLvaA1rHYMX5smaogwb8M ptVaKANtCxegCwgBjiDPIJjzlNUTI3XFKKzoS1JSm9BbDfteBNjNscm2jFQx95wd gA0i5OBaMkyfjT9RGVfeAxPuZM+ujn2v/QKvkMP29Zx5UM5vZBxFILfgrTVJsc7K 4EZ63FZ1hOnyJZjZAxAiJdjaDV62IDFUMUTqJLg+3DLn+PhBqqFlaal0bD/wXSf1 TmSgCkef73NghWP7York9w2NIYR3vuCQlkzmGTdW6Zx9ege89R6SrPKdW584AoXL STJOR4MVzdUkrL56dGRnhSJAsjD+52l6LuU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:36 2025 by rpki-client