$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa File: 2aad4a91-5495-31e8-986a-7b1dd49c242d.roa (raw, json) Hash identifier: F6VIbOHSB5pHkBQUiZ/D0uHlhUTGTiHdf2ebQSSBwbY= Subject key identifier: D4:92:D7:7A:D5:D7:3D:49:5D:FD:DD:42:C6:4D:2C:B7:48:0A:3A:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F89A35DAE91380A35180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 24534 IP address blocks: 2001:470:2d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f8:9a:35:da:e9:13:80:a3:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=78581999-bf22-4ac3-a5cd-b0a612aa4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:81:38:02:44:56:a5:b2:8f:17:8c:32:5e: 29:23:e6:a2:ee:9a:97:f7:3a:06:df:ef:3d:33:29: 4c:16:20:e6:f2:4f:78:89:f8:99:ff:4a:d9:cd:56: 02:62:0c:2a:7c:cc:d4:19:4a:24:43:e9:ba:f8:e8: 52:4d:d9:08:37:3c:a2:9b:0c:5b:c3:1d:f4:a4:35: 95:83:7a:69:5a:bc:18:5f:f0:5b:9f:15:c6:a9:e1: 69:55:68:3b:5e:ab:5f:fd:b8:b7:45:1c:36:35:a3: 30:51:2c:5e:6c:4a:d9:0d:80:4b:fb:03:28:c2:65: 65:29:9b:27:3c:3c:dd:c6:0c:c4:0f:99:bb:08:c0: f5:05:55:69:02:d9:5c:6d:5b:d5:ab:66:11:19:41: c1:02:42:d1:69:c7:e4:40:76:b7:03:60:be:3c:b9: fd:ca:ef:80:79:2e:af:e4:26:5b:87:21:96:0a:ac: 6b:d3:76:7b:a0:2a:57:cd:d8:13:4f:a1:92:91:12: 1c:75:99:a6:45:85:6a:bb:df:ab:d2:1f:75:e4:16: 89:72:ee:f4:57:4a:08:c4:cf:78:f3:1d:96:71:4e: 59:bb:53:11:4f:7a:91:1c:5d:f3:30:90:fe:9f:ed: f3:06:b8:ca:5b:77:5d:00:b4:9c:3d:2e:a1:fd:1e: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:D7:7A:D5:D7:3D:49:5D:FD:DD:42:C6:4D:2C:B7:48:0A:3A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2aad4a91-5495-31e8-986a-7b1dd49c242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:70:ee:bd:76:b1:48:4b:42:ab:42:0b:2a:93:6f:f8:7c:3d: 2e:4f:74:6b:ac:f2:71:6f:d1:37:ba:d9:e5:89:a4:7e:4f:c3: 8e:8e:89:7e:d6:47:13:dd:b1:4f:6d:3f:24:c1:5a:81:8b:fe: 8e:11:30:9a:16:b2:9c:b9:e1:86:0b:29:57:a1:1c:b8:e9:7f: a8:14:54:8d:fc:1a:2d:3c:e2:9f:31:b7:e1:ec:fb:1a:95:c5: 3b:ac:14:3c:ed:25:ce:95:c2:e9:89:46:67:06:e3:47:a5:62: 34:74:94:1c:61:45:fc:bf:b0:af:0b:f8:8b:84:0d:7d:24:e2: 5d:46:9a:8a:59:60:b0:da:52:d1:43:d4:9d:68:ea:0a:f4:1f: 7c:7c:e5:91:17:ae:ca:36:4e:b7:db:85:cd:e6:b7:60:d3:63: c6:ff:aa:eb:c9:27:87:c9:02:fe:be:9a:4e:ac:c7:f2:53:e6: 87:57:1e:aa:57:52:9c:ee:03:7f:ea:2b:e9:e9:6d:91:3a:49: eb:b2:fa:25:5c:9f:c4:75:eb:35:5b:f2:60:90:ab:27:6b:81: 66:e8:b4:80:42:b1:17:dc:63:48:bb:9d:a5:58:c6:ea:e6:ab: dd:62:be:67:f2:4f:12:72:68:53:a8:7b:1a:5e:d1:72:91:2a: c0:63:f8:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/iaNdrpE4CjUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Nzg1ODE5OTktYmYyMi00YWMzLWE1Y2QtYjBhNjEyYWE0MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxyBOAJEVqWyjxeMMl4pI+ai7pqX9zoG3+89 MylMFiDm8k94ifiZ/0rZzVYCYgwqfMzUGUokQ+m6+OhSTdkINzyimwxbwx30pDWV g3ppWrwYX/BbnxXGqeFpVWg7Xqtf/bi3RRw2NaMwUSxebErZDYBL+wMowmVlKZsn PDzdxgzED5m7CMD1BVVpAtlcbVvVq2YRGUHBAkLRacfkQHa3A2C+PLn9yu+AeS6v 5CZbhyGWCqxr03Z7oCpXzdgTT6GSkRIcdZmmRYVqu9+r0h915BaJcu70V0oIxM94 8x2WcU5Zu1MRT3qRHF3zMJD+n+3zBrjKW3ddALScPS6h/R5ShwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSS13rV1z1JXf3dQsZNLLdICjpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmFhZDRhOTEtNTQ5NS0z MWU4LTk4NmEtN2IxZGQ0OWMyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK5w7r12sUhLQqtCCyqTb/h8PS5PdGus8nFv0Te62eWJpH5Pw46O iX7WRxPdsU9tPyTBWoGL/o4RMJoWspy54YYLKVehHLjpf6gUVI38Gi084p8xt+Hs +xqVxTusFDztJc6VwumJRmcG40elYjR0lBxhRfy/sK8L+IuEDX0k4l1GmopZYLDa UtFD1J1o6gr0H3x85ZEXrso2Trfbhc3mt2DTY8b/quvJJ4fJAv6+mk6sx/JT5odX HqpXUpzuA3/qK+npbZE6Seuy+iVcn8R16zVb8mCQqydrgWbotIBCsRfcY0i7naVY xurmq91ivmfyTxJyaFOoexpe0XKRKsBj+Aw= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:38 2025 by rpki-client