$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa File: 2b212c3f-0bb9-36d8-a389-9f219be91036.roa (raw, json) Hash identifier: 21l6OarybnlCf62djqQxB2yz29XPGpDbDiKMK1rktQo= Subject key identifier: 0B:24:E2:F9:14:D5:C0:2F:83:B2:74:A7:88:87:DF:FB:7F:EF:BC:74 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ADC00FA7D99762A095B749200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 52389 IP address blocks: 2001:470:87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fa:7d:99:76:2a:09:5b:74:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=ea6a5dc7-39e7-43dc-86ab-f92cd2f04b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:10:6a:25:73:78:22:56:ca:95:c4:1a:57: f8:cc:95:af:e2:a2:a4:8f:37:a0:34:ea:c9:d2:1f: 16:64:05:80:a3:e7:a7:73:4a:46:99:e6:91:ce:07: 1a:53:bc:2b:51:66:1a:75:3f:92:ad:69:0b:a1:99: 3d:a8:49:ce:f5:9d:21:8a:5b:2e:9c:a1:21:8d:67: e7:78:16:93:20:41:05:10:08:dd:2b:74:63:6a:40: 39:69:58:cd:65:a7:c6:04:ac:81:17:33:39:cc:03: e8:9a:de:51:f7:3e:47:d3:5e:2b:b2:cc:fd:88:a7: 4e:bc:0d:7b:55:50:4e:c4:78:d3:60:83:9d:98:9b: d1:3a:2a:a2:57:ed:46:20:45:70:b8:85:cd:b1:70: 33:48:f9:56:83:16:33:2d:f4:61:1e:30:8a:85:fc: 1d:b1:10:d6:ed:f4:ae:7b:cd:cc:e4:8a:11:52:65: f7:a1:e7:38:1d:00:8c:c2:2b:14:b9:4d:52:c8:78: 8b:64:e0:a0:11:d3:12:f4:2b:6a:0d:1a:48:e4:0f: 4e:58:5d:14:f5:48:69:01:a7:d1:18:95:0f:cc:ac: 01:1d:3b:f7:fc:ed:f6:8b:65:44:ae:03:e4:bf:f1: 84:e4:66:35:5a:89:8e:4f:17:a6:de:73:2e:d8:7c: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:E2:F9:14:D5:C0:2F:83:B2:74:A7:88:87:DF:FB:7F:EF:BC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:60:d4:df:44:2e:66:50:d2:2e:93:27:07:18:58:43:d4:42: 72:51:c9:c6:59:01:7a:fc:d8:03:c9:2d:1d:08:85:1f:ac:2b: 37:f3:20:f5:ac:c1:3b:18:a9:ad:7f:64:11:81:54:06:0a:fb: 4d:30:1d:86:d3:b6:9e:bc:79:eb:e7:e1:43:06:e0:d5:93:c8: 3c:4d:17:c3:42:ed:a8:5c:97:ba:9d:65:74:47:86:44:0f:21: 38:6c:b6:de:b5:9a:2f:85:73:29:6b:ab:41:b4:07:48:2a:72: 38:50:37:67:e4:40:ad:f3:26:9e:7a:08:64:d9:c2:23:f2:c9: bb:3c:11:44:ad:6a:0b:9f:9f:61:3a:cc:fa:74:16:e2:b1:6d: 38:3b:94:bc:32:b3:14:b6:82:7e:27:1f:e0:18:be:a1:cf:63: b1:db:08:15:2e:ce:78:41:9d:05:a6:f2:8c:76:ae:3d:3b:64: 1e:b5:09:3b:61:5f:32:2d:40:2b:11:37:7c:64:53:01:7e:c8: 97:e7:09:be:a4:92:53:0f:ed:33:7e:aa:3c:94:4a:4d:67:60: 29:74:74:79:ec:da:3a:e5:bd:4e:41:6d:e0:cf:90:36:8d:e2: 7a:b1:5e:c5:ed:64:8b:e2:a0:9e:67:55:72:9f:3e:a7:a9:d8: b1:80:29:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErcAPp9mXYqCVt0kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk ZWE2YTVkYzctMzllNy00M2RjLTg2YWItZjkyY2QyZjA0YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaYQaiVzeCJWypXEGlf4zJWv4qKkjzegNOrJ 0h8WZAWAo+enc0pGmeaRzgcaU7wrUWYadT+SrWkLoZk9qEnO9Z0hilsunKEhjWfn eBaTIEEFEAjdK3RjakA5aVjNZafGBKyBFzM5zAPomt5R9z5H014rssz9iKdOvA17 VVBOxHjTYIOdmJvROiqiV+1GIEVwuIXNsXAzSPlWgxYzLfRhHjCKhfwdsRDW7fSu e83M5IoRUmX3oec4HQCMwisUuU1SyHiLZOCgEdMS9CtqDRpI5A9OWF0U9UhpAafR GJUPzKwBHTv3/O32i2VErgPkv/GE5GY1WomOTxem3nMu2HyDBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAsk4vkU1cAvg7J0p4iH3/t/77x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmIyMTJjM2YtMGJiOS0z NmQ4LWEzODktOWYyMTliZTkxMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMFg1N9ELmZQ0i6TJwcYWEPUQnJRycZZAXr82APJLR0IhR+sKzfz IPWswTsYqa1/ZBGBVAYK+00wHYbTtp68eevn4UMG4NWTyDxNF8NC7ahcl7qdZXRH hkQPIThstt61mi+Fcylrq0G0B0gqcjhQN2fkQK3zJp56CGTZwiPyybs8EUStaguf n2E6zPp0FuKxbTg7lLwysxS2gn4nH+AYvqHPY7HbCBUuznhBnQWm8ox2rj07ZB61 CTthXzItQCsRN3xkUwF+yJfnCb6kklMP7TN+qjyUSk1nYCl0dHns2jrlvU5BbeDP kDaN4nqxXsXtZIvioJ5nVXKfPqep2LGAKf4= -----END CERTIFICATE-----Generated at Sun Oct 26 04:32:22 2025 by rpki-client