$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa File: 2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa (raw, json) Hash identifier: p4iL6xhSKuhLsTe/8wNPX302ZrdAd1+07hQYyZnPK2Y= Subject key identifier: 94:44:44:15:9E:2A:9D:95:8C:3C:02:25:72:1F:9D:C4:28:3B:8B:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AFAB686FE1FA2BDFA0E94CD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 393301 IP address blocks: 2001:470:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:86:fe:1f:a2:bd:fa:0e:94:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=373e4a5a-7c36-4135-9a99-f5603253066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:cb:94:87:b1:0e:8c:aa:37:73:b3:70:e4: 7e:92:b6:da:81:64:fa:e3:bc:08:4e:63:c8:9b:77: 8c:07:0c:36:fb:ee:35:7e:e8:4d:6b:08:18:ef:3b: 2e:e6:1c:35:4d:e1:a2:ae:89:54:31:ff:30:0f:b1: ab:f5:83:47:cd:5f:54:97:79:96:34:14:c6:bb:c9: 4e:64:f1:9c:5f:42:5b:e1:0d:0c:4d:d9:14:8d:85: 0e:35:76:3d:10:f1:6a:f6:a6:ad:c3:76:b9:ac:57: 9b:8e:b9:e6:00:a6:9e:a8:04:0d:7b:22:b6:f7:f8: 42:46:0f:f9:30:76:02:f3:37:be:a2:08:68:7f:83: 69:17:e2:54:91:80:1a:3c:53:0f:37:80:b1:d1:df: 84:f1:46:82:31:49:74:e2:86:0a:23:bd:b3:46:0b: 9d:77:b3:79:2c:04:f8:b7:83:47:a1:77:b5:b3:84: 94:b1:dc:38:8c:d9:74:a4:32:e6:62:8a:31:3b:ba: 76:29:88:08:f7:cb:27:93:61:1c:a7:a3:f3:20:59: 8e:37:a6:af:62:b8:86:e8:93:b6:2d:9a:b8:34:22: 72:50:c3:fc:94:5e:f5:b5:4f:34:ed:b0:0b:e2:71: da:18:d3:9a:0d:6e:14:2d:3e:ff:ca:25:91:22:67: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:44:15:9E:2A:9D:95:8C:3C:02:25:72:1F:9D:C4:28:3B:8B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f8:70:48:3f:36:63:97:b0:cf:18:d2:0b:9d:76:84:2e:ad: 63:5d:eb:f2:21:d5:2a:be:fe:3b:8b:86:71:03:fe:f1:58:9b: 5c:52:41:36:e3:46:24:e2:2c:09:3a:ab:ce:30:a3:14:fb:8f: 71:73:92:3e:d0:73:24:40:ee:79:57:ac:01:a3:24:85:01:11: 81:e0:88:86:81:3d:ee:94:f9:fc:e7:a0:dd:2b:07:d7:70:7b: 25:53:23:d8:05:cb:c7:bc:b6:44:b7:8e:ca:25:12:23:31:e5: e0:26:3f:9b:d9:e9:9c:c8:de:5f:d2:09:ec:11:b4:d2:c8:96: 4f:81:32:97:3f:d2:db:73:6a:4b:48:2f:2a:2d:66:d3:35:f5: 7e:3a:7b:09:c7:71:75:ae:7a:8d:a2:e8:33:3a:8d:4d:85:7a: 24:93:ac:2f:f8:67:f3:56:93:43:da:80:8d:7e:bc:4f:54:f9: cb:d8:a9:60:9b:35:9a:72:1b:a4:15:ad:b7:56:15:d8:52:31: 92:3c:96:88:8e:43:e5:63:f4:05:21:fd:4d:f9:3a:ab:a2:27: 76:2a:2e:0d:25:5c:e2:d9:b4:c1:03:94:90:2e:8a:d6:4e:ec: 40:f8:b0:67:88:c3:07:e0:da:5a:1f:18:a7:24:59:7a:41:26: 19:1a:74:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr6tob+H6K9+g6UzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MzczZTRhNWEtN2MzNi00MTM1LTlhOTktZjU2MDMyNTMwNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNvLlIexDoyqN3OzcOR+krbagWT647wITmPI m3eMBww2++41fuhNawgY7zsu5hw1TeGirolUMf8wD7Gr9YNHzV9Ul3mWNBTGu8lO ZPGcX0Jb4Q0MTdkUjYUONXY9EPFq9qatw3a5rFebjrnmAKaeqAQNeyK29/hCRg/5 MHYC8ze+oghof4NpF+JUkYAaPFMPN4Cx0d+E8UaCMUl04oYKI72zRgudd7N5LAT4 t4NHoXe1s4SUsdw4jNl0pDLmYooxO7p2KYgI98snk2Ecp6PzIFmON6avYriG6JO2 LZq4NCJyUMP8lF71tU807bAL4nHaGNOaDW4ULT7/yiWRImfaXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJRERBWeKp2VjDwCJXIfncQoO4vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmNGNiMTItMTY0Mi0z YzdhLTkyMGYtZGE2NjVhY2Y0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABD4cEg/NmOXsM8Y0guddoQurWNd6/Ih1Sq+/juLhnED/vFYm1xS QTbjRiTiLAk6q84woxT7j3Fzkj7QcyRA7nlXrAGjJIUBEYHgiIaBPe6U+fznoN0r B9dweyVTI9gFy8e8tkS3jsolEiMx5eAmP5vZ6ZzI3l/SCewRtNLIlk+BMpc/0ttz aktILyotZtM19X46ewnHcXWueo2i6DM6jU2FeiSTrC/4Z/NWk0PagI1+vE9U+cvY qWCbNZpyG6QVrbdWFdhSMZI8loiOQ+Vj9AUh/U35OquiJ3YqLg0lXOLZtMEDlJAu itZO7ED4sGeIwwfg2lofGKckWXpBJhkadAE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:25 2025 by rpki-client