$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa File: 2e54a944-730a-34d7-b327-ded75ab93832.roa (raw, json) Hash identifier: U+LgxRFQBgJKWsffSFM2yXJp+cCfb5EloN+MlTkwVXA= Subject key identifier: 50:D3:A5:38:EF:3E:6D:B4:B1:11:BB:79:75:1B:91:B4:BA:99:9C:BA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F2AE8272DBA164376080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 44209 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f2:ae:82:72:db:a1:64:37:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=db254dea-c43a-4154-9ce3-a3e3a2a24bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:c7:3c:d7:47:e2:0a:ef:3d:d6:27:1d:fe: ca:ab:0c:bd:aa:26:32:0e:93:c6:df:35:ca:be:08: 96:9f:02:9a:ce:a4:fc:81:fc:50:2c:84:f2:16:7f: f5:4f:21:26:bf:dd:b0:c9:1b:98:74:8f:45:b5:28: 69:b4:9e:b1:c7:c1:7d:3c:69:7a:c8:4d:41:fb:78: 31:0b:7e:d0:18:00:a1:8c:1a:10:55:ed:9e:bb:06: 58:86:4c:0e:23:b3:68:7d:83:9f:cb:c3:d1:c4:dc: d6:fe:e5:79:16:8c:fe:8b:cb:15:d6:a6:43:d2:93: f2:9c:7a:95:cd:64:63:76:e1:aa:8b:ae:90:75:b0: ce:c1:79:da:e7:bc:17:6d:a3:01:35:3a:c4:d2:cd: 71:c6:cc:f8:65:3f:89:f3:cf:78:6d:8d:5d:e2:23: ef:f3:55:21:0c:50:fb:e1:03:3c:29:be:2c:cd:a8: 4a:9e:f5:00:5c:5d:7f:47:d6:8f:bc:a5:35:2d:cf: 3e:f2:58:59:4f:6e:8f:ed:d1:da:4f:38:f4:68:21: 42:11:ab:f1:5e:53:7e:93:08:80:68:33:06:8d:d5: 29:51:62:2a:38:6a:3d:48:2c:df:cf:45:ff:74:15: 14:5c:9f:86:3a:3f:3c:cd:3d:8f:80:e0:df:8b:3a: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:A5:38:EF:3E:6D:B4:B1:11:BB:79:75:1B:91:B4:BA:99:9C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2d:eb:41:b5:07:72:d3:47:29:19:00:27:7b:9b:a2:34:f6: c7:7b:4f:ef:91:40:d1:d8:61:97:70:41:29:9e:d6:60:ee:8e: 35:68:97:d2:2c:dd:b5:78:ae:a9:01:d3:64:a8:ef:7b:39:b3: 57:26:72:6b:70:92:92:f0:92:e6:f6:65:8d:22:aa:ce:c6:3c: 2b:57:f9:e6:3a:c6:6e:52:2f:73:68:6a:24:cf:ea:6d:0c:50: 54:3f:50:41:32:8a:1d:fa:3f:fa:c6:e9:0c:01:8e:15:2c:86: f5:bb:4a:ca:35:74:93:4f:dd:71:5a:03:2a:ba:34:17:bf:65: 71:f4:d7:02:6a:49:b1:06:0c:87:0a:70:17:b9:d1:4e:b3:ca: 52:ab:83:33:f7:90:ff:47:a5:a5:3e:a2:2e:d5:5a:5c:a3:9b: 1a:bd:57:22:1d:cd:3c:e9:61:c9:ef:d1:60:f7:23:bb:4f:ef: 3a:b6:08:20:83:52:10:cd:20:b6:6b:60:de:36:3d:4d:f8:c5: 03:34:e8:1b:3e:38:cd:90:54:02:1e:51:31:09:df:ea:eb:4b: c0:28:c1:19:c6:f7:64:68:cc:e8:f2:6c:39:2b:af:cd:72:51: 8c:c0:5c:10:e4:38:9a:aa:57:9b:db:0a:3f:9c:3a:a6:aa:18: 18:f6:92:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/KugnLboWQ3YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGIyNTRkZWEtYzQzYS00MTU0LTljZTMtYTNlM2EyYTI0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU3HPNdH4grvPdYnHf7Kqwy9qiYyDpPG3zXK vgiWnwKazqT8gfxQLITyFn/1TyEmv92wyRuYdI9FtShptJ6xx8F9PGl6yE1B+3gx C37QGAChjBoQVe2euwZYhkwOI7NofYOfy8PRxNzW/uV5Foz+i8sV1qZD0pPynHqV zWRjduGqi66QdbDOwXna57wXbaMBNTrE0s1xxsz4ZT+J8894bY1d4iPv81UhDFD7 4QM8Kb4szahKnvUAXF1/R9aPvKU1Lc8+8lhZT26P7dHaTzj0aCFCEavxXlN+kwiA aDMGjdUpUWIqOGo9SCzfz0X/dBUUXJ+GOj88zT2PgODfizoM4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDTpTjvPm20sRG7eXUbkbS6mZy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmU1NGE5NDQtNzMwYS0z NGQ3LWIzMjctZGVkNzVhYjkzODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUt60G1B3LTRykZACd7m6I09sd7T++RQNHYYZdwQSme1mDujjVo l9Is3bV4rqkB02So73s5s1cmcmtwkpLwkub2ZY0iqs7GPCtX+eY6xm5SL3NoaiTP 6m0MUFQ/UEEyih36P/rG6QwBjhUshvW7Sso1dJNP3XFaAyq6NBe/ZXH01wJqSbEG DIcKcBe50U6zylKrgzP3kP9HpaU+oi7VWlyjmxq9VyIdzTzpYcnv0WD3I7tP7zq2 CCCDUhDNILZrYN42PU34xQM06Bs+OM2QVAIeUTEJ3+rrS8AowRnG92RozOjybDkr r81yUYzAXBDkOJqqV5vbCj+cOqaqGBj2kpk= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:33 2025 by rpki-client