$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ff66aa6-7d41-33cb-8680-f25fe7f50d5d.roa File: 2ff66aa6-7d41-33cb-8680-f25fe7f50d5d.roa (raw, json) Hash identifier: BtQNKYklDsW2v5dNbu8ohBGzBqf1TwjLw0qPFHSao4s= Subject key identifier: F2:95:43:0F:A2:FC:75:C7:48:8A:C4:F1:17:DA:F2:6C:52:98:B4:5E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7FB2E808D879288F56900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ff66aa6-7d41-33cb-8680-f25fe7f50d5d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397672 IP address blocks: 2001:470:318::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fb:2e:80:8d:87:92:88:f5:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d2781faf-5a8a-47cb-9972-780a11cf91f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:56:56:a5:5a:a3:10:da:f9:3d:98:a9:b7: f7:1d:d0:5c:b7:fc:0b:de:45:e5:98:97:ee:8b:a2: c2:cd:5b:fa:8a:e5:d8:0c:d8:e9:18:57:94:7d:45: 02:37:06:c7:a7:5b:f0:4d:57:34:b9:e2:55:8e:2b: da:68:d6:47:1b:4c:7d:20:c6:a4:25:11:eb:61:8d: 02:0a:c2:51:9d:d2:02:86:35:d3:05:2e:4d:93:c3: da:14:c2:c9:8d:7b:ef:e6:16:01:4c:76:ba:e4:97: 90:62:e8:be:0e:37:df:fb:d8:8c:d0:df:b3:9f:ea: b3:c3:57:15:db:b2:41:56:94:fa:86:94:36:f3:fe: 0d:8d:cb:94:9b:11:6d:e9:ec:43:30:8c:6f:5a:98: 7c:ba:27:3f:b0:4a:e9:5f:d8:ab:7d:27:fc:b0:47: e2:20:45:07:c5:c7:0c:95:dc:50:fd:04:b8:dd:4b: 16:c0:b0:13:65:5a:b5:28:d1:79:ae:57:95:72:06: 7c:88:db:43:98:11:a0:4a:19:d3:b8:15:2c:51:3d: e3:06:a9:f7:5b:a4:37:6b:e3:93:ac:89:ae:99:6f: 6d:83:9f:f1:56:1c:0d:d0:df:63:5c:fb:97:0e:0b: f9:fb:e8:10:ad:09:94:e5:62:71:6e:65:06:66:70: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:43:0F:A2:FC:75:C7:48:8A:C4:F1:17:DA:F2:6C:52:98:B4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ff66aa6-7d41-33cb-8680-f25fe7f50d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:318::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c6:f6:5f:81:85:2a:db:6f:bb:5e:3b:dd:93:13:3e:59:db: dd:20:c0:14:06:d1:59:9b:13:8f:2f:8a:41:0a:8d:24:3c:d2: 47:7c:35:aa:32:77:d9:9b:39:bb:a1:3b:29:1e:e2:4d:62:6f: 52:c1:55:7f:ce:fb:10:fb:1d:a1:5b:aa:c1:8a:e3:cf:b8:3d: c1:13:90:ca:9f:96:a1:be:cf:1b:2f:9a:54:21:3b:b3:9c:b6: f3:0e:72:f2:8b:d6:54:c6:8c:48:7d:5f:0f:9f:5e:57:08:e6: d6:f4:8a:2e:b1:69:96:63:44:d3:0a:ac:25:67:50:37:aa:e9: 3d:90:ac:8d:e6:da:3f:52:f9:83:3d:66:84:09:df:4a:74:ce: f6:a5:4d:2c:f5:8e:8e:fc:31:63:65:f0:06:c6:90:c6:71:1f: 0c:99:8c:dc:74:d8:5b:b5:ec:9c:bc:5d:30:ec:d2:c0:85:83: 76:8d:df:81:b0:7d:5b:68:af:fb:96:0c:aa:f2:83:3b:b8:a9: 20:12:dd:e9:e8:44:36:91:d3:88:57:03:45:bc:d8:9b:20:67: 4e:06:7e:a0:68:bd:13:c9:e2:87:8f:49:c1:f8:db:d3:e9:c9: cf:52:c0:4b:75:a6:fd:92:7c:11:88:d2:40:32:ff:db:9b:59: fb:39:a6:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/sugI2Hkoj1aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDI3ODFmYWYtNWE4YS00N2NiLTk5NzItNzgwYTExY2Y5MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpRWVqVaoxDa+T2Yqbf3HdBct/wL3kXlmJfu i6LCzVv6iuXYDNjpGFeUfUUCNwbHp1vwTVc0ueJVjivaaNZHG0x9IMakJRHrYY0C CsJRndIChjXTBS5Nk8PaFMLJjXvv5hYBTHa65JeQYui+Djff+9iM0N+zn+qzw1cV 27JBVpT6hpQ28/4NjcuUmxFt6exDMIxvWph8uic/sErpX9irfSf8sEfiIEUHxccM ldxQ/QS43UsWwLATZVq1KNF5rleVcgZ8iNtDmBGgShnTuBUsUT3jBqn3W6Q3a+OT rImumW9tg5/xVhwN0N9jXPuXDgv5++gQrQmU5WJxbmUGZnD2PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPKVQw+i/HXHSIrE8Rfa8mxSmLReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmZmNjZhYTYtN2Q0MS0z M2NiLTg2ODAtZjI1ZmU3ZjUwZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDG9l+BhSrbb7teO92TEz5Z290gwBQG0VmbE48vikEKjSQ80kd8 Naoyd9mbObuhOyke4k1ib1LBVX/O+xD7HaFbqsGK48+4PcETkMqflqG+zxsvmlQh O7OctvMOcvKL1lTGjEh9Xw+fXlcI5tb0ii6xaZZjRNMKrCVnUDeq6T2QrI3m2j9S +YM9ZoQJ30p0zvalTSz1jo78MWNl8AbGkMZxHwyZjNx02Fu17Jy8XTDs0sCFg3aN 34GwfVtor/uWDKrygzu4qSAS3enoRDaR04hXA0W82JsgZ04GfqBovRPJ4oePScH4 29Ppyc9SwEt1pv2SfBGI0kAy/9ubWfs5ppM= -----END CERTIFICATE-----Generated at Thu Oct 30 06:37:17 2025 by rpki-client