$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa File: 5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa (raw, json) Hash identifier: 3Vj+BiZNkpaMoBjzyo/NpRGOUrpCcXXB94aYQScRotI= Subject key identifier: 02:30:66:89:1E:A2:71:0C:C5:F8:49:1A:C8:99:5F:4F:DD:2A:9A:69 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BF855917D235E6569100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 62538 IP address blocks: 2001:470:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:85:59:17:d2:35:e6:56:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ccdb5ba1-e587-43cb-9bdb-5ebf9cb9d145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:c1:27:79:9b:9f:4e:d4:e9:c3:da:0c:da: 3b:97:e4:9f:5b:ac:a5:0d:66:ed:29:49:51:13:ea: ef:05:b5:1c:99:06:fd:3a:3d:c2:49:ab:98:74:70: ac:46:b8:c2:d9:44:f3:99:15:7c:11:db:aa:09:b1: c7:04:1d:b1:94:e5:e4:84:61:76:ce:4c:38:14:2c: 8b:44:68:8d:b4:cc:99:b2:0f:b1:26:d7:f5:05:5a: b3:ec:c5:2b:f6:44:32:b9:b1:88:5f:e6:60:51:b7: 34:60:d4:b9:4b:fb:68:ce:3d:78:78:64:66:bf:1e: fb:2b:a6:c5:90:73:84:f7:0f:a3:e8:86:c0:6a:7c: b2:a0:46:3f:65:a3:b1:b1:7e:48:5b:6f:ba:17:83: 45:90:e8:46:e4:d1:6a:0c:54:e3:b1:14:6a:45:59: 2f:9d:e4:4c:8e:3e:d5:3a:38:27:f8:8f:9a:38:4f: df:fe:dd:a5:e6:e5:c3:fb:de:32:05:f2:fe:c3:7d: c5:2a:9e:bd:be:bf:c3:bf:c3:79:e4:af:5a:7f:08: 36:1b:00:dc:30:cf:cc:6d:71:43:79:d5:a7:4a:ec: 25:73:77:26:2e:ce:3e:e8:e7:2e:48:d5:52:80:e8: 49:5a:88:08:2d:45:c0:55:83:4b:f6:1c:74:87:48: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:66:89:1E:A2:71:0C:C5:F8:49:1A:C8:99:5F:4F:DD:2A:9A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5be87f8b-4fa2-38f0-a875-eafc67c02d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:31:b8:a5:96:e2:0a:42:38:ad:3e:c6:46:be:6d:e8:a5:d7: ee:ea:fa:82:80:e0:82:e7:31:2c:64:a4:6c:99:f7:62:08:c1: e3:6d:52:f4:36:4b:9f:ee:35:05:e5:a4:be:21:a4:66:ee:60: bd:8a:d6:04:b4:0a:53:d4:1b:01:f1:2c:af:4e:11:e5:34:62: 8c:ec:ba:ee:61:db:f3:69:54:40:7c:47:47:92:32:a5:68:03: 3d:44:ba:8a:0a:01:b9:ce:c7:30:04:cb:fc:2d:9a:1e:be:4f: 54:1f:07:9d:30:06:0f:5c:ac:86:a2:27:61:75:2e:3e:13:7b: 1f:74:58:1f:a8:18:dc:71:06:be:f4:ea:2b:99:98:ab:b3:04: 65:81:de:20:7d:e5:ec:8f:2d:75:b8:ca:61:d4:4f:03:ed:1f: c3:b9:b4:2c:33:d2:86:c7:28:f9:e2:d7:e7:67:1c:be:fa:66: df:c4:0a:b7:39:69:73:55:0c:8f:f0:9d:03:6e:ca:ed:34:e9: 00:f7:b9:33:89:f2:ce:15:d2:7a:af:60:bc:91:e9:ed:0b:d9: 5a:6f:1f:62:ed:3e:64:bf:9b:62:fc:b8:e6:a8:2a:4e:4a:58: b9:6a:08:4d:62:47:e7:ba:48:51:33:43:bd:4f:22:ac:b9:a5: 80:d5:f7:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17+FWRfSNeZWkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2NkYjViYTEtZTU4Ny00M2NiLTliZGItNWViZjljYjlkMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGTBJ3mbn07U6cPaDNo7l+SfW6ylDWbtKUlR E+rvBbUcmQb9Oj3CSauYdHCsRrjC2UTzmRV8EduqCbHHBB2xlOXkhGF2zkw4FCyL RGiNtMyZsg+xJtf1BVqz7MUr9kQyubGIX+ZgUbc0YNS5S/tozj14eGRmvx77K6bF kHOE9w+j6IbAanyyoEY/ZaOxsX5IW2+6F4NFkOhG5NFqDFTjsRRqRVkvneRMjj7V Ojgn+I+aOE/f/t2l5uXD+94yBfL+w33FKp69vr/Dv8N55K9afwg2GwDcMM/MbXFD edWnSuwlc3cmLs4+6OcuSNVSgOhJWogILUXAVYNL9hx0h0jmuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIwZokeonEMxfhJGsiZX0/dKpppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWJlODdmOGItNGZhMi0z OGYwLWE4NzUtZWFmYzY3YzAyZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsxuKWW4gpCOK0+xka+beil1+7q+oKA4ILnMSxkpGyZ92IIweNt UvQ2S5/uNQXlpL4hpGbuYL2K1gS0ClPUGwHxLK9OEeU0Yozsuu5h2/NpVEB8R0eS MqVoAz1EuooKAbnOxzAEy/wtmh6+T1QfB50wBg9crIaiJ2F1Lj4Tex90WB+oGNxx Br706iuZmKuzBGWB3iB95eyPLXW4ymHUTwPtH8O5tCwz0obHKPni1+dnHL76Zt/E Crc5aXNVDI/wnQNuyu006QD3uTOJ8s4V0nqvYLyR6e0L2VpvH2LtPmS/m2L8uOao Kk5KWLlqCE1iR+e6SFEzQ71PIqy5pYDV93c= -----END CERTIFICATE-----Generated at Tue Oct 28 10:49:04 2025 by rpki-client