$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa File: 5c8cb131-3314-3c54-bc89-56e52d45561a.roa (raw, json) Hash identifier: k8bf0gq2F7KnrwzSCT0FkVbHA8fN91PgEF3LoDAhtuA= Subject key identifier: 49:45:3F:F9:C7:66:29:8D:E5:7B:5C:8F:1D:69:30:1E:15:2D:00:F9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BFADFA457633B56BC000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398297 IP address blocks: 2001:470:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:ad:fa:45:76:33:b5:6b:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3c96188c-f012-41bb-af7d-d7d2729b8794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:01:e1:04:6f:67:ac:eb:ad:8d:b2:b5:c1:27: 18:ec:e2:c8:82:70:7c:53:d3:15:b1:2a:ee:1d:02: 4e:5c:d7:62:bc:4d:40:e9:3a:95:77:a2:4d:d7:06: 13:c4:96:43:c2:a8:0e:bc:c1:e9:d1:43:4c:f4:9d: fc:b5:00:08:fa:48:eb:71:15:a0:4f:2c:48:07:4e: ad:d1:76:0f:ba:32:ca:bf:34:15:1d:b2:57:d9:bd: d6:66:7e:16:ab:38:47:24:f3:91:72:b3:64:63:d5: 2a:58:59:fd:84:3f:7e:1a:eb:16:fb:de:11:db:c8: a2:f5:fe:9b:7d:8c:e3:94:6c:9c:39:05:8c:9b:d3: 2c:68:5f:0c:b5:da:db:37:13:17:a3:a5:a3:8a:d3: 7f:12:ce:5c:b3:34:cb:06:15:c2:bb:37:9d:aa:da: 21:50:4d:bd:d3:8f:bf:88:9e:9a:d2:58:7b:6f:1a: e0:76:f9:a4:77:be:77:ea:46:e9:89:9c:8e:45:80: 36:d8:92:b3:1a:75:6f:31:c0:5d:ab:66:54:b2:37: a3:d4:6d:f8:9c:bd:57:80:03:4f:e9:fe:57:72:ba: 6f:4e:13:50:6a:8d:12:db:8e:fe:e8:65:81:79:fb: f5:59:d8:ff:a7:d3:0e:1b:3d:8c:1f:2b:1a:a2:68: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:3F:F9:C7:66:29:8D:E5:7B:5C:8F:1D:69:30:1E:15:2D:00:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c8cb131-3314-3c54-bc89-56e52d45561a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:81::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b5:86:22:cc:03:e0:95:e3:48:71:51:ed:51:6e:40:1b:f8: 0e:cb:ec:8f:3f:65:f5:09:cb:fb:89:71:6b:a9:c1:b5:18:a3: 95:92:f1:7b:0c:46:9c:a0:4c:44:b4:25:92:3d:09:03:57:e5: 75:0e:0f:0d:d7:a5:8c:cc:06:12:d7:ea:97:39:2c:ad:23:92: 66:1f:8d:b9:f6:f3:bf:6a:a3:84:95:94:ff:e0:ea:ff:f6:40: 16:27:40:c3:1a:4a:6b:cf:31:f1:42:b6:82:95:cf:dc:7c:2e: f8:c2:b2:ab:1e:bf:67:62:fa:34:be:b7:c4:ec:3f:41:0a:b1: e5:31:0f:26:66:9a:9f:e9:70:ef:71:31:7d:dc:24:52:45:96: b1:c6:f9:d1:c2:3a:d2:f9:1d:35:13:46:be:5d:9e:8e:ee:15: 11:d3:2e:9b:c4:51:ce:a4:1b:f8:54:f3:c0:f4:74:80:32:55: b5:54:d5:15:21:34:da:b4:71:78:53:e5:19:9b:88:90:fe:98: bc:93:6d:b0:f7:8c:a2:43:44:5b:80:9d:9b:b1:df:e8:3e:c3: 51:da:72:65:ca:69:1a:3e:70:69:2d:c1:cf:44:2f:6a:1e:e1: 16:96:ca:7c:b9:2b:24:c2:86:9d:48:32:8f:17:d9:78:d7:64: b1:3b:10:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ17+t+kV2M7VrwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2M5NjE4OGMtZjAxMi00MWJiLWFmN2QtZDdkMjcyOWI4Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQHhBG9nrOutjbK1wScY7OLIgnB8U9MVsSru HQJOXNdivE1A6TqVd6JN1wYTxJZDwqgOvMHp0UNM9J38tQAI+kjrcRWgTyxIB06t 0XYPujLKvzQVHbJX2b3WZn4WqzhHJPORcrNkY9UqWFn9hD9+GusW+94R28ii9f6b fYzjlGycOQWMm9MsaF8MtdrbNxMXo6WjitN/Es5cszTLBhXCuzedqtohUE2904+/ iJ6a0lh7bxrgdvmkd7536kbpiZyORYA22JKzGnVvMcBdq2ZUsjej1G34nL1XgANP 6f5XcrpvThNQao0S247+6GWBefv1Wdj/p9MOGz2MHysaomgPUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElFP/nHZimN5Xtcjx1pMB4VLQD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWM4Y2IxMzEtMzMxNC0z YzU0LWJjODktNTZlNTJkNDU1NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACG1hiLMA+CV40hxUe1RbkAb+A7L7I8/ZfUJy/uJcWupwbUYo5WS 8XsMRpygTES0JZI9CQNX5XUODw3XpYzMBhLX6pc5LK0jkmYfjbn2879qo4SVlP/g 6v/2QBYnQMMaSmvPMfFCtoKVz9x8LvjCsqsev2di+jS+t8TsP0EKseUxDyZmmp/p cO9xMX3cJFJFlrHG+dHCOtL5HTUTRr5dno7uFRHTLpvEUc6kG/hU88D0dIAyVbVU 1RUhNNq0cXhT5RmbiJD+mLyTbbD3jKJDRFuAnZux3+g+w1HacmXKaRo+cGktwc9E L2oe4RaWyny5KyTChp1IMo8X2XjXZLE7EFw= -----END CERTIFICATE-----Generated at Thu Oct 23 19:22:49 2025 by rpki-client