$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa File: 85dc89c0-f24f-3f95-b890-a64d54a07d93.roa (raw, json) Hash identifier: /Wigb/2YEqFOHgo+B9WE0OUWWCTiYhPqBWqwVQjHUB0= Subject key identifier: 01:2D:27:44:94:1E:3C:8C:25:3B:23:42:0B:41:2D:A8:BD:4A:4D:94 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F930602D68D557D4DD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 41297 IP address blocks: 2001:470:2e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f9:30:60:2d:68:d5:57:d4:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2b5b0af9-1a09-4a75-a53b-6ba4dea045ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:c8:37:a6:38:c1:db:67:e8:4d:22:a8:22: 13:81:c5:93:0b:60:8c:11:6b:d9:aa:2f:0b:88:a8: ba:68:59:db:c6:dd:79:b3:e8:da:61:1c:3d:3d:e2: 6c:03:ed:b8:dd:cf:a9:ca:97:99:9a:0e:a7:e2:5b: ed:76:3e:be:48:25:83:68:ed:14:3d:2d:27:65:03: 4f:45:e1:13:94:16:74:0f:54:33:dc:e1:01:1e:97: 34:ea:57:4e:f1:17:57:72:3e:b6:46:ca:90:5a:cd: 39:e7:99:12:7c:25:2a:12:5d:a3:11:cb:9f:67:5b: 8d:54:1d:cd:c5:95:73:8d:99:74:cb:47:37:28:ea: 94:a0:bb:dd:0a:8c:9c:90:b0:c2:57:e4:4a:23:f5: 71:b5:53:e3:98:84:f8:9b:d8:25:68:f7:7f:97:e8: 14:cf:c2:5b:f9:77:a3:7e:1c:f5:c7:ff:5c:7b:ef: 4c:52:db:18:cb:1a:13:5a:8d:cf:dd:ee:3c:87:7e: 5f:79:2f:4d:1d:88:40:c6:e8:f3:43:f0:35:f5:16: cd:c6:b8:bb:68:77:19:7b:8f:b8:be:4b:de:33:08: 2e:51:bc:f7:cd:8f:bd:92:93:27:42:7e:4c:25:f8: 60:d0:be:2f:69:2c:b2:b2:9a:7c:78:32:d0:52:b6: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2D:27:44:94:1E:3C:8C:25:3B:23:42:0B:41:2D:A8:BD:4A:4D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bf:03:76:d0:b6:4f:42:d8:e0:3b:58:ca:55:b1:eb:ff:47: 50:59:e1:17:0b:3e:ff:cb:df:70:49:84:fc:9e:be:43:44:fb: 8a:a8:48:23:4e:9f:35:f9:a3:e0:07:93:f2:a2:26:42:68:ee: 6c:b3:ae:d8:dc:da:70:f5:91:fe:18:fb:a8:6b:93:54:9a:98: a5:cd:0e:e6:71:31:24:a1:be:dd:81:46:ae:ac:41:b5:dd:26: 0f:7a:85:7b:e1:a0:e3:4f:ab:cc:4b:c5:6a:82:55:bb:dd:c4: 28:02:f0:59:4d:a5:6a:d2:fe:17:50:ac:d4:78:29:16:1d:b1: d7:8b:1e:64:dc:5e:b5:9e:e7:d5:09:8d:b3:8d:6a:69:24:99: cf:04:f2:9f:6b:39:5e:3b:1f:f6:1b:f1:1b:18:de:61:45:fe: 6d:df:e0:18:eb:3e:90:9f:f3:15:6e:aa:cd:de:82:2c:5a:92: 81:ed:d8:32:ab:10:7b:f7:e5:55:68:fc:68:c7:d7:8c:6d:73: 89:83:a0:3d:26:fa:3b:bb:52:20:3f:92:8e:1f:c8:54:99:17: 92:34:2e:1e:fa:48:ee:c9:3f:dc:8a:cc:c3:5b:aa:e8:53:49: 0d:05:f3:17:6f:d9:11:a5:2a:0b:7e:13:27:c2:ab:a0:5b:3e: 46:f3:6d:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/kwYC1o1VfU3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmI1YjBhZjktMWEwOS00YTc1LWE1M2ItNmJhNGRlYTA0NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGnIN6Y4wdtn6E0iqCITgcWTC2CMEWvZqi8L iKi6aFnbxt15s+jaYRw9PeJsA+243c+pypeZmg6n4lvtdj6+SCWDaO0UPS0nZQNP ReETlBZ0D1Qz3OEBHpc06ldO8RdXcj62RsqQWs0555kSfCUqEl2jEcufZ1uNVB3N xZVzjZl0y0c3KOqUoLvdCoyckLDCV+RKI/VxtVPjmIT4m9glaPd/l+gUz8Jb+Xej fhz1x/9ce+9MUtsYyxoTWo3P3e48h35feS9NHYhAxujzQ/A19RbNxri7aHcZe4+4 vkveMwguUbz3zY+9kpMnQn5MJfhg0L4vaSyyspp8eDLQUrZMwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEtJ0SUHjyMJTsjQgtBLai9Sk2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVkYzg5YzAtZjI0Zi0z Zjk1LWI4OTAtYTY0ZDU0YTA3ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADy/A3bQtk9C2OA7WMpVsev/R1BZ4RcLPv/L33BJhPyevkNE+4qo SCNOnzX5o+AHk/KiJkJo7myzrtjc2nD1kf4Y+6hrk1SamKXNDuZxMSShvt2BRq6s QbXdJg96hXvhoONPq8xLxWqCVbvdxCgC8FlNpWrS/hdQrNR4KRYdsdeLHmTcXrWe 59UJjbONamkkmc8E8p9rOV47H/Yb8RsY3mFF/m3f4BjrPpCf8xVuqs3egixakoHt 2DKrEHv35VVo/GjH14xtc4mDoD0m+ju7UiA/ko4fyFSZF5I0Lh76SO7JP9yKzMNb quhTSQ0F8xdv2RGlKgt+EyfCq6BbPkbzbew= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:07 2025 by rpki-client