$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa File: 85e30730-5d37-3d0d-b82f-934337806577.roa (raw, json) Hash identifier: 9BzHeYf7q81DdU6UI5nh4TGFJRfy3TKa3GZdgI7cEkQ= Subject key identifier: E4:24:5A:9C:1C:6A:C2:44:FC:D4:7A:7B:A2:5A:24:47:D5:0D:4B:1C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F9A45C88A45B5B355400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395260 IP address blocks: 2001:470:2f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f9:a4:5c:88:a4:5b:5b:35:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=dd9b1e44-da99-420c-a977-cf3c0a23539f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:3b:01:38:01:43:c0:e7:e5:ca:39:29:80: 30:05:2a:11:aa:e6:52:9b:65:55:04:03:bc:0c:0c: d1:71:2d:2a:6d:94:f7:f7:2e:5e:a6:2e:c3:17:18: 9d:e2:72:df:41:a5:8f:ad:c4:fd:c9:cd:ac:f9:e9: 9c:38:e5:77:70:a0:65:a6:01:f1:49:b8:7c:17:a3: bd:79:37:1d:42:51:d6:25:dd:70:64:af:6e:76:42: b2:00:5e:03:81:e5:5e:4c:c9:98:37:52:81:e7:6a: 24:fa:b5:cc:88:3f:58:af:3c:b6:ab:6a:7e:6a:4e: 3e:cc:1a:ab:5c:ca:a7:60:fe:03:5b:c2:a2:84:64: 63:da:3a:ed:54:35:21:c8:54:cb:02:59:61:5c:83: c5:b0:8b:b0:ed:ae:55:0f:50:72:d9:b2:3c:c4:7c: 7a:1f:63:ca:3b:10:d4:52:ac:9d:a3:fd:4d:9a:99: 5f:e9:d5:92:88:d6:2a:28:08:2a:1d:5f:f2:49:a0: f8:5f:d5:64:ee:dd:01:c8:49:72:a4:77:39:0f:47: e1:50:fe:43:74:98:90:38:68:39:7d:d9:97:69:f7: 9c:dd:b0:52:ec:71:c2:9b:30:f0:79:f3:82:11:34: d1:8f:2f:6a:31:56:e2:15:93:26:7c:2e:b2:9c:c4: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:5A:9C:1C:6A:C2:44:FC:D4:7A:7B:A2:5A:24:47:D5:0D:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ce:2e:c1:10:7b:89:58:6e:93:07:4d:be:4f:57:52:4f:c9: 9e:22:a8:bf:0b:80:3f:3a:54:c1:78:02:79:c2:0f:9b:5f:ea: b2:db:5c:96:b2:ab:b7:52:64:0d:fd:0b:d9:9a:9e:92:e2:dd: 36:66:54:f6:ca:5f:c7:52:46:6e:20:5f:e3:a0:e8:8b:3b:57: c7:15:94:69:79:c7:14:1f:44:d0:da:63:20:d4:6b:a2:44:ce: 46:9f:7f:f2:d1:9f:6d:99:c8:12:1d:a2:ae:08:c7:2d:64:ba: cb:21:eb:f1:47:3a:08:28:14:6e:34:db:c9:7d:9a:58:e5:78: 53:1a:4d:97:09:5f:12:49:e2:82:2c:44:83:a6:18:04:30:2b: 1a:ae:68:b5:2d:cf:79:bf:6d:9a:39:4a:52:a2:c8:18:71:12: c9:18:09:f4:95:dc:da:cd:31:1b:5c:e3:f6:56:2a:c1:b4:3c: f7:15:e9:dc:6b:e6:4c:a2:1e:03:0c:14:c1:b4:73:93:57:b9: 2d:3e:97:be:3c:94:e2:f6:cc:b3:0b:d3:23:29:7e:03:9e:fd: b7:33:d5:db:44:2a:2b:2f:20:d4:b1:e0:eb:f9:da:67:ef:1e: c6:25:20:e1:cf:e6:18:7d:d6:cb:fc:e5:97:79:78:23:42:28: a8:3e:de:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/mkXIikW1s1VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGQ5YjFlNDQtZGE5OS00MjBjLWE5NzctY2YzYzBhMjM1MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ07ATgBQ8Dn5co5KYAwBSoRquZSm2VVBAO8 DAzRcS0qbZT39y5epi7DFxid4nLfQaWPrcT9yc2s+emcOOV3cKBlpgHxSbh8F6O9 eTcdQlHWJd1wZK9udkKyAF4DgeVeTMmYN1KB52ok+rXMiD9Yrzy2q2p+ak4+zBqr XMqnYP4DW8KihGRj2jrtVDUhyFTLAllhXIPFsIuw7a5VD1By2bI8xHx6H2PKOxDU Uqydo/1Nmplf6dWSiNYqKAgqHV/ySaD4X9Vk7t0ByElypHc5D0fhUP5DdJiQOGg5 fdmXafec3bBS7HHCmzDwefOCETTRjy9qMVbiFZMmfC6ynMR+6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQkWpwcasJE/NR6e6JaJEfVDUscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVlMzA3MzAtNWQzNy0z ZDBkLWI4MmYtOTM0MzM3ODA2NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrOLsEQe4lYbpMHTb5PV1JPyZ4iqL8LgD86VMF4AnnCD5tf6rLb XJayq7dSZA39C9manpLi3TZmVPbKX8dSRm4gX+Og6Is7V8cVlGl5xxQfRNDaYyDU a6JEzkaff/LRn22ZyBIdoq4Ixy1kussh6/FHOggoFG4028l9mljleFMaTZcJXxJJ 4oIsRIOmGAQwKxquaLUtz3m/bZo5SlKiyBhxEskYCfSV3NrNMRtc4/ZWKsG0PPcV 6dxr5kyiHgMMFMG0c5NXuS0+l748lOL2zLML0yMpfgOe/bcz1dtEKisvINSx4Ov5 2mfvHsYlIOHP5hh91sv85Zd5eCNCKKg+3uY= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:35 2025 by rpki-client