$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa File: 86592fa6-1bb8-3329-a670-4ce80396e3d2.roa (raw, json) Hash identifier: HseethT4kqDjG0YZnoM3RYS29YFRx1oI1PXxCPI2oAw= Subject key identifier: 29:8C:CF:55:F4:09:45:3B:D1:24:DB:39:68:C9:A0:D3:6F:CD:5B:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0B76D5545A4B7A60F7ABB8D0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 14576 IP address blocks: 2001:470:2ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d5:54:5a:4b:7a:60:f7:ab:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f3f88b25-3915-4c0b-845e-62b1369dfad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:4a:79:1a:e1:ad:89:fd:0f:d8:2e:e9:60: ba:15:3f:eb:51:af:c1:d4:51:7d:fc:61:e4:5b:6c: e3:a9:a8:ee:39:ba:2c:e9:1d:6f:04:94:09:93:0b: ad:51:c9:fe:fd:0b:bc:d5:33:1a:0e:c3:5b:e9:36: 5b:d5:6e:39:5c:1a:35:06:fe:9a:6c:31:db:bd:25: 03:75:c4:f4:21:1c:9e:8c:99:fc:bf:b2:d2:05:7d: 32:3c:d6:bc:78:9e:e8:09:b2:ba:5b:68:c2:2c:bf: a7:08:fb:9a:69:e4:8a:4d:cf:94:03:55:6c:48:12: 7c:46:40:b6:dd:53:48:7e:56:6c:43:36:a0:29:a2: 31:0d:fc:d2:4c:b7:a4:21:74:51:e8:4a:fd:47:52: 79:88:5d:20:16:87:68:8c:d2:94:71:34:5b:62:30: d2:1e:7f:b5:e8:12:fb:d2:ac:3e:f9:44:0f:69:d7: 24:0e:0d:55:ce:c6:0e:8f:5e:61:80:b9:d4:c7:6f: e3:7c:09:95:3e:80:04:32:24:b7:8d:e4:03:3b:ee: 94:a7:7b:ce:00:a1:c3:ff:95:33:2b:e3:de:0d:6e: 84:bc:d1:16:55:c1:78:93:04:88:d7:46:77:2d:8e: 99:03:1e:62:d2:bd:3d:9d:7f:45:12:43:bf:fd:7a: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:CF:55:F4:09:45:3B:D1:24:DB:39:68:C9:A0:D3:6F:CD:5B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86592fa6-1bb8-3329-a670-4ce80396e3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:65:23:25:89:08:66:6a:7c:dd:f6:0c:f7:81:f8:d7:5f:e9: 2c:db:2e:6d:67:b0:33:3b:14:ed:04:fd:e8:d7:a1:78:1e:11: 85:f9:b5:c0:8c:9a:91:9c:51:b9:43:81:fc:e3:a3:5e:ee:0c: e1:ff:13:f5:8f:cc:b0:e9:f9:95:41:24:2f:55:6a:51:47:f8: 98:87:77:45:4b:c6:ec:96:64:7b:ba:7a:08:4e:c9:8f:a0:a0: d6:e8:eb:44:1d:c2:a3:45:25:dc:94:6b:28:55:29:62:30:02: 73:e0:c7:bc:bb:22:a6:18:49:c6:f3:17:b7:e4:14:43:db:46: 26:76:32:44:3f:ab:8d:b3:5f:21:32:a1:9f:5c:51:1d:bb:53: b0:81:12:df:f8:fe:b1:6b:dc:3e:b1:5a:78:08:57:2d:2d:29: 52:95:2e:fd:58:de:58:72:07:cd:f9:84:95:3d:06:75:20:07: d7:19:b0:2c:51:e9:e2:f3:5e:2d:b5:d5:c4:60:e1:70:cd:95: 18:f3:46:fb:30:d6:0c:52:60:74:b9:c0:ba:76:05:22:3f:06: 5e:9b:4c:e8:dd:74:59:55:b8:4e:4a:d9:9d:47:ae:31:9a:8a: 80:c4:19:fe:49:86:5a:21:df:62:52:42:8c:a2:5f:9f:42:bb: 27:bc:a6:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdtVUWkt6YPeruNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjNmODhiMjUtMzkxNS00YzBiLTg0NWUtNjJiMTM2OWRmYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2BKeRrhrYn9D9gu6WC6FT/rUa/B1FF9/GHk W2zjqajuObos6R1vBJQJkwutUcn+/Qu81TMaDsNb6TZb1W45XBo1Bv6abDHbvSUD dcT0IRyejJn8v7LSBX0yPNa8eJ7oCbK6W2jCLL+nCPuaaeSKTc+UA1VsSBJ8RkC2 3VNIflZsQzagKaIxDfzSTLekIXRR6Er9R1J5iF0gFodojNKUcTRbYjDSHn+16BL7 0qw++UQPadckDg1VzsYOj15hgLnUx2/jfAmVPoAEMiS3jeQDO+6Up3vOAKHD/5Uz K+PeDW6EvNEWVcF4kwSI10Z3LY6ZAx5i0r09nX9FEkO//Xq79wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmMz1X0CUU70STbOWjJoNNvzVtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODY1OTJmYTYtMWJiOC0z MzI5LWE2NzAtNGNlODAzOTZlM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJlIyWJCGZqfN32DPeB+Ndf6SzbLm1nsDM7FO0E/ejXoXgeEYX5 tcCMmpGcUblDgfzjo17uDOH/E/WPzLDp+ZVBJC9ValFH+JiHd0VLxuyWZHu6eghO yY+goNbo60QdwqNFJdyUayhVKWIwAnPgx7y7IqYYScbzF7fkFEPbRiZ2MkQ/q42z XyEyoZ9cUR27U7CBEt/4/rFr3D6xWngIVy0tKVKVLv1Y3lhyB835hJU9BnUgB9cZ sCxR6eLzXi211cRg4XDNlRjzRvsw1gxSYHS5wLp2BSI/Bl6bTOjddFlVuE5K2Z1H rjGaioDEGf5Jhloh32JSQoyiX59Cuye8prA= -----END CERTIFICATE-----Generated at Wed Oct 29 06:26:49 2025 by rpki-client