$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa File: 87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa (raw, json) Hash identifier: icW95tEa0BEQ4/kJudXc5kayx9EBXLnI4KKiOa/NWF4= Subject key identifier: 47:45:64:80:07:C6:D1:77:46:36:FD:D5:BD:ED:E4:15:D8:47:B2:73 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BA7CD197AAE7A40083D63A080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 53428 IP address blocks: 2001:470:16b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:19:7a:ae:7a:40:08:3d:63:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=489e9baa-6944-4cf5-a5d3-3b92201fbd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:41:83:fb:7e:a9:ab:e4:3c:fb:a9:ec:51: c7:d2:e3:f3:3b:41:99:9b:bb:cd:ef:7f:be:b7:89: 49:02:75:1d:00:ad:e0:a0:57:bf:80:30:b6:24:60: 4d:5e:0e:6a:8d:26:0b:40:63:eb:68:dd:62:28:77: 12:97:ad:02:32:57:c4:29:a9:6b:af:b6:ce:5a:af: 05:27:69:80:53:fb:14:ee:67:6a:99:08:23:50:5b: 9d:2e:ef:42:0e:4b:94:2c:5c:6c:3a:d2:a5:e2:04: 4c:a4:9d:cb:ca:53:0d:80:74:55:e2:13:0f:95:66: 4b:08:bc:2a:46:8f:2d:db:48:d3:f1:27:7e:f9:ed: de:dd:f3:5e:a7:74:9e:4d:d3:a9:ee:ad:3a:b1:82: 8c:04:03:6c:af:d6:d6:89:b2:a5:34:81:e7:ea:df: 0c:b5:96:00:16:f2:c8:3b:a8:a0:46:e1:6f:dd:9b: 75:c0:60:60:ef:bb:e6:c8:44:a1:55:ad:0b:fe:5a: 8e:9e:39:b6:a5:4b:29:13:8b:44:3d:f7:5e:3a:00: 3f:97:f8:36:7e:a1:4a:ee:f5:57:d1:cc:8c:28:0f: 75:73:63:07:dc:49:f2:18:b4:b3:36:79:16:2f:82: 24:37:a8:f9:f2:50:f8:52:91:60:41:f9:22:f7:4f: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:64:80:07:C6:D1:77:46:36:FD:D5:BD:ED:E4:15:D8:47:B2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:16b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c7:66:e3:7e:54:d3:85:bf:15:e2:19:58:9d:6c:35:37:2b: 46:52:f8:72:1b:a4:74:9f:d6:a5:56:d7:de:75:2d:6d:f9:56: 16:55:9e:e7:1a:20:cf:ef:63:5c:4e:11:eb:06:e4:40:7a:ee: 32:ae:bd:31:49:e4:e5:94:59:2d:fc:f7:9d:ee:b0:ff:0c:2c: bc:82:e8:c3:5a:90:fd:59:4f:81:cc:89:f8:00:a6:8f:30:4d: de:fc:41:4b:c7:34:12:44:14:e7:61:26:39:b5:07:40:96:16: c4:db:65:71:37:f8:82:14:33:14:6f:52:c7:a6:31:f3:60:fc: 5b:74:4c:03:3c:0d:1f:d6:23:58:52:b1:a1:72:be:35:93:2d: 63:2a:79:12:b5:23:45:c1:eb:54:3e:80:3b:58:49:f1:16:7e: 23:06:d1:cb:00:a9:aa:5c:76:0d:fd:0b:48:48:3b:dc:7d:aa: 55:02:f3:e4:80:7e:26:ad:ea:a3:cf:e2:a6:24:fe:e2:68:07: 5f:c8:a6:7d:b4:20:41:4a:3c:0b:fd:20:86:26:58:33:b5:54: 1a:2f:df:4d:c5:ce:a4:93:54:de:82:4c:a5:6f:c8:ec:90:03: ba:18:61:e0:86:ad:a3:46:48:40:9f:9c:1d:5f:b2:19:3c:3b: f6:96:71:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEunzRl6rnpACD1joIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NDg5ZTliYWEtNjk0NC00Y2Y1LWE1ZDMtM2I5MjIwMWZiZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFxBg/t+qavkPPup7FHH0uPzO0GZm7vN73++ t4lJAnUdAK3goFe/gDC2JGBNXg5qjSYLQGPraN1iKHcSl60CMlfEKalrr7bOWq8F J2mAU/sU7mdqmQgjUFudLu9CDkuULFxsOtKl4gRMpJ3LylMNgHRV4hMPlWZLCLwq Ro8t20jT8Sd++e3e3fNep3SeTdOp7q06sYKMBANsr9bWibKlNIHn6t8MtZYAFvLI O6igRuFv3Zt1wGBg77vmyEShVa0L/lqOnjm2pUspE4tEPfdeOgA/l/g2fqFK7vVX 0cyMKA91c2MH3EnyGLSzNnkWL4IkN6j58lD4UpFgQfki90/T6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEdFZIAHxtF3Rjb91b3t5BXYR7JzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODdkOWFiZGMtZTA4YS0z YjE3LWI1ZDYtMjhlOTI5ZWJlZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJLHZuN+VNOFvxXiGVidbDU3K0ZS+HIbpHSf1qVW1951LW35VhZV nucaIM/vY1xOEesG5EB67jKuvTFJ5OWUWS38953usP8MLLyC6MNakP1ZT4HMifgA po8wTd78QUvHNBJEFOdhJjm1B0CWFsTbZXE3+IIUMxRvUsemMfNg/Ft0TAM8DR/W I1hSsaFyvjWTLWMqeRK1I0XB61Q+gDtYSfEWfiMG0csAqapcdg39C0hIO9x9qlUC 8+SAfiat6qPP4qYk/uJoB1/Ipn20IEFKPAv9IIYmWDO1VBov303FzqSTVN6CTKVv yOyQA7oYYeCGraNGSECfnB1fshk8O/aWcS0= -----END CERTIFICATE-----Generated at Tue Oct 28 23:06:44 2025 by rpki-client