$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa File: 88b97648-5110-3f0c-b3ba-b97205d47e7d.roa (raw, json) Hash identifier: XpfqAHcPZrWyrEDczx3C5nDotUoiybiuV7+g5VqKh2o= Subject key identifier: 50:9E:5E:3A:33:ED:44:F4:5C:B5:16:3A:37:2C:B1:43:51:19:DC:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F595B3E5031AA81D3E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 28773 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f5:95:b3:e5:03:1a:a8:1d:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1fabc061-4b08-4951-b69e-1cbc9ce2c5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:61:03:af:bc:eb:33:47:77:9c:62:21:dd: 53:0c:84:58:da:04:55:bd:49:af:ce:81:90:4c:dc: e4:95:16:fe:e2:1c:df:a4:c4:ec:63:e5:7e:33:b8: 52:4c:ec:12:52:a8:1e:96:e7:0b:e4:e1:8a:c3:81: f4:b8:fc:4c:a0:cf:05:1c:3b:d5:c8:25:96:55:35: 90:d8:10:58:71:41:35:e1:b6:b1:c8:d5:fb:72:54: f0:ea:19:71:20:eb:7f:2c:8a:3d:60:5a:7c:6b:10: 67:0d:83:35:e5:d8:b9:8a:bd:ec:74:18:11:ea:f3: b5:49:cf:06:51:93:47:4d:51:77:8b:e7:87:b1:bd: a1:6d:ef:13:63:dd:45:cf:ef:a8:f2:c9:09:48:09: 76:b0:9a:d1:18:9d:8e:03:c4:3e:20:f7:28:34:db: b4:58:be:ef:9c:9f:17:e6:c1:ba:58:ec:e2:52:4a: 1d:68:38:25:88:cb:40:9e:cf:29:5b:9c:e7:be:05: 3b:2c:3a:e7:35:7d:07:40:2a:1f:38:9f:fe:c6:a4: d1:74:7e:dc:97:80:8d:43:60:02:09:20:54:7d:28: 4f:e4:e1:3f:bd:bf:eb:02:2e:8e:c6:b3:00:aa:47: e5:0b:38:43:9f:72:fc:1a:cc:b7:4c:c4:b2:cf:a4: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:5E:3A:33:ED:44:F4:5C:B5:16:3A:37:2C:B1:43:51:19:DC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ad:0f:39:23:9c:29:9a:68:b4:04:5b:14:2b:5a:bc:54:f0: e8:e3:c3:14:5c:f8:0f:33:57:04:b4:0f:43:44:1b:a7:27:1c: c4:af:cd:14:84:fb:43:6c:85:bd:ea:5d:b9:02:44:66:45:72: 24:2d:0a:ca:32:be:52:20:f2:75:10:37:fe:66:b9:d1:7f:26: f0:7f:f1:2e:bd:8e:a6:21:a7:f1:dd:9f:b8:3f:80:cf:dc:ca: dd:ca:97:97:3b:ed:d6:bd:2b:29:15:fd:a4:79:d6:96:0c:7d: ee:50:16:1f:da:c6:26:e4:dd:54:5c:69:f6:f5:b0:af:48:ed: e4:16:ad:c8:14:38:f8:71:a6:df:bf:8a:da:5c:19:c1:5d:40: 4f:f6:dc:9d:4f:36:c2:25:d6:0a:e4:4a:2a:a8:66:06:72:62: e4:d2:85:d0:1a:52:25:a1:e1:03:1a:56:ee:a0:e4:43:45:a5: 2c:7b:a1:a2:e0:06:31:d0:a4:e3:3a:b1:ce:9c:ae:a6:20:fd: 6d:32:78:2d:6b:28:8d:63:33:9b:02:55:d0:fa:5f:9b:24:d0: 5d:38:05:54:1a:07:88:18:85:30:06:e4:f9:e7:1e:40:cb:4e: 84:a5:82:2f:91:c7:4f:d3:52:84:d3:e6:00:7e:53:80:12:56: 97:50:22:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/WVs+UDGqgdPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWZhYmMwNjEtNGIwOC00OTUxLWI2OWUtMWNiYzljZTJjNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx5hA6+86zNHd5xiId1TDIRY2gRVvUmvzoGQ TNzklRb+4hzfpMTsY+V+M7hSTOwSUqgelucL5OGKw4H0uPxMoM8FHDvVyCWWVTWQ 2BBYcUE14baxyNX7clTw6hlxIOt/LIo9YFp8axBnDYM15di5ir3sdBgR6vO1Sc8G UZNHTVF3i+eHsb2hbe8TY91Fz++o8skJSAl2sJrRGJ2OA8Q+IPcoNNu0WL7vnJ8X 5sG6WOziUkodaDgliMtAns8pW5znvgU7LDrnNX0HQCofOJ/+xqTRdH7cl4CNQ2AC CSBUfShP5OE/vb/rAi6OxrMAqkflCzhDn3L8Gsy3TMSyz6QibQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCeXjoz7UT0XLUWOjcssUNRGdzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODhiOTc2NDgtNTExMC0z ZjBjLWIzYmEtYjk3MjA1ZDQ3ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHitDzkjnCmaaLQEWxQrWrxU8OjjwxRc+A8zVwS0D0NEG6cnHMSv zRSE+0Nshb3qXbkCRGZFciQtCsoyvlIg8nUQN/5mudF/JvB/8S69jqYhp/Hdn7g/ gM/cyt3Kl5c77da9KykV/aR51pYMfe5QFh/axibk3VRcafb1sK9I7eQWrcgUOPhx pt+/itpcGcFdQE/23J1PNsIl1grkSiqoZgZyYuTShdAaUiWh4QMaVu6g5ENFpSx7 oaLgBjHQpOM6sc6crqYg/W0yeC1rKI1jM5sCVdD6X5sk0F04BVQaB4gYhTAG5Pnn HkDLToSlgi+Rx0/TUoTT5gB+U4ASVpdQIqU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:30 2025 by rpki-client