$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa File: 8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa (raw, json) Hash identifier: JQNKJQD1Eisae4nNu41VL5PEstLa52jOxaT8TlZLgPk= Subject key identifier: 3C:53:B9:28:7C:0D:F8:75:70:F0:62:5D:42:FD:DD:53:9A:37:3A:09 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B0746D45015E68B9D8B4AC540 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 54634 IP address blocks: 2001:470:2b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d4:50:15:e6:8b:9d:8b:4a:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=3019d91a-4d02-4256-a7a8-664e9bcbc1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:b6:38:fa:6d:51:7c:38:cb:ca:53:6d:bd: 6a:4b:13:7a:d3:7f:b1:41:ce:6d:d3:08:c8:2b:e1: ad:88:70:6b:2e:6d:2f:3b:f3:e6:b2:7e:82:df:f7: b1:25:4d:bd:19:d5:16:1e:3d:6e:84:a1:16:55:40: 7f:bf:98:84:7f:4f:46:ac:7f:34:fe:fb:d0:69:e6: 84:83:96:65:00:6a:9e:15:a5:08:70:fa:69:b0:79: b0:12:85:3c:77:17:85:4b:0c:89:7e:cd:72:63:4f: e5:ef:ca:ee:12:e9:e8:08:6d:d6:1b:32:ea:fe:b9: d9:bf:14:ca:96:78:0a:1d:68:cb:7e:45:53:8a:be: 98:04:11:1d:e0:bb:82:fd:de:2b:82:67:fd:0b:36: 00:72:80:29:cd:f6:12:02:de:90:3b:8e:fe:93:34: a5:09:b6:32:c7:9a:e2:9b:67:53:43:81:3c:6c:be: 6a:29:45:4e:67:6e:21:43:57:6e:74:3d:c8:e3:aa: a1:5a:1d:a5:76:10:9d:06:a0:ab:9f:22:26:d4:56: 65:27:a6:70:91:b9:98:49:d7:0e:9c:88:91:81:5b: 8b:ed:ed:04:99:50:54:75:98:f9:ef:9f:80:7a:7c: d1:51:c5:96:02:56:42:d9:fa:8b:1e:86:77:0c:9d: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:53:B9:28:7C:0D:F8:75:70:F0:62:5D:42:FD:DD:53:9A:37:3A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c2868c0-ba9a-37de-8fbc-e74a96e2345a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:42:f1:79:e0:c0:38:6e:36:76:01:07:4c:4a:73:6a:53:04: de:69:c1:0f:f5:83:12:a7:e4:71:f6:ad:7d:8e:a2:08:72:e4: f6:ba:9e:88:3f:dc:be:51:e1:41:51:1a:60:47:6b:98:dc:2c: 84:4c:93:38:d0:96:4f:64:fd:ee:8b:ef:af:bd:aa:1b:ab:f2: 6d:99:46:fb:9a:49:fb:c6:b0:2e:1c:a0:21:8d:b5:c7:7c:c0: 77:3e:95:2d:d9:db:28:3d:3d:c5:53:6d:f1:13:9c:a4:1d:d8: 46:ac:eb:77:22:18:3b:5b:48:fd:27:cb:15:5a:f9:ed:6c:d3: 0e:5f:a0:27:e1:94:c9:6b:b3:c1:8a:9f:39:c6:e8:9a:b1:27: d9:99:f3:11:bd:db:45:c7:fb:37:36:02:2f:90:d9:56:42:a9: ab:26:ab:d6:9a:ac:62:39:b1:65:01:92:a1:06:fa:b0:49:a1: 31:a2:6e:a7:92:07:94:b0:71:2e:12:33:55:ed:ad:6d:1a:d7: 76:0a:f1:53:16:11:26:03:ed:88:78:14:31:42:1c:85:ad:fa: 98:99:bc:3e:9e:b5:60:3f:6f:5d:b5:2a:91:ef:a8:a1:4f:bb: d2:13:18:05:b2:e5:c0:c0:72:25:60:94:1b:74:1d:bc:b3:db: f5:77:13:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsHRtRQFeaLnYtKxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzAxOWQ5MWEtNGQwMi00MjU2LWE3YTgtNjY0ZTliY2JjMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHy2OPptUXw4y8pTbb1qSxN603+xQc5t0wjI K+GtiHBrLm0vO/Pmsn6C3/exJU29GdUWHj1uhKEWVUB/v5iEf09GrH80/vvQaeaE g5ZlAGqeFaUIcPppsHmwEoU8dxeFSwyJfs1yY0/l78ruEunoCG3WGzLq/rnZvxTK lngKHWjLfkVTir6YBBEd4LuC/d4rgmf9CzYAcoApzfYSAt6QO47+kzSlCbYyx5ri m2dTQ4E8bL5qKUVOZ24hQ1dudD3I46qhWh2ldhCdBqCrnyIm1FZlJ6ZwkbmYSdcO nIiRgVuL7e0EmVBUdZj575+AenzRUcWWAlZC2fqLHoZ3DJ3XswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxTuSh8Dfh1cPBiXUL93VOaNzoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGMyODY4YzAtYmE5YS0z N2RlLThmYmMtZTc0YTk2ZTIzNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9C8XngwDhuNnYBB0xKc2pTBN5pwQ/1gxKn5HH2rX2Ooghy5Pa6 nog/3L5R4UFRGmBHa5jcLIRMkzjQlk9k/e6L76+9qhur8m2ZRvuaSfvGsC4coCGN tcd8wHc+lS3Z2yg9PcVTbfETnKQd2Eas63ciGDtbSP0nyxVa+e1s0w5foCfhlMlr s8GKnznG6JqxJ9mZ8xG920XH+zc2Ai+Q2VZCqasmq9aarGI5sWUBkqEG+rBJoTGi bqeSB5SwcS4SM1XtrW0a13YK8VMWESYD7Yh4FDFCHIWt+piZvD6etWA/b121KpHv qKFPu9ITGAWy5cDAciVglBt0Hbyz2/V3E50= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:37 2025 by rpki-client