$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa File: 9fcb47e4-2631-3189-b033-c457218cf93c.roa (raw, json) Hash identifier: 7OvEZY8XNtLMrTcBJG2w3W6sNuM5/hUiIW9Yw+WhnZo= Subject key identifier: 5F:8A:55:87:7E:06:4B:94:43:91:E3:CB:7D:82:F4:C9:CF:AE:7D:83 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D343E583793B7002FD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 10737 IP address blocks: 2001:470:2d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d3:43:e5:83:79:3b:70:02:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ee45a2c4-5a36-48fe-a62a-69472d072b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:6c:3b:8f:ef:76:df:4c:99:69:54:37:6f: cd:be:aa:56:85:0a:54:a5:e4:c7:64:49:62:cb:54: a6:6d:96:ad:fb:c5:40:03:ea:b4:ec:bb:b0:0f:fb: c5:a9:2d:11:66:94:8b:5c:63:4e:c5:59:c2:4b:7d: ec:47:b4:ee:36:c0:21:8e:8a:4e:4c:64:dd:12:d0: 91:d2:69:82:15:5a:c4:ba:c5:c2:03:6a:31:68:7a: 32:49:d0:30:c8:3f:d3:66:6f:32:f7:b9:35:69:2c: 40:62:f6:ff:e7:86:c7:bb:1d:40:7e:57:5f:cd:28: c1:9c:a5:c8:bd:d2:3e:93:a4:4d:01:42:c5:8d:a1: aa:d1:72:bd:30:37:9c:95:aa:de:64:e2:e7:71:de: d0:b3:f5:ba:e6:86:87:ee:74:71:21:ba:e7:c6:54: 4d:e7:3d:8e:86:ea:d8:60:ed:3a:40:b5:dd:1c:5c: ef:8a:bb:af:3d:2b:d3:ed:80:a0:29:d7:cd:68:7c: 4b:60:f2:6f:e1:15:9a:77:5e:df:07:48:f8:67:f3: 83:03:3c:07:92:cd:44:bc:07:2b:f6:29:eb:fd:5c: 39:f9:53:19:45:ab:e8:fe:6c:f5:04:0b:12:3d:ee: 27:dc:2f:88:84:00:a2:ff:0f:7a:09:ff:ec:7a:4c: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:55:87:7E:06:4B:94:43:91:E3:CB:7D:82:F4:C9:CF:AE:7D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:04:1a:3b:a2:aa:40:5e:e3:d5:fc:29:6d:31:f2:46:24:2a: 6c:68:dd:07:43:33:44:86:50:71:66:9e:78:93:6c:ce:10:d7: f1:da:47:e2:8d:e8:d0:23:8c:d7:73:6a:5e:a2:fe:8c:6e:7f: b4:1b:d9:df:06:65:e9:68:bb:bf:4a:a4:5f:76:d0:49:da:3b: 2a:d1:42:b2:a7:90:b4:d9:38:46:26:c1:e8:9e:35:cd:b6:2d: 1b:88:d4:33:ef:61:74:15:40:26:e9:c0:6a:ca:09:53:93:da: bb:56:80:b8:0d:79:26:6d:6c:2b:54:6c:c9:65:b5:2c:d3:f0: a2:26:9c:4e:fb:a0:28:de:79:dc:3a:85:e0:96:d9:0b:a6:ea: b4:ab:9e:de:4d:e3:7e:f9:43:42:73:51:b9:a3:2e:f7:13:b4: 14:09:15:81:da:bb:84:43:3f:3c:78:a4:23:64:46:5a:25:e7: 55:a9:df:07:71:df:cd:3a:91:21:2e:a0:11:3a:ed:56:f3:3c: dd:ab:ae:99:07:4a:80:07:01:17:03:94:15:b5:e3:a1:1d:66: fc:7e:25:18:50:57:48:17:39:f2:64:c4:08:23:34:f1:f2:7c: 45:ef:f0:19:23:73:c3:df:36:6f:a7:95:4d:02:a0:3c:68:d6: 0f:dc:a5:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19ND5YN5O3AC/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWU0NWEyYzQtNWEzNi00OGZlLWE2MmEtNjk0NzJkMDcyYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfNsO4/vdt9MmWlUN2/NvqpWhQpUpeTHZEli y1SmbZat+8VAA+q07LuwD/vFqS0RZpSLXGNOxVnCS33sR7TuNsAhjopOTGTdEtCR 0mmCFVrEusXCA2oxaHoySdAwyD/TZm8y97k1aSxAYvb/54bHux1AfldfzSjBnKXI vdI+k6RNAULFjaGq0XK9MDeclareZOLncd7Qs/W65oaH7nRxIbrnxlRN5z2OhurY YO06QLXdHFzviruvPSvT7YCgKdfNaHxLYPJv4RWad17fB0j4Z/ODAzwHks1EvAcr 9inr/Vw5+VMZRavo/mz1BAsSPe4n3C+IhACi/w96Cf/sekwggwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+KVYd+BkuUQ5Hjy32C9MnPrn2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWZjYjQ3ZTQtMjYzMS0z MTg5LWIwMzMtYzQ1NzIxOGNmOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQEGjuiqkBe49X8KW0x8kYkKmxo3QdDM0SGUHFmnniTbM4Q1/Ha R+KN6NAjjNdzal6i/oxuf7Qb2d8GZelou79KpF920EnaOyrRQrKnkLTZOEYmweie Nc22LRuI1DPvYXQVQCbpwGrKCVOT2rtWgLgNeSZtbCtUbMlltSzT8KImnE77oCje edw6heCW2Qum6rSrnt5N4375Q0JzUbmjLvcTtBQJFYHau4RDPzx4pCNkRlol51Wp 3wdx3806kSEuoBE67VbzPN2rrpkHSoAHARcDlBW146EdZvx+JRhQV0gXOfJkxAgj NPHyfEXv8Bkjc8PfNm+nlU0CoDxo1g/cpSI= -----END CERTIFICATE-----Generated at Tue Nov 4 04:03:52 2025 by rpki-client