$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa File: a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa (raw, json) Hash identifier: Dr2/MPCbosr7jAYFxaip4rDUwkjg7Tfbs0C0keUfiMs= Subject key identifier: 0D:7C:37:A4:50:A7:FB:F4:A6:F4:30:75:1D:C4:D1:65:00:FA:6B:8D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D0EF029E714D72608480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 44209 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d0:ef:02:9e:71:4d:72:60:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8a30c6e4-702c-421e-9469-1aba16b55b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:e6:14:69:b7:7f:23:8e:e5:aa:26:f9:ed: 61:d8:72:39:db:06:d1:43:6f:75:61:e7:5d:0f:d7: aa:57:64:8e:c0:6b:ad:af:cf:ae:9e:c3:e4:91:cf: 7a:a9:15:1e:86:1c:12:15:1a:18:ca:3e:bc:e7:98: f1:78:af:8d:76:58:7b:a6:25:6f:17:cf:73:71:77: e3:fb:40:3a:66:e2:0b:f9:5e:b4:75:4d:d4:7f:45: 86:e6:0d:f2:f5:09:bd:6e:a9:ba:86:84:ea:22:ed: 8a:cb:0c:49:60:d8:f2:dc:66:66:9c:e7:6d:60:22: 38:08:08:b5:fa:61:76:8f:ea:c4:e6:4d:50:55:f8: 8b:ed:bb:e8:6b:f1:fd:24:6a:7c:08:70:24:91:43: 99:55:e7:21:29:08:87:3d:72:b3:dd:02:ea:03:4d: 3a:e3:0e:4d:9e:ed:6d:49:e7:a5:29:0f:8e:8d:de: c9:c0:21:5c:1d:b8:39:bd:eb:e3:c1:77:14:54:10: 53:e6:fc:4f:28:77:13:b6:c2:2c:46:b2:ce:fc:ef: 54:41:ad:32:82:96:48:80:57:4d:13:8b:e4:4d:3b: c1:cd:e3:f1:c3:05:5c:82:b0:02:d4:38:45:31:d5: 2b:3e:44:d2:5d:d3:68:83:3e:12:ff:78:86:34:a4: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:37:A4:50:A7:FB:F4:A6:F4:30:75:1D:C4:D1:65:00:FA:6B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12aa547-4497-3b0c-af32-d1bc6a713e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:da:d2:2c:0b:ad:43:f6:d6:4c:fb:87:fc:4c:7c:51:4c:30: ec:a4:fd:bb:61:36:72:24:ad:28:9c:be:0a:1d:f9:2b:c8:16: 28:a8:8a:67:24:47:14:b1:6a:70:1b:b5:71:c8:dd:52:14:18: 74:bf:ab:9b:93:f7:9d:9f:26:df:9a:3a:a7:ed:ae:dc:12:19: d2:31:3a:5d:36:a7:d1:ad:95:90:cd:c5:6e:b6:51:4b:dc:39: cc:3f:d9:69:f7:06:50:de:77:18:9d:12:f0:bd:42:89:83:be: 8a:83:73:fd:20:c8:66:97:a1:d1:ae:79:bd:0f:2c:0b:bc:49: ff:d6:55:ad:d9:8c:aa:8e:b3:03:12:18:4a:ac:26:2c:07:fa: a6:da:40:59:10:44:12:32:a1:c5:34:50:7f:f0:0b:43:ef:77: fd:41:b1:20:20:36:4b:5d:e5:54:5f:38:f7:52:9d:e0:fd:1c: 8b:c1:af:8f:d7:91:b3:1b:e5:6a:09:d1:79:3f:0a:29:3a:f4: 84:4b:66:bd:cc:03:55:8a:b6:1a:3f:f6:1e:fe:59:af:a2:9a: 98:bc:ad:76:8a:48:16:77:36:bd:cf:ce:1f:c0:ee:3a:1c:35: 31:6f:59:5b:9f:bc:0d:9f:5d:bd:a4:d2:97:19:f2:0e:ab:06: 7f:ab:3f:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19DvAp5xTXJghIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OGEzMGM2ZTQtNzAyYy00MjFlLTk0NjktMWFiYTE2YjU1YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6TmFGm3fyOO5aom+e1h2HI52wbRQ291Yedd D9eqV2SOwGutr8+unsPkkc96qRUehhwSFRoYyj6855jxeK+Ndlh7piVvF89zcXfj +0A6ZuIL+V60dU3Uf0WG5g3y9Qm9bqm6hoTqIu2KywxJYNjy3GZmnOdtYCI4CAi1 +mF2j+rE5k1QVfiL7bvoa/H9JGp8CHAkkUOZVechKQiHPXKz3QLqA0064w5Nnu1t SeelKQ+Ojd7JwCFcHbg5vevjwXcUVBBT5vxPKHcTtsIsRrLO/O9UQa0ygpZIgFdN E4vkTTvBzePxwwVcgrAC1DhFMdUrPkTSXdNogz4S/3iGNKRAgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA18N6RQp/v0pvQwdR3E0WUA+muNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTEyYWE1NDctNDQ5Ny0z YjBjLWFmMzItZDFiYzZhNzEzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFza0iwLrUP21kz7h/xMfFFMMOyk/bthNnIkrSicvgod+SvIFiio imckRxSxanAbtXHI3VIUGHS/q5uT952fJt+aOqftrtwSGdIxOl02p9GtlZDNxW62 UUvcOcw/2Wn3BlDedxidEvC9QomDvoqDc/0gyGaXodGueb0PLAu8Sf/WVa3ZjKqO swMSGEqsJiwH+qbaQFkQRBIyocU0UH/wC0Pvd/1BsSAgNktd5VRfOPdSneD9HIvB r4/XkbMb5WoJ0Xk/Cik69IRLZr3MA1WKtho/9h7+Wa+impi8rXaKSBZ3Nr3Pzh/A 7jocNTFvWVufvA2fXb2k0pcZ8g6rBn+rP68= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:02 2025 by rpki-client