$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa File: a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa (raw, json) Hash identifier: mCNYaTgVmtURHEQXCDg+RD8KTQJigElfyS7xYCqXfoY= Subject key identifier: 70:0D:53:0A:1D:F9:C6:1D:B3:76:C1:5A:68:91:0D:1F:54:19:62:A7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CEF058EB0E825948E5A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 15081 IP address blocks: 2001:470:287::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ce:f0:58:eb:0e:82:59:48:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=eb388c03-545d-4562-83b9-03e6d46ba81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:57:59:eb:c6:e7:1b:9e:77:f0:19:1a:68: e9:a5:c2:c8:70:62:70:60:0f:8b:c3:42:0c:21:19: d8:f3:8c:fb:a4:a9:28:49:f2:8b:e6:e0:0b:a0:fd: 22:f7:af:0d:4d:c2:1d:80:e8:9f:69:a9:8e:28:04: 76:7e:72:2f:79:c2:8e:4f:46:98:e3:f7:18:8b:64: a8:82:17:3a:0b:c0:c0:1e:b9:47:fb:1f:f3:09:ea: e5:c0:cb:21:0e:a4:5c:08:df:fd:42:6d:8c:06:3d: 4f:ac:03:78:9f:b4:93:22:84:30:c6:d0:0f:65:33: 5a:c0:5d:d6:ce:94:af:21:50:39:3e:d2:19:b0:a4: 57:98:e5:fc:8a:75:cb:fb:40:31:f2:3b:6c:65:c2: d8:78:ad:d9:99:30:dd:51:c6:de:98:4f:c0:45:b4: 50:66:d4:c0:b2:32:b1:63:94:a6:5b:4c:d9:a5:61: 3b:3b:ac:c6:9a:5b:a5:ac:9a:91:8f:d3:27:52:cb: ed:c6:ed:50:41:59:2e:e3:a3:9a:52:a5:b8:63:bb: d0:26:60:6d:40:c5:44:97:39:52:29:e5:05:ba:77: f5:b4:b9:3c:17:30:89:3a:e2:f8:e9:5f:ef:56:f3: fb:3c:66:5a:d8:b8:45:b8:78:09:05:9a:99:e9:d4: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:53:0A:1D:F9:C6:1D:B3:76:C1:5A:68:91:0D:1F:54:19:62:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2c4f45f-0794-3016-b08d-1a60c4ca5384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:287::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ac:63:34:a8:3d:8a:9e:13:52:7e:f2:9e:23:e5:cf:10:1c: a9:01:fc:55:34:51:6b:d5:83:e1:a5:6c:c7:ba:f2:87:92:1c: c4:87:d7:d6:cd:92:df:40:c9:fd:f9:f9:3c:90:e5:33:38:44: 78:a2:6a:c1:5c:96:4d:09:93:27:9f:a7:7a:14:f8:aa:cd:bc: e3:da:ea:6e:8c:fe:b0:3a:11:25:89:48:2e:f9:72:59:31:24: 67:79:d2:40:13:b9:dc:6d:38:c5:93:f7:ac:c8:87:64:13:69: e1:14:c7:56:b5:5a:f8:20:ca:ae:ef:bb:a4:77:70:36:46:e0: 69:75:45:63:6d:63:a3:c2:de:1a:d2:69:0f:67:c2:96:59:fe: ae:94:6a:81:62:94:e8:03:df:5b:21:60:2b:7d:e3:e4:da:76: 48:d3:a5:b0:94:0a:b2:8f:f8:75:a6:1c:db:b1:42:69:3e:44: 71:0c:80:55:59:a8:5a:f2:ca:f8:d7:36:0f:b1:6a:75:7a:68: 0e:99:1d:a6:88:20:1c:a0:4c:2c:d4:f5:6f:ca:ba:05:12:b5: fe:de:01:21:3a:fe:7a:aa:2a:a1:c5:84:a6:43:78:1b:e3:97: ea:0a:fe:49:77:ee:3c:f4:21:41:70:fe:de:1d:ce:57:00:0b: 4c:03:89:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ187wWOsOgllI5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWIzODhjMDMtNTQ1ZC00NTYyLTgzYjktMDNlNmQ0NmJhODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBhXWevG5xued/AZGmjppcLIcGJwYA+Lw0IM IRnY84z7pKkoSfKL5uALoP0i968NTcIdgOifaamOKAR2fnIvecKOT0aY4/cYi2So ghc6C8DAHrlH+x/zCerlwMshDqRcCN/9Qm2MBj1PrAN4n7STIoQwxtAPZTNawF3W zpSvIVA5PtIZsKRXmOX8inXL+0Ax8jtsZcLYeK3ZmTDdUcbemE/ARbRQZtTAsjKx Y5SmW0zZpWE7O6zGmlulrJqRj9MnUsvtxu1QQVku46OaUqW4Y7vQJmBtQMVElzlS KeUFunf1tLk8FzCJOuL46V/vVvP7PGZa2LhFuHgJBZqZ6dRxPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHANUwod+cYds3bBWmiRDR9UGWKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTJjNGY0NWYtMDc5NC0z MDE2LWIwOGQtMWE2MGM0Y2E1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABisYzSoPYqeE1J+8p4j5c8QHKkB/FU0UWvVg+GlbMe68oeSHMSH 19bNkt9Ayf35+TyQ5TM4RHiiasFclk0Jkyefp3oU+KrNvOPa6m6M/rA6ESWJSC75 clkxJGd50kATudxtOMWT96zIh2QTaeEUx1a1Wvggyq7vu6R3cDZG4Gl1RWNtY6PC 3hrSaQ9nwpZZ/q6UaoFilOgD31shYCt94+TadkjTpbCUCrKP+HWmHNuxQmk+RHEM gFVZqFryyvjXNg+xanV6aA6ZHaaIIBygTCzU9W/KugUStf7eASE6/nqqKqHFhKZD eBvjl+oK/kl37jz0IUFw/t4dzlcAC0wDiT8= -----END CERTIFICATE-----Generated at Sat Oct 25 10:36:37 2025 by rpki-client