$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa File: b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa (raw, json) Hash identifier: AQGRS8sKTVxUXGOH5RjVzWP2+WyrMTz0q6ijrR092zk= Subject key identifier: F3:C0:AA:2D:95:F3:CF:EB:16:91:B8:07:94:83:18:9A:06:A6:72:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F2D3E47E275D716E5800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 47702 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f2:d3:e4:7e:27:5d:71:6e:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c89f4416-9798-4d96-a520-c585e8b7bdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:bc:51:e1:2c:91:23:41:ad:f5:84:fa:7e: 86:28:91:80:38:66:02:c0:7a:50:8b:2e:18:1f:fa: e1:6c:40:63:b3:f7:d1:ec:4b:de:a1:82:bf:d9:d2: b2:fb:59:c4:06:e7:da:2e:a5:3d:da:84:33:56:2d: 16:3e:bf:fa:c1:ad:ab:f8:ae:ab:93:45:5a:0b:e4: 6f:ed:f4:77:bb:6f:18:a3:20:80:da:7f:aa:5e:a3: 67:5e:c3:83:7a:38:f7:aa:2e:0a:b7:62:d8:d7:82: 08:a5:fb:2a:6d:d0:45:92:1d:98:2d:fc:f6:25:61: 4d:b0:19:19:c1:f3:13:f4:3e:fb:66:26:54:6f:7a: f4:e0:7a:fb:a8:d0:b8:9e:94:19:b4:07:d3:32:3e: ac:00:10:42:77:4e:0f:03:ee:43:94:a1:7b:b0:37: d1:97:63:dd:d9:a5:cc:a8:52:b1:2a:f3:23:e5:0b: 79:ad:55:6b:71:54:75:e2:29:b9:77:f0:8d:ec:e8: 9c:f9:b9:6b:f0:fe:2e:e0:af:6a:f2:a8:1b:cd:c9: d0:b5:bf:73:c3:3e:e8:bc:1e:bf:7f:47:77:72:44: 29:4e:02:3a:88:bf:95:d3:23:6a:7e:d3:77:50:47: 43:d5:52:ce:b7:17:2e:f5:d5:7b:0c:b2:95:1d:b3: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:AA:2D:95:F3:CF:EB:16:91:B8:07:94:83:18:9A:06:A6:72:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a5fcfc-e933-301b-8f12-3086e28ddad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:24:38:9e:23:24:4b:31:d2:28:66:d3:18:42:58:34:74:5d: ba:cc:3c:99:61:7e:e1:16:2e:b8:6d:04:9a:3d:4b:46:de:5e: 29:60:85:d7:49:5c:e5:12:4a:73:12:05:b1:d7:31:2b:fe:6b: bb:80:4d:20:bb:b0:46:5a:80:ef:1c:50:6b:e6:5f:b0:56:27: be:b2:58:26:7e:62:ea:60:53:43:c8:63:32:19:d9:9c:73:d7: 48:b1:2d:2b:44:63:b2:6e:f5:0a:56:fc:b2:c1:81:27:b3:94: 95:a5:6c:74:55:8f:a8:2d:d6:45:23:ce:7b:bf:fe:da:90:d1: 02:0a:6d:52:4f:34:db:f8:2c:0a:1b:17:2b:ce:0e:0c:fe:3e: fa:b8:9b:ad:8a:53:e6:36:a4:90:35:4a:36:bc:2b:c8:03:15: 76:98:16:68:e7:21:14:26:50:b2:2c:08:16:fa:31:67:36:c9: 03:69:cd:17:7a:33:fa:c7:77:9e:4a:70:24:37:b1:48:2c:f8: 8d:6e:31:ce:67:55:d6:fa:5b:c1:de:f0:0b:49:1e:61:5f:11: aa:a3:ca:10:96:d0:ec:74:88:50:d1:67:20:01:02:3d:48:a0: f8:6a:aa:da:af:43:9b:c8:ca:a8:0d:51:93:8a:9d:87:00:21: e6:d6:e7:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/LT5H4nXXFuWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Yzg5ZjQ0MTYtOTc5OC00ZDk2LWE1MjAtYzU4NWU4YjdiZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+68UeEskSNBrfWE+n6GKJGAOGYCwHpQiy4Y H/rhbEBjs/fR7EveoYK/2dKy+1nEBufaLqU92oQzVi0WPr/6wa2r+K6rk0VaC+Rv 7fR3u28YoyCA2n+qXqNnXsODejj3qi4Kt2LY14IIpfsqbdBFkh2YLfz2JWFNsBkZ wfMT9D77ZiZUb3r04Hr7qNC4npQZtAfTMj6sABBCd04PA+5DlKF7sDfRl2Pd2aXM qFKxKvMj5Qt5rVVrcVR14im5d/CN7Oic+blr8P4u4K9q8qgbzcnQtb9zwz7ovB6/ f0d3ckQpTgI6iL+V0yNqftN3UEdD1VLOtxcu9dV7DLKVHbN9KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPAqi2V88/rFpG4B5SDGJoGpnKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjJhNWZjZmMtZTkzMy0z MDFiLThmMTItMzA4NmUyOGRkYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMkOJ4jJEsx0ihm0xhCWDR0XbrMPJlhfuEWLrhtBJo9S0beXilg hddJXOUSSnMSBbHXMSv+a7uATSC7sEZagO8cUGvmX7BWJ76yWCZ+YupgU0PIYzIZ 2Zxz10ixLStEY7Ju9QpW/LLBgSezlJWlbHRVj6gt1kUjznu//tqQ0QIKbVJPNNv4 LAobFyvODgz+Pvq4m62KU+Y2pJA1Sja8K8gDFXaYFmjnIRQmULIsCBb6MWc2yQNp zRd6M/rHd55KcCQ3sUgs+I1uMc5nVdb6W8He8AtJHmFfEaqjyhCW0Ox0iFDRZyAB Aj1IoPhqqtqvQ5vIyqgNUZOKnYcAIebW5wQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:55:24 2025 by rpki-client