$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa File: ba9546b1-c4f9-3846-be26-ef951eb2490b.roa (raw, json) Hash identifier: nBUxN1Ja8xq1gZPkGwKY5Ltv0pWMNP9IO9O935EwOTA= Subject key identifier: 59:EB:B0:29:7B:52:B1:62:75:6C:06:F5:CB:90:6D:B6:94:96:D3:A5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB727B659744072CD54F0DCC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 26097 IP address blocks: 2001:470:2b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b6:59:74:40:72:cd:54:f0:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=858c36f4-caaa-473f-b596-d90ebdf5bae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:a7:fd:3e:48:7e:62:23:ef:29:42:58:0a: 1b:b3:9d:be:d1:82:c9:e5:ce:52:e9:05:fb:85:1c: 9d:97:5e:2b:b3:d6:29:2b:f6:03:81:0e:04:65:af: 40:29:75:59:07:1e:31:1b:8b:54:bc:47:b9:24:95: ee:c3:45:3d:49:23:3f:cf:0e:53:f3:96:89:88:4f: 02:8a:9a:b9:e9:81:67:36:f9:32:42:a3:ad:5a:50: cc:f5:2b:ab:1e:de:15:96:77:80:25:8b:c1:69:c1: bb:72:75:d8:e7:16:c0:98:9e:64:aa:1f:90:c0:ba: 83:7e:14:d5:35:f6:a8:f2:98:94:db:03:49:c0:41: 82:ac:6e:e5:d4:aa:1f:87:c1:d0:a4:7b:af:93:47: 93:91:da:46:13:02:55:8c:1e:f8:86:c3:42:1a:8e: 6c:80:72:2e:ad:cb:c1:c6:00:16:64:6c:8a:39:f6: 83:2d:68:a1:61:0d:33:e3:1e:f8:57:fa:04:57:f0: af:66:af:1c:7c:97:49:08:17:39:bd:b3:ad:b7:9f: 16:af:9b:8f:0c:aa:1e:5a:c1:f7:9b:24:6f:3d:7f: f4:88:e9:c0:db:ca:99:91:18:0f:0e:ce:55:06:b3: 0b:e8:10:3b:8e:36:ee:21:39:77:01:1c:9f:8c:fc: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EB:B0:29:7B:52:B1:62:75:6C:06:F5:CB:90:6D:B6:94:96:D3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba9546b1-c4f9-3846-be26-ef951eb2490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:10:ea:3b:e4:8b:3b:3e:1a:bc:fd:97:7b:e5:ff:5a:ab:2b: 1d:35:f5:e0:91:cc:79:4c:73:13:ee:68:90:cd:ad:d4:3b:03: 40:72:e0:a7:82:3d:5b:12:86:08:ea:35:40:09:b4:42:06:e6: 17:bc:c1:90:63:ad:59:dc:7a:c8:9e:2c:b7:09:a4:e8:3d:c3: 9c:df:fe:3f:d5:a4:45:5c:69:9e:5d:7d:97:f8:16:3a:ce:cf: 88:0f:0b:81:f5:82:09:a1:cd:55:8c:67:79:e8:e4:7a:12:94: 75:60:f2:f1:ee:68:d8:f9:2e:a4:a7:c3:72:eb:68:d3:72:f4: f0:74:91:3a:46:8a:49:96:b9:ab:ee:b4:ca:f2:94:c2:5d:d3: 3d:57:6e:03:3b:32:b0:49:f0:51:e9:90:54:2c:6c:b0:a9:0e: 63:2d:e5:38:7e:5d:bd:36:c3:de:7d:66:d6:c2:4d:30:13:9c: 9d:e9:57:40:b4:15:e1:c3:54:02:0e:11:e3:14:d3:53:5f:33: e7:fb:e2:8a:62:52:fe:5d:ae:39:bb:40:34:90:be:95:b2:72: 99:5d:57:89:b8:81:50:49:9c:8a:50:7d:05:14:46:39:d9:70: 0e:84:c4:27:58:9f:b1:0a:b7:38:ee:5c:02:6d:9d:11:69:d7: 80:67:94:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu3J7ZZdEByzVTw3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk ODU4YzM2ZjQtY2FhYS00NzNmLWI1OTYtZDkwZWJkZjViYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH6n/T5IfmIj7ylCWAobs52+0YLJ5c5S6QX7 hRydl14rs9YpK/YDgQ4EZa9AKXVZBx4xG4tUvEe5JJXuw0U9SSM/zw5T85aJiE8C ipq56YFnNvkyQqOtWlDM9SurHt4VlneAJYvBacG7cnXY5xbAmJ5kqh+QwLqDfhTV Nfao8piU2wNJwEGCrG7l1Kofh8HQpHuvk0eTkdpGEwJVjB74hsNCGo5sgHIurcvB xgAWZGyKOfaDLWihYQ0z4x74V/oEV/CvZq8cfJdJCBc5vbOtt58Wr5uPDKoeWsH3 myRvPX/0iOnA28qZkRgPDs5VBrML6BA7jjbuITl3ARyfjPxc9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFnrsCl7UrFidWwG9cuQbbaUltOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmE5NTQ2YjEtYzRmOS0z ODQ2LWJlMjYtZWY5NTFlYjI0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEsQ6jvkizs+Grz9l3vl/1qrKx019eCRzHlMcxPuaJDNrdQ7A0By 4KeCPVsShgjqNUAJtEIG5he8wZBjrVncesieLLcJpOg9w5zf/j/VpEVcaZ5dfZf4 FjrOz4gPC4H1ggmhzVWMZ3no5HoSlHVg8vHuaNj5LqSnw3LraNNy9PB0kTpGikmW uavutMrylMJd0z1XbgM7MrBJ8FHpkFQsbLCpDmMt5Th+Xb02w959ZtbCTTATnJ3p V0C0FeHDVAIOEeMU01NfM+f74opiUv5drjm7QDSQvpWycpldV4m4gVBJnIpQfQUU RjnZcA6ExCdYn7EKtzjuXAJtnRFp14BnlLE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:36 2025 by rpki-client