$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa File: bf05c7f9-cf75-3be1-985a-0334d3985d70.roa (raw, json) Hash identifier: /QHZlD7Hl+W8+6e46HTduDgJgu5xOptddk1vpHIietc= Subject key identifier: 8C:CF:CD:E5:99:00:2C:36:01:F6:25:67:95:41:36:85:D7:AB:C3:1D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F2C31319A52ADA3B5F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 44411 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f2:c3:13:19:a5:2a:da:3b:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bd08b326-9fa0-440e-a1d4-3a5135e6c49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:b5:df:32:25:60:a0:b1:87:08:af:07:eb: 0c:a3:d9:1f:66:be:22:76:db:0b:f4:1f:03:a2:87: a6:48:7b:c0:2d:1c:56:a0:e9:b7:62:fc:93:ba:67: a5:7e:9a:04:de:47:08:9e:95:d4:00:11:61:d4:63: 5e:43:88:08:58:d8:a0:86:78:68:52:08:48:5f:a3: 62:1b:f2:b3:79:a7:eb:13:49:2a:78:a4:6e:aa:97: ec:b8:ef:9a:f6:47:1f:87:8d:d4:e4:e5:23:a4:84: 42:8a:5b:8e:30:e6:97:3a:50:fd:c2:9d:17:6c:c0: b4:3e:c5:ce:27:ad:ca:6c:5b:a7:2d:4f:41:53:34: a7:36:37:48:82:57:e8:74:a4:4a:94:d1:09:15:bf: 9c:3c:97:56:a0:60:1b:b3:63:fb:1b:a0:8e:21:d9: 1e:2c:d6:50:28:88:07:12:ff:76:07:3c:71:3b:47: 51:41:a7:45:ee:f1:53:92:8a:5e:f3:fe:e4:cc:bc: fb:d9:e0:8f:98:b8:c9:46:11:58:f9:b7:1f:df:a1: 0e:a9:b0:a8:82:44:f8:93:c1:37:a0:a9:14:88:3a: a2:19:ea:b8:09:8f:9e:f7:5f:fe:13:59:31:b9:6b: 4e:b0:b9:15:5a:f0:70:6c:d6:79:af:2a:ab:fa:37: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CF:CD:E5:99:00:2C:36:01:F6:25:67:95:41:36:85:D7:AB:C3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf05c7f9-cf75-3be1-985a-0334d3985d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9a:ed:39:60:3a:b9:e8:81:8e:3b:fc:0d:61:f8:ce:fe:a0: 7e:f2:08:95:d9:8e:da:dd:4d:e5:93:b1:15:81:03:b4:89:1f: d7:d0:7e:21:f2:68:a3:07:aa:ff:49:61:39:33:ba:9a:d8:16: 6b:46:4f:b3:7b:fa:a9:d7:55:cd:c0:59:6f:f8:1d:ad:44:15: 39:a5:39:f4:da:ea:0c:da:c1:75:dc:03:2d:9d:56:2f:57:db: 8c:06:f8:8c:09:a2:bf:d9:fe:2f:33:b4:7c:fe:34:92:0e:09: 74:e3:a9:4a:8d:dd:b4:03:bd:30:09:0d:ba:50:2d:b1:94:84: c4:0d:29:af:06:7c:42:d7:27:30:9f:1c:e5:59:0f:03:96:f4: 65:ad:1b:64:1c:ed:41:1d:13:73:91:5b:d0:ef:2b:cd:fc:fc: 6c:af:a1:d5:ab:e6:29:7e:be:ee:38:4e:c4:ee:a5:ab:1c:8d: 88:1d:f6:b0:bc:19:42:41:0c:90:2b:d9:8a:7f:13:06:95:bc: ee:50:eb:12:a4:a6:60:f8:7f:13:a1:9a:b5:5f:0e:db:d8:49: ed:07:18:92:d5:f8:87:a6:bc:e7:96:f1:2c:3f:b7:f4:35:b5: 78:08:e4:0a:e9:28:99:a9:e8:b7:67:8e:c5:6f:dd:e6:61:25: c5:8b:4b:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/LDExmlKto7X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmQwOGIzMjYtOWZhMC00NDBlLWExZDQtM2E1MTM1ZTZjNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbG13zIlYKCxhwivB+sMo9kfZr4idtsL9B8D ooemSHvALRxWoOm3YvyTumelfpoE3kcInpXUABFh1GNeQ4gIWNighnhoUghIX6Ni G/KzeafrE0kqeKRuqpfsuO+a9kcfh43U5OUjpIRCiluOMOaXOlD9wp0XbMC0PsXO J63KbFunLU9BUzSnNjdIglfodKRKlNEJFb+cPJdWoGAbs2P7G6COIdkeLNZQKIgH Ev92BzxxO0dRQadF7vFTkope8/7kzLz72eCPmLjJRhFY+bcf36EOqbCogkT4k8E3 oKkUiDqiGeq4CY+e91/+E1kxuWtOsLkVWvBwbNZ5ryqr+jefqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzPzeWZACw2AfYlZ5VBNoXXq8MdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmYwNWM3ZjktY2Y3NS0z YmUxLTk4NWEtMDMzNGQzOTg1ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOa7TlgOrnogY47/A1h+M7+oH7yCJXZjtrdTeWTsRWBA7SJH9fQ fiHyaKMHqv9JYTkzuprYFmtGT7N7+qnXVc3AWW/4Ha1EFTmlOfTa6gzawXXcAy2d Vi9X24wG+IwJor/Z/i8ztHz+NJIOCXTjqUqN3bQDvTAJDbpQLbGUhMQNKa8GfELX JzCfHOVZDwOW9GWtG2Qc7UEdE3ORW9DvK838/GyvodWr5il+vu44TsTupascjYgd 9rC8GUJBDJAr2Yp/EwaVvO5Q6xKkpmD4fxOhmrVfDtvYSe0HGJLV+IemvOeW8Sw/ t/Q1tXgI5ArpKJmp6LdnjsVv3eZhJcWLS9A= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:32 2025 by rpki-client