$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa File: bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa (raw, json) Hash identifier: LTCiAAxlVZSjMVktlYcWI4AjeybpeigSapKrXSuwgmE= Subject key identifier: 88:4C:FA:92:15:FF:34:8D:67:16:3F:E9:2D:A5:45:3C:38:67:DB:CD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F951FF1358740FEFD480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 11085 IP address blocks: 2001:470:119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f9:51:ff:13:58:74:0f:ef:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9f5a4b82-464b-4c2b-9055-f0bcd52a2d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:8e:17:e0:43:e4:95:48:d2:a5:86:53:4b: b6:75:b9:d7:8a:51:82:06:90:fc:11:09:84:e7:52: 02:30:0d:73:85:37:d9:1f:91:ee:75:02:88:cf:7c: 5a:17:34:4c:6f:ed:f4:56:78:b3:10:0f:11:0c:b2: 04:fe:23:e1:1c:31:d6:73:ba:32:c1:de:78:02:7b: c1:77:85:75:b9:61:c2:a5:26:58:7a:01:85:77:b5: c4:19:e9:ab:ca:9b:c1:20:3c:34:cc:5c:3b:f8:25: d7:be:d1:32:b6:28:50:f1:0a:b0:7e:4f:55:6e:a1: 36:bd:1d:11:15:dd:d8:eb:02:9f:6f:a9:38:ca:28: e5:31:fc:d8:a1:39:19:9b:dd:e5:40:5f:8a:73:41: 40:7f:cc:65:1c:d2:af:aa:32:54:86:8a:3f:f1:d4: a5:80:7a:0c:6c:98:69:4a:84:f1:6d:85:72:1b:e0: 2d:c8:da:11:48:fe:ed:45:49:6d:a2:3c:2d:d9:76: aa:b6:29:6c:7f:19:42:da:52:78:85:31:8e:66:24: 8c:af:41:47:c4:44:95:f3:11:34:c1:b0:b7:fa:23: 2e:be:a3:57:cd:26:81:c4:7d:b9:3d:14:75:35:c0: e3:5d:05:1b:11:a7:7e:9c:27:38:86:1c:4c:06:26: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4C:FA:92:15:FF:34:8D:67:16:3F:E9:2D:A5:45:3C:38:67:DB:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9c:18:2f:25:fc:b6:e4:bf:c0:12:89:54:e9:2e:8c:d8:6b: a4:da:9c:2f:4b:ed:e5:fd:26:5e:c2:07:6c:9a:e8:23:2f:5f: 1e:98:11:6d:a1:5c:7f:2a:8c:8d:12:8e:ab:e6:19:f7:45:86: 65:d8:6b:35:e6:6f:be:88:d1:87:0a:d1:33:dc:bc:f4:42:c1: c0:72:a2:ee:17:53:ee:26:21:a1:9f:3c:67:d4:23:09:34:87: c8:e3:01:a6:49:e4:b1:8b:dd:06:99:b4:ca:12:44:1f:b6:97: fa:07:46:3d:d4:3e:7f:e4:50:df:82:ff:17:d6:2d:04:90:12: c3:ce:90:96:e9:f1:db:b8:b6:24:65:0d:af:b7:bf:07:38:1c: 34:ef:b8:a2:11:3b:a1:c3:dd:7d:39:52:d4:9a:14:e6:a1:b1: db:e0:ae:f9:b3:3b:a4:ba:6d:55:46:11:e9:88:9d:4b:57:6b: 2e:8e:d8:13:4c:92:52:fb:97:ca:85:01:de:fb:01:d0:e0:5a: 69:2d:11:00:17:4f:33:dc:5b:0a:eb:67:74:45:bb:26:5a:68: c8:ce:d1:56:a2:db:7a:76:1d:06:00:66:57:96:66:83:8d:40: 10:32:b4:62:be:47:a7:8f:51:b1:05:c7:6e:08:2d:ac:08:d8: a7:b7:db:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/lR/xNYdA/v1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWY1YTRiODItNDY0Yi00YzJiLTkwNTUtZjBiY2Q1MmEyZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyOF+BD5JVI0qWGU0u2dbnXilGCBpD8EQmE 51ICMA1zhTfZH5HudQKIz3xaFzRMb+30VnizEA8RDLIE/iPhHDHWc7oywd54AnvB d4V1uWHCpSZYegGFd7XEGemrypvBIDw0zFw7+CXXvtEytihQ8Qqwfk9VbqE2vR0R Fd3Y6wKfb6k4yijlMfzYoTkZm93lQF+Kc0FAf8xlHNKvqjJUhoo/8dSlgHoMbJhp SoTxbYVyG+AtyNoRSP7tRUltojwt2XaqtilsfxlC2lJ4hTGOZiSMr0FHxESV8xE0 wbC3+iMuvqNXzSaBxH25PRR1NcDjXQUbEad+nCc4hhxMBib4bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhM+pIV/zSNZxY/6S2lRTw4Z9vNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1YmQzZTgtYmYzZS0z OWE2LWE4MmQtMjNmNDUwNzk1NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKcGC8l/Lbkv8ASiVTpLozYa6TanC9L7eX9Jl7CB2ya6CMvXx6Y EW2hXH8qjI0SjqvmGfdFhmXYazXmb76I0YcK0TPcvPRCwcByou4XU+4mIaGfPGfU Iwk0h8jjAaZJ5LGL3QaZtMoSRB+2l/oHRj3UPn/kUN+C/xfWLQSQEsPOkJbp8du4 tiRlDa+3vwc4HDTvuKIRO6HD3X05UtSaFOahsdvgrvmzO6S6bVVGEemInUtXay6O 2BNMklL7l8qFAd77AdDgWmktEQAXTzPcWwrrZ3RFuyZaaMjO0Vai23p2HQYAZleW ZoONQBAytGK+R6ePUbEFx24ILawI2Ke326U= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:48 2025 by rpki-client