$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa File: cb9c6794-43ac-335b-8cf5-234be57cf61a.roa (raw, json) Hash identifier: ElXANHvNMAwOBoay4jUhsZ8nnRMfTgDGtiPsVoJObIo= Subject key identifier: 6A:E3:0E:65:30:F1:22:73:95:4A:69:65:24:38:A8:26:09:5E:C9:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D018E0CBA25801FCE4C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 13188 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d0:18:e0:cb:a2:58:01:fc:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=48e4c518-18e0-4659-9227-d8744d7a4ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:0c:a9:0f:f5:4d:a3:83:3a:9f:00:90:c4: 36:35:64:2c:12:9c:2d:b1:ee:ea:a6:55:77:9b:dd: da:83:19:f9:70:0a:87:e8:d9:64:55:57:b5:48:78: 5e:8f:35:bb:88:fd:42:58:81:79:fb:44:0b:78:e4: de:c7:42:df:e7:04:26:76:7c:d6:5a:63:8d:4e:cf: 77:1f:7f:09:84:69:29:7c:66:c6:b8:10:e2:97:d1: 11:4f:0b:8a:e0:65:07:8a:bc:fb:a1:b4:fa:1d:57: 69:d0:5d:0a:8b:c7:c0:3d:75:40:cc:02:b3:af:37: 3d:06:32:7c:b8:b0:c5:b6:f6:03:7d:3e:48:e6:ed: 90:0f:4c:b2:3d:31:53:5e:2d:22:c3:8e:96:49:d8: 03:8f:dc:37:45:64:45:15:ec:43:79:17:e6:7d:52: 87:fd:ed:82:97:5f:d3:51:3c:c6:69:c1:49:06:b7: 76:28:5e:d2:d5:1f:ea:26:5a:e5:bc:f5:cf:7b:bb: d0:83:75:96:25:b9:63:29:a0:57:c2:79:c0:d0:d5: c1:ac:a0:9d:d4:5a:d2:1c:43:10:db:8d:91:2d:16: ac:70:c0:a0:08:57:ca:d4:69:18:8f:95:bf:c0:7b: 84:a7:64:c9:6e:a8:e1:af:aa:a0:15:dc:88:53:20: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:0E:65:30:F1:22:73:95:4A:69:65:24:38:A8:26:09:5E:C9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9c6794-43ac-335b-8cf5-234be57cf61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:27:ba:02:a6:aa:51:12:20:f3:cf:eb:f6:7f:b7:71:af:7f: a9:a0:d3:54:06:a4:aa:4a:9f:da:e4:b0:0c:9c:40:b7:c8:0d: 7b:be:f1:4d:73:21:f3:e7:9b:73:85:99:2b:b9:5e:91:9d:43: 83:ab:53:db:f9:fc:44:03:67:0e:34:10:03:ee:64:cd:17:12: c9:a8:35:3d:d8:70:77:51:fe:83:95:74:72:f2:2a:39:55:92: af:e5:91:2a:9e:c1:23:b2:e2:7c:81:55:74:a9:04:81:5e:f9: 82:58:93:81:46:ed:d5:d8:da:ca:1f:09:e2:31:66:73:2b:b9: 55:37:d8:12:44:cd:e1:2e:91:b0:74:61:b8:e7:2e:11:fe:3b: ae:12:10:54:fb:6e:f9:8a:60:5f:1c:86:3e:c5:24:8f:a8:8d: aa:4a:e5:cc:88:68:d6:67:48:9d:7f:05:54:5e:06:69:34:f1: bc:d1:1c:8d:05:29:1a:1c:5b:c5:6e:50:76:fa:47:e3:e5:4a: ee:1a:ba:12:6a:87:be:cc:c9:61:f5:c4:41:2e:6d:ad:04:98: 6b:24:bf:9d:bc:c1:3f:8c:b4:06:b6:3f:8d:ca:35:05:e0:64: fb:00:9c:0d:99:18:36:83:57:a3:39:07:c4:1c:d5:1b:96:86: 8a:96:5f:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19AY4MuiWAH85MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDhlNGM1MTgtMThlMC00NjU5LTkyMjctZDg3NDRkN2E0ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv84MqQ/1TaODOp8AkMQ2NWQsEpwtse7qplV3 m93agxn5cAqH6NlkVVe1SHhejzW7iP1CWIF5+0QLeOTex0Lf5wQmdnzWWmONTs93 H38JhGkpfGbGuBDil9ERTwuK4GUHirz7obT6HVdp0F0Ki8fAPXVAzAKzrzc9BjJ8 uLDFtvYDfT5I5u2QD0yyPTFTXi0iw46WSdgDj9w3RWRFFexDeRfmfVKH/e2Cl1/T UTzGacFJBrd2KF7S1R/qJlrlvPXPe7vQg3WWJbljKaBXwnnA0NXBrKCd1FrSHEMQ 242RLRascMCgCFfK1GkYj5W/wHuEp2TJbqjhr6qgFdyIUyAI2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGrjDmUw8SJzlUppZSQ4qCYJXsnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2I5YzY3OTQtNDNhYy0z MzViLThjZjUtMjM0YmU1N2NmNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcnugKmqlESIPPP6/Z/t3Gvf6mg01QGpKpKn9rksAycQLfIDXu+ 8U1zIfPnm3OFmSu5XpGdQ4OrU9v5/EQDZw40EAPuZM0XEsmoNT3YcHdR/oOVdHLy KjlVkq/lkSqewSOy4nyBVXSpBIFe+YJYk4FG7dXY2sofCeIxZnMruVU32BJEzeEu kbB0YbjnLhH+O64SEFT7bvmKYF8chj7FJI+ojapK5cyIaNZnSJ1/BVReBmk08bzR HI0FKRocW8VuUHb6R+PlSu4auhJqh77MyWH1xEEuba0EmGskv528wT+MtAa2P43K NQXgZPsAnA2ZGDaDV6M5B8Qc1RuWhoqWX3s= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:41 2025 by rpki-client