$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa File: cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa (raw, json) Hash identifier: Cvef8e8m5Po6M9E+B/LFTIm6Xay1mhbYJnPAoqBl2IU= Subject key identifier: A4:16:14:95:2F:EC:72:36:6E:71:B8:5E:4F:36:C4:C4:47:2E:C6:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BF44D253A9EAC49EBB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 8046 IP address blocks: 2001:470:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:44:d2:53:a9:ea:c4:9e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=23bf3d58-81a6-44c1-84a4-becdbccfba37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:bf:f2:2c:a4:f1:89:06:a5:ad:16:9a:a6: ad:6b:4a:4a:87:e3:3f:e3:46:cc:6a:44:0b:80:22: 3c:96:a8:0c:2c:78:cb:b1:8e:30:47:5a:9c:d9:10: b5:5a:96:80:b4:b2:a8:1f:39:d3:1a:ff:82:29:89: 38:7a:83:0b:02:12:98:d2:67:04:b4:a7:59:86:e3: 7d:4b:6c:41:2e:e5:46:fd:a0:30:98:b5:a6:21:18: 1b:48:f8:1b:cb:42:d0:f4:09:be:b6:29:03:d6:35: 7d:8f:c6:bf:8c:38:16:b2:8b:ca:d6:25:8e:67:ec: 72:97:d0:11:aa:1b:f0:51:fa:1f:c8:c1:14:9c:d9: d1:b2:14:34:4a:f8:2c:33:b2:0d:b9:e0:f0:1b:c3: 90:a6:4a:12:a5:ff:0a:c1:e0:08:fc:ec:59:e5:de: 92:ee:2c:88:26:eb:9a:f9:4a:a4:48:3d:22:7c:f9: 63:32:c1:ce:7b:d6:9a:a9:45:fe:9b:25:76:d9:f5: b1:72:09:ab:fc:ee:1f:bc:92:35:ca:61:1a:91:f6: ac:52:3a:9c:63:fb:d8:12:28:bc:9b:63:54:51:2e: 0d:54:11:7b:13:72:7b:aa:65:42:23:bb:d5:21:d7: 04:4c:11:37:a8:7e:65:5b:1b:05:ce:5c:a7:5e:50: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:16:14:95:2F:EC:72:36:6E:71:B8:5E:4F:36:C4:C4:47:2E:C6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbee8fa5-98dd-3fad-9c32-c4b3d062f0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:13:f3:6b:31:9f:82:5b:90:69:7b:5c:ca:19:37:8a:9f:b5: 2a:57:48:10:82:f3:f2:71:d2:8f:94:37:e5:57:ee:91:bb:3c: a1:17:13:b7:37:19:96:dd:55:e2:ba:cd:70:52:7c:ab:f2:c2: 75:82:cf:76:d7:5b:03:d6:36:5b:11:df:73:78:11:af:81:1f: 1c:ac:34:1f:41:2e:52:fb:6e:bc:ea:a0:62:31:e0:eb:26:0e: 24:51:cf:21:a4:1e:39:d7:08:9b:9d:df:41:c4:c0:12:d0:aa: 75:94:69:4e:c2:12:52:4f:04:9b:fe:3b:6d:02:80:70:ef:35: 1d:16:70:f1:a3:2a:1a:9d:65:35:8e:bf:48:85:58:88:f5:c7: 3f:63:72:55:3d:6a:e5:68:88:e1:a6:64:7a:04:7c:09:c3:b4: 95:ea:91:45:f4:b9:39:eb:b6:e0:59:2c:70:82:78:d3:79:ca: 4f:f6:3e:21:ed:aa:09:be:88:fe:9c:9e:be:67:05:e2:9b:3b: 5a:c4:96:81:57:7a:ca:d4:94:a0:ab:4b:d6:a8:e0:d8:1a:15: 76:d3:db:bd:09:b1:bd:8a:cb:65:36:68:dc:7c:a4:2b:19:d6: c1:bb:cf:51:44:5d:40:0d:92:8e:b2:a7:30:24:d6:9b:22:49: 24:37:4a:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ179E0lOp6sSeuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjNiZjNkNTgtODFhNi00NGMxLTg0YTQtYmVjZGJjY2ZiYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQW/8iyk8YkGpa0Wmqata0pKh+M/40bMakQL gCI8lqgMLHjLsY4wR1qc2RC1WpaAtLKoHznTGv+CKYk4eoMLAhKY0mcEtKdZhuN9 S2xBLuVG/aAwmLWmIRgbSPgby0LQ9Am+tikD1jV9j8a/jDgWsovK1iWOZ+xyl9AR qhvwUfofyMEUnNnRshQ0SvgsM7INueDwG8OQpkoSpf8KweAI/OxZ5d6S7iyIJuua +UqkSD0ifPljMsHOe9aaqUX+myV22fWxcgmr/O4fvJI1ymEakfasUjqcY/vYEii8 m2NUUS4NVBF7E3J7qmVCI7vVIdcETBE3qH5lWxsFzlynXlDRVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQWFJUv7HI2bnG4Xk82xMRHLsYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JlZThmYTUtOThkZC0z ZmFkLTljMzItYzRiM2QwNjJmMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMT82sxn4JbkGl7XMoZN4qftSpXSBCC8/Jx0o+UN+VX7pG7PKEX E7c3GZbdVeK6zXBSfKvywnWCz3bXWwPWNlsR33N4Ea+BHxysNB9BLlL7brzqoGIx 4OsmDiRRzyGkHjnXCJud30HEwBLQqnWUaU7CElJPBJv+O20CgHDvNR0WcPGjKhqd ZTWOv0iFWIj1xz9jclU9auVoiOGmZHoEfAnDtJXqkUX0uTnrtuBZLHCCeNN5yk/2 PiHtqgm+iP6cnr5nBeKbO1rEloFXesrUlKCrS9ao4NgaFXbT270Jsb2Ky2U2aNx8 pCsZ1sG7z1FEXUANko6ypzAk1psiSSQ3SrE= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:04 2025 by rpki-client