$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa File: d6d42871-1d03-324a-a411-2e5b3006ddf1.roa (raw, json) Hash identifier: LwM6ufqyEfYn8YGr+ATzpuVslxgW4wR+5Cg5Rifh4KI= Subject key identifier: 70:16:83:1F:91:25:DA:6D:1F:5E:94:B4:47:B0:7B:AB:D8:7D:91:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F759D832A938BBE57100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30860 IP address blocks: 2001:470:2b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f7:59:d8:32:a9:38:bb:e5:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fd386987-0c77-47a7-ad3e-84c46541eaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:69:f7:3c:15:62:75:6d:bd:0f:38:77:4e:fe: d2:ad:4a:2f:5d:f1:a9:40:3d:b7:07:33:3d:31:e1: 76:e9:66:69:c5:e7:d7:a0:f7:da:00:52:b7:72:35: 4d:3a:e3:e8:1a:0c:7e:03:9f:c0:56:f5:66:5d:ed: ac:f5:44:51:8a:37:31:cf:69:50:32:10:b3:9e:49: 40:6b:b5:01:d8:45:14:08:bb:7d:3c:c6:6a:fa:70: 63:a5:b0:38:46:d8:42:6f:5f:c9:13:16:5a:dc:1d: 94:7c:72:ef:bf:8e:b6:b0:05:2d:1f:f3:4b:89:2f: 9a:15:ed:8b:81:2b:44:af:4a:57:ab:dd:52:cd:43: 4d:01:70:68:4c:22:1b:9f:97:0b:3f:24:e1:c7:37: 76:28:32:49:ad:97:ee:c8:99:da:ba:be:46:9c:6e: 07:a6:7b:c7:2e:9f:78:ee:24:ea:6c:a6:f1:5a:87: aa:16:e4:de:b0:7b:50:c8:95:92:a3:77:86:d4:69: 29:2c:d9:47:36:6c:87:71:a1:4e:9d:30:47:51:e7: ed:a0:39:42:24:a9:30:a7:ea:fe:c1:59:20:63:48: f1:58:72:45:74:ef:7d:be:57:00:7b:55:17:69:b2: 1a:16:ff:77:4d:dd:e0:fa:6a:ed:32:15:4b:80:6c: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:16:83:1F:91:25:DA:6D:1F:5E:94:B4:47:B0:7B:AB:D8:7D:91:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b5:10:a5:99:08:2c:59:c0:a0:e9:fb:60:f9:c4:76:43:7e: 10:dd:52:20:43:9f:a0:ae:ee:c5:6d:c4:4b:e9:10:93:24:44: d9:ab:d2:4a:9a:24:b6:43:01:ad:10:e9:19:1f:bb:70:f1:c5: fb:0b:f1:c6:30:fc:87:42:2f:6a:84:07:d5:b1:ae:41:62:4a: f9:0f:f9:7e:8f:cb:94:72:f1:a7:ab:59:cb:5d:b9:9c:51:b2: 41:07:44:0b:ba:e3:db:c2:54:51:39:ab:bd:bd:3f:cb:8a:89: d9:5b:ad:be:02:1b:54:b4:08:5a:1b:99:88:08:13:6e:18:6e: a3:ca:e5:d6:84:e9:66:fe:d4:b4:37:7d:04:4b:9b:da:50:d2: 88:9e:de:2b:a3:2f:4c:3e:45:75:7f:cb:10:5d:53:c1:83:ae: 68:9b:c0:c7:ff:49:c9:39:90:cf:ca:a8:7e:31:08:96:31:c1: eb:53:5d:00:51:cf:73:e2:ed:79:14:8d:c7:95:51:5f:be:24: a2:e4:66:19:b7:57:19:55:04:4e:69:2f:1e:2a:68:f4:e6:ca: d3:51:1a:03:d0:29:f4:d8:ec:69:d3:69:5c:15:3e:fd:49:09: 91:37:ee:26:bd:e0:77:9d:e4:c9:76:65:d7:17:22:d7:06:95: aa:42:15:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/dZ2DKpOLvlcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmQzODY5ODctMGM3Ny00N2E3LWFkM2UtODRjNDY1NDFlYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gn3PBVidW29Dzh3Tv7SrUovXfGpQD23BzM9 MeF26WZpxefXoPfaAFK3cjVNOuPoGgx+A5/AVvVmXe2s9URRijcxz2lQMhCznklA a7UB2EUUCLt9PMZq+nBjpbA4RthCb1/JExZa3B2UfHLvv462sAUtH/NLiS+aFe2L gStEr0pXq91SzUNNAXBoTCIbn5cLPyThxzd2KDJJrZfuyJnaur5GnG4HpnvHLp94 7iTqbKbxWoeqFuTesHtQyJWSo3eG1GkpLNlHNmyHcaFOnTBHUeftoDlCJKkwp+r+ wVkgY0jxWHJFdO99vlcAe1UXabIaFv93Td3g+mrtMhVLgGy2XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAWgx+RJdptH16UtEewe6vYfZHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZkNDI4NzEtMWQwMy0z MjRhLWE0MTEtMmU1YjMwMDZkZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEy1EKWZCCxZwKDp+2D5xHZDfhDdUiBDn6Cu7sVtxEvpEJMkRNmr 0kqaJLZDAa0Q6Rkfu3DxxfsL8cYw/IdCL2qEB9WxrkFiSvkP+X6Py5Ry8aerWctd uZxRskEHRAu649vCVFE5q729P8uKidlbrb4CG1S0CFobmYgIE24YbqPK5daE6Wb+ 1LQ3fQRLm9pQ0oie3iujL0w+RXV/yxBdU8GDrmibwMf/Sck5kM/KqH4xCJYxwetT XQBRz3Pi7XkUjceVUV++JKLkZhm3VxlVBE5pLx4qaPTmytNRGgPQKfTY7GnTaVwV Pv1JCZE37ia94Hed5Ml2ZdcXItcGlapCFXE= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:25 2025 by rpki-client