$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa File: dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa (raw, json) Hash identifier: hDzo5iWXKjg+nvxqW0aPt51d1h9iQgqkYxFBfOAU1BE= Subject key identifier: AD:14:A8:07:07:BD:1A:D1:37:B1:24:B4:2C:1C:78:52:43:AA:5C:5D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7D1D00528D9842AE70380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 151358 IP address blocks: 2001:470:2a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d1:d0:05:28:d9:84:2a:e7:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=719c0bc3-4860-49bb-9920-978f3431dbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:78:44:7f:93:69:30:2c:03:0e:a7:cb:13: cd:c0:08:57:4c:a6:b4:19:0e:55:63:47:b7:79:0b: 67:b3:27:0b:d0:ac:12:02:51:32:2d:70:e8:b6:75: ec:12:d4:22:30:b4:1d:af:81:83:b4:07:a1:01:ba: 06:4a:2c:77:81:f7:63:f0:11:45:4d:d7:73:a8:8e: 96:b3:4c:0a:30:1e:09:cc:8f:32:2e:ee:56:ec:40: dc:c7:a0:81:39:1f:57:ca:95:6e:44:6f:c2:80:7c: 4a:df:7f:15:2a:1d:34:38:bf:f4:da:df:33:97:58: 73:8d:96:50:5a:49:37:c3:03:df:e4:b6:3c:12:40: 7e:90:35:49:ec:0e:da:6a:1b:97:dc:9e:81:e4:b2: 66:fb:08:50:23:aa:17:d9:7b:71:aa:59:3a:fe:8b: e8:10:0a:cd:f3:1a:33:45:06:98:32:7b:53:08:b3: 0f:40:47:54:ce:53:65:be:a6:d4:ba:7b:12:e8:16: 23:c7:a3:c2:de:ca:be:31:bb:44:84:64:71:bb:14: 13:6c:45:a0:71:81:e1:30:b1:1a:51:e8:43:8d:ff: c1:74:c7:26:7b:d8:f2:63:63:ca:40:7c:2d:4b:e7: db:d1:0e:bb:27:81:17:4e:6f:fc:f9:d0:9b:d9:58: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:14:A8:07:07:BD:1A:D1:37:B1:24:B4:2C:1C:78:52:43:AA:5C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dab4c68b-96d9-351c-a5be-7ed8f4a8b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:38:31:81:82:e0:e8:47:24:d5:5d:62:3d:0b:93:e8:7f:db: db:bc:70:35:bb:ef:9c:6f:03:b4:92:49:5b:f2:f8:0f:15:64: 60:10:84:93:4a:ce:95:e3:af:d8:b3:fa:88:a0:86:52:44:9d: 77:d7:54:ed:ed:3f:08:2e:24:eb:91:a7:11:01:82:e6:01:6d: a8:37:c0:66:92:57:80:2a:75:eb:12:2b:01:fa:2f:35:b4:90: 0f:ae:39:a6:eb:5e:ed:72:f9:99:4c:3b:6c:f7:73:12:68:05: 5a:9e:b7:95:5d:a3:64:99:23:e7:b3:07:91:45:00:fa:87:df: 08:cf:35:e0:c4:5b:73:87:94:69:2d:1c:5a:3d:66:f9:8c:f3: 50:27:ce:cd:21:9c:bc:e2:17:d7:24:f3:4f:28:e7:01:95:aa: 12:23:f5:35:c8:91:1f:55:14:c2:8a:6c:43:d8:e8:2e:f8:11: 44:18:c0:91:af:87:b8:42:3e:2f:0f:89:84:45:0a:84:0b:17: d9:b0:0d:f0:57:d5:d1:15:47:4a:36:2e:ca:d2:09:5b:72:e4: 3a:fa:af:32:f1:2b:b7:0b:65:45:b7:f3:f4:81:cb:71:35:4c: b7:f1:3a:bf:97:9f:3e:4b:ec:2e:e3:73:98:5e:f2:e9:82:85: 3c:5e:72:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ19HQBSjZhCrnA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzE5YzBiYzMtNDg2MC00OWJiLTk5MjAtOTc4ZjM0MzFkYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD94RH+TaTAsAw6nyxPNwAhXTKa0GQ5VY0e3 eQtnsycL0KwSAlEyLXDotnXsEtQiMLQdr4GDtAehAboGSix3gfdj8BFFTddzqI6W s0wKMB4JzI8yLu5W7EDcx6CBOR9XypVuRG/CgHxK338VKh00OL/02t8zl1hzjZZQ Wkk3wwPf5LY8EkB+kDVJ7A7aahuX3J6B5LJm+whQI6oX2Xtxqlk6/ovoEArN8xoz RQaYMntTCLMPQEdUzlNlvqbUunsS6BYjx6PC3sq+MbtEhGRxuxQTbEWgcYHhMLEa UehDjf/BdMcme9jyY2PKQHwtS+fb0Q67J4EXTm/8+dCb2VjmjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK0UqAcHvRrRN7EktCwceFJDqlxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFiNGM2OGItOTZkOS0z NTFjLWE1YmUtN2VkOGY0YThiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGg4MYGC4OhHJNVdYj0Lk+h/29u8cDW775xvA7SSSVvy+A8VZGAQ hJNKzpXjr9iz+oighlJEnXfXVO3tPwguJOuRpxEBguYBbag3wGaSV4AqdesSKwH6 LzW0kA+uOabrXu1y+ZlMO2z3cxJoBVqet5Vdo2SZI+ezB5FFAPqH3wjPNeDEW3OH lGktHFo9ZvmM81Anzs0hnLziF9ck808o5wGVqhIj9TXIkR9VFMKKbEPY6C74EUQY wJGvh7hCPi8PiYRFCoQLF9mwDfBX1dEVR0o2LsrSCVty5Dr6rzLxK7cLZUW38/SB y3E1TLfxOr+Xnz5L7C7jc5he8umChTxecpU= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:10 2025 by rpki-client