$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa File: e2794a0f-04b2-3f30-9997-493db90290d9.roa (raw, json) Hash identifier: 91+3mNPtV1DyRuOAoQmmtDRzk/HdNYA+dgj/MvGLGhc= Subject key identifier: 30:1F:8D:C0:9E:73:71:C6:1E:C0:D5:E1:EB:02:0C:F6:DC:C4:F9:34 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CC94FC1FE0D0BF6AAF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 133905 IP address blocks: 2001:470:25a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cc:94:fc:1f:e0:d0:bf:6a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b7f44c6d-b85f-4103-818b-4e33e26893a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:8b:36:2f:13:73:c4:8e:2e:5a:ec:86:79: 9e:b7:08:cd:9a:2b:23:4d:aa:4c:ce:77:48:e1:03: 66:07:e4:d3:13:b6:a5:50:c0:d3:42:ac:d8:66:62: eb:37:d5:81:11:2b:03:86:04:4d:60:37:be:cc:ce: 3e:5c:bc:9c:13:82:81:68:b0:88:a3:48:9c:10:0e: 5e:a1:a4:de:59:69:d0:bd:a3:46:89:53:a0:61:39: 99:20:3b:ad:59:95:f1:cc:b5:d9:8f:4a:ad:c5:09: 62:54:cd:18:63:1d:76:3d:a5:9e:5a:55:87:c3:15: 73:c2:4b:63:41:a6:e8:cb:ce:fd:5d:47:8c:9a:57: 02:63:e0:26:4d:bf:dd:b9:53:89:9d:db:00:d4:d0: ee:45:5c:ca:42:e6:d5:0a:30:c9:29:a6:6b:54:03: d3:fc:55:1d:24:48:3f:c0:97:c7:2a:e2:7f:18:37: 27:ec:68:38:6c:56:07:f3:bc:be:37:76:30:0f:cb: cc:b1:f2:28:49:62:87:74:ea:78:0e:9e:14:db:4b: c9:54:e1:67:75:b0:2e:58:b4:06:ef:91:70:2b:c8: ed:e5:49:92:80:7f:4c:90:df:01:d0:64:dd:7f:8a: 14:a8:72:16:68:57:7b:e4:8f:cb:8a:5e:51:24:7e: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:8D:C0:9E:73:71:C6:1E:C0:D5:E1:EB:02:0C:F6:DC:C4:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:cb:5f:33:76:50:3b:79:41:dd:5e:86:a3:36:ee:38:7f:4f: 1e:2e:b9:06:67:73:3e:8e:0e:5f:bf:b0:20:ce:e3:d0:37:8a: e8:ff:00:a8:af:3e:32:f2:e8:5d:e4:2b:17:69:a7:db:f0:dd: 8e:76:34:64:9a:e1:98:da:fe:c8:ab:4d:06:10:6d:e5:46:aa: a2:57:39:cd:38:7e:e5:4e:3d:bb:d1:7a:f3:01:f6:21:8e:83: f6:24:c4:04:ec:f9:82:6c:a7:0c:50:3a:64:1f:90:4a:86:47: f0:2a:3b:7a:9e:37:f2:c2:85:ec:96:ff:b1:d1:e3:05:c2:3f: 0e:a9:54:fe:94:76:f6:a9:d3:f1:93:bc:f6:18:21:22:ee:c4: b3:9d:52:10:ca:87:e0:70:7c:a1:15:00:8e:38:3b:6c:d3:33: 7e:86:af:57:f5:6e:73:3b:0e:ad:18:e1:8a:0c:bc:47:54:3b: d6:37:37:0d:b4:42:24:73:e0:5e:88:50:23:66:e9:3a:6f:85: 10:2c:51:11:66:bf:55:2d:a4:2e:a0:13:d9:5f:40:05:de:e3: 9a:72:be:81:0e:b5:63:17:58:db:02:ea:da:a2:b7:58:08:95: e7:17:bc:35:70:46:c7:d4:5a:36:ea:83:21:6f:ca:d8:c0:ab: 18:78:6e:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18yU/B/g0L9qrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjdmNDRjNmQtYjg1Zi00MTAzLTgxOGItNGUzM2UyNjg5M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq+LNi8Tc8SOLlrshnmetwjNmisjTapMzndI 4QNmB+TTE7alUMDTQqzYZmLrN9WBESsDhgRNYDe+zM4+XLycE4KBaLCIo0icEA5e oaTeWWnQvaNGiVOgYTmZIDutWZXxzLXZj0qtxQliVM0YYx12PaWeWlWHwxVzwktj Qaboy879XUeMmlcCY+AmTb/duVOJndsA1NDuRVzKQubVCjDJKaZrVAPT/FUdJEg/ wJfHKuJ/GDcn7Gg4bFYH87y+N3YwD8vMsfIoSWKHdOp4Dp4U20vJVOFndbAuWLQG 75FwK8jt5UmSgH9MkN8B0GTdf4oUqHIWaFd75I/Lil5RJH5R4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAfjcCec3HGHsDV4esCDPbcxPk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI3OTRhMGYtMDRiMi0z ZjMwLTk5OTctNDkzZGI5MDI5MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrLXzN2UDt5Qd1ehqM27jh/Tx4uuQZncz6ODl+/sCDO49A3iuj/ AKivPjLy6F3kKxdpp9vw3Y52NGSa4Zja/sirTQYQbeVGqqJXOc04fuVOPbvRevMB 9iGOg/YkxATs+YJspwxQOmQfkEqGR/AqO3qeN/LCheyW/7HR4wXCPw6pVP6Udvap 0/GTvPYYISLuxLOdUhDKh+BwfKEVAI44O2zTM36Gr1f1bnM7Dq0Y4YoMvEdUO9Y3 Nw20QiRz4F6IUCNm6TpvhRAsURFmv1UtpC6gE9lfQAXe45pyvoEOtWMXWNsC6tqi t1gIlecXvDVwRsfUWjbqgyFvytjAqxh4btI= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:15 2025 by rpki-client