$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa File: f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa (raw, json) Hash identifier: 0YNyfKYLqNdhhCejrWJctlcWfZA+i4smNk7RtI3+XPc= Subject key identifier: EF:49:48:FB:9F:F7:27:3B:28:35:FE:40:B6:74:AF:69:3F:76:3D:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C2C349B097BB1FA7BE80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399889 IP address blocks: 2001:470:d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c2:c3:49:b0:97:bb:1f:a7:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=815df2ac-edde-46e6-9942-e8fb137196a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:f1:cf:54:ea:a4:2b:ce:83:06:87:b8:9c: 42:b6:7e:a3:aa:ec:8a:c5:a8:9d:e9:3d:cb:9e:42: 38:73:d3:7d:5a:f7:6e:5c:91:83:17:c8:03:6e:9a: fc:80:bf:f2:7b:60:b7:93:b3:37:67:a2:51:2b:e6: a2:92:80:8d:53:44:22:65:24:2b:86:fa:c8:d7:48: 07:80:ae:cd:12:de:ba:25:11:67:40:63:3d:e6:53: fd:6f:de:9a:69:f9:79:1c:20:6b:ea:71:9f:8e:37: e3:c3:5f:0b:0d:f9:1d:ad:60:16:5b:ce:9a:11:27: e1:80:47:dc:07:62:82:74:a4:03:67:ce:7f:bc:6a: af:36:b3:68:2e:f7:86:b3:a9:27:95:1b:b9:29:39: 97:3a:a3:b8:16:5e:4f:0b:e9:7b:da:52:2c:b7:d4: aa:5d:82:1b:0d:69:dc:4f:97:66:1a:73:29:ec:46: 9d:48:eb:3e:9f:a8:f0:4e:c5:7c:9b:33:16:b0:dc: d1:bc:c4:7c:14:ac:a0:e2:47:a5:cb:f0:8c:d2:87: a2:52:6a:50:7c:af:11:9c:30:86:25:15:80:6b:e2: 67:24:6b:94:3a:3b:73:f4:a2:98:ee:7d:45:9d:5d: 46:2f:8d:e5:bc:87:9b:7a:60:c0:99:d5:1e:c2:57: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:49:48:FB:9F:F7:27:3B:28:35:FE:40:B6:74:AF:69:3F:76:3D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3a:86:3e:60:11:94:81:c6:50:d4:8c:49:f0:db:e3:a2:82: 80:db:96:87:e5:45:35:2f:4f:fd:6c:30:4f:c4:e8:56:f5:91: 67:12:9e:07:8c:c4:c3:bb:7e:83:fa:c0:7e:17:c5:b3:d2:a3: 72:ea:f2:79:61:9a:63:4f:2e:5d:94:40:00:bb:54:3f:b6:48: 50:6d:a3:c0:38:a7:a3:96:a2:2a:c3:0b:f5:c0:5a:92:95:60: b2:f1:b7:20:ad:26:4b:4b:ad:5a:02:69:c2:b3:e9:00:72:3c: 1b:bb:07:6c:19:e9:99:c1:46:b0:cc:8c:c1:cc:43:6a:ca:04: 5d:02:db:75:c5:df:9f:e8:a8:5d:56:eb:c5:25:78:a5:57:50: 52:d4:4a:97:14:bd:5c:12:64:86:05:22:a4:4c:e8:ba:cf:f1: bf:32:3b:a3:3f:7d:1d:9c:3f:c7:99:9d:2f:a7:b5:b1:6a:80: 67:50:2b:de:ae:ec:a6:51:38:b6:28:14:fc:2f:8c:af:ad:1f: 9c:ac:29:14:cd:84:29:69:37:36:1d:63:9a:6b:b9:88:48:c4: 11:40:ba:ae:14:84:59:6f:29:f6:fa:f8:62:51:3f:14:00:9a: a4:0f:88:dc:58:01:53:7b:12:7b:a7:df:b1:0c:ab:7c:38:6f: f4:ce:2b:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18LDSbCXux+nvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODE1ZGYyYWMtZWRkZS00NmU2LTk5NDItZThmYjEzNzE5NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk3xz1TqpCvOgwaHuJxCtn6jquyKxaid6T3L nkI4c9N9WvduXJGDF8gDbpr8gL/ye2C3k7M3Z6JRK+aikoCNU0QiZSQrhvrI10gH gK7NEt66JRFnQGM95lP9b96aafl5HCBr6nGfjjfjw18LDfkdrWAWW86aESfhgEfc B2KCdKQDZ85/vGqvNrNoLveGs6knlRu5KTmXOqO4Fl5PC+l72lIst9SqXYIbDWnc T5dmGnMp7EadSOs+n6jwTsV8mzMWsNzRvMR8FKyg4kely/CM0oeiUmpQfK8RnDCG JRWAa+JnJGuUOjtz9KKY7n1FnV1GL43lvIebemDAmdUewlfhpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO9JSPuf9yc7KDX+QLZ0r2k/dj38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjFiYzcwNDItZTljYS0z YTJlLWFiNzItNmJhMTY4ZTllNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAk6hj5gEZSBxlDUjEnw2+OigoDbloflRTUvT/1sME/E6Fb1kWcS ngeMxMO7foP6wH4XxbPSo3Lq8nlhmmNPLl2UQAC7VD+2SFBto8A4p6OWoirDC/XA WpKVYLLxtyCtJktLrVoCacKz6QByPBu7B2wZ6ZnBRrDMjMHMQ2rKBF0C23XF35/o qF1W68UleKVXUFLUSpcUvVwSZIYFIqRM6LrP8b8yO6M/fR2cP8eZnS+ntbFqgGdQ K96u7KZROLYoFPwvjK+tH5ysKRTNhClpNzYdY5pruYhIxBFAuq4UhFlvKfb6+GJR PxQAmqQPiNxYAVN7Enun37EMq3w4b/TOK40= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:20 2025 by rpki-client