$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa File: 252e51df-b074-3d81-91f6-d7a86aee0e02.roa (raw, json) Hash identifier: iXa1MhFzUXJJ9X9cn7K+ptzQay2x1lxS4vqdm4/fPiQ= Subject key identifier: 87:84:07:5D:93:9E:A4:CA:84:89:39:06:49:DA:2C:F6:FB:9D:74:5B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB45D3B6D5230F1AB63709840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 12247 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3b:6d:52:30:f1:ab:63:70:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=e480f618-da08-405c-8817-7af0610d0f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:fb:d4:b9:a4:59:f3:57:1c:36:30:f9:aa: 64:93:93:ed:86:68:60:25:4f:7d:42:bd:4f:85:5e: bf:2c:76:58:be:93:6d:5a:fa:04:80:e6:21:59:e7: 66:7c:72:54:bd:29:64:f1:f6:80:d8:c2:1d:d8:3e: 5f:b8:d7:9a:58:73:25:c7:c1:6d:23:93:bb:52:c2: 6e:34:cf:0b:ee:49:16:b6:79:59:6f:77:86:be:d4: 1e:a5:93:91:8a:e1:1c:c7:d5:44:cc:f7:bf:01:28: 44:cf:ac:44:55:eb:90:52:85:2c:34:4d:6d:c4:72: ab:1c:26:27:09:30:72:4e:ed:21:f4:dc:fb:34:ee: 7e:ea:2c:b0:70:04:e8:1c:a0:05:37:53:3a:09:df: 4a:a3:2b:d7:d1:77:b1:bf:96:9a:aa:b7:98:c1:46: a4:d0:d0:5c:b7:e6:cd:51:b7:a5:31:59:28:ca:6a: ef:d7:e2:8e:f9:73:7a:e9:1b:0e:d3:b4:72:ea:52: 0f:48:6e:98:13:62:3e:2c:37:6f:09:57:77:3d:8b: 91:18:5c:53:eb:81:4b:c6:c0:9f:9a:ce:9a:eb:ec: 0e:35:d7:74:24:78:ef:23:8a:85:ad:95:05:43:98: 33:13:54:0a:74:6e:6d:0a:63:db:85:98:09:df:9c: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:07:5D:93:9E:A4:CA:84:89:39:06:49:DA:2C:F6:FB:9D:74:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:79:6e:6e:96:62:63:ba:47:e5:b4:65:d7:48:5b:51:e9:5c: 0f:95:a0:68:96:e4:e2:18:e5:82:4c:0f:09:40:dc:94:8b:a1: 4c:69:25:f2:a9:ac:35:2a:6d:54:57:3d:8a:5d:46:8d:c3:24: 39:c3:04:18:e1:4f:e5:05:e2:2c:eb:41:ec:7d:70:44:f6:76: 4d:ab:db:e8:40:07:9f:ac:e4:8c:10:fc:3f:e9:9b:5e:44:02: 79:44:e2:65:97:4f:e1:89:90:bc:19:c6:f3:dd:9d:9d:50:12: 7c:92:77:07:81:4d:d1:c1:51:57:4c:88:5c:86:22:76:da:d1: e7:20:e1:28:4f:47:79:80:48:17:a4:3b:0a:fa:73:b9:a5:d8: 6e:94:b0:38:99:c4:9f:e8:65:31:7e:4c:64:a2:7b:64:9a:c0: 36:7e:a3:4c:a6:a7:12:e4:46:96:21:0f:68:fe:e6:7f:b8:c6: 1d:e0:ce:65:42:51:18:76:f6:a3:8e:9e:22:7c:cf:95:f2:1f: cf:4a:40:2c:46:99:dc:36:ff:b2:06:0f:14:06:30:06:1d:67: cf:67:1c:df:66:98:70:de:68:2b:ba:6e:6c:ec:91:8d:74:4f: b8:67:ca:81:37:69:c1:fb:0b:ef:a3:7f:cb:f8:bd:91:04:0a: 00:90:87:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTttUjDxq2NwmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTQ4MGY2MTgtZGEwOC00MDVjLTg4MTctN2FmMDYxMGQwZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsn71LmkWfNXHDYw+apkk5PthmhgJU99Qr1P hV6/LHZYvpNtWvoEgOYhWedmfHJUvSlk8faA2MId2D5fuNeaWHMlx8FtI5O7UsJu NM8L7kkWtnlZb3eGvtQepZORiuEcx9VEzPe/AShEz6xEVeuQUoUsNE1txHKrHCYn CTByTu0h9Nz7NO5+6iywcAToHKAFN1M6Cd9KoyvX0Xexv5aaqreYwUak0NBct+bN UbelMVkoymrv1+KO+XN66RsO07Ry6lIPSG6YE2I+LDdvCVd3PYuRGFxT64FLxsCf ms6a6+wONdd0JHjvI4qFrZUFQ5gzE1QKdG5tCmPbhZgJ35yZbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeEB12TnqTKhIk5BknaLPb7nXRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUyZTUxZGYtYjA3NC0z ZDgxLTkxZjYtZDdhODZhZWUwZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALx5bm6WYmO6R+W0ZddIW1HpXA+VoGiW5OIY5YJMDwlA3JSLoUxp JfKprDUqbVRXPYpdRo3DJDnDBBjhT+UF4izrQex9cET2dk2r2+hAB5+s5IwQ/D/p m15EAnlE4mWXT+GJkLwZxvPdnZ1QEnySdweBTdHBUVdMiFyGInba0ecg4ShPR3mA SBekOwr6c7ml2G6UsDiZxJ/oZTF+TGSie2SawDZ+o0ympxLkRpYhD2j+5n+4xh3g zmVCURh29qOOniJ8z5XyH89KQCxGmdw2/7IGDxQGMAYdZ89nHN9mmHDeaCu6bmzs kY10T7hnyoE3acH7C++jf8v4vZEECgCQhxg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:39 2025 by rpki-client