$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa File: 2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa (raw, json) Hash identifier: F8s3d0u8LyFnWWzVrPWy3KcvuMlFJBbGsFlo57HA/QI= Subject key identifier: 84:3E:B2:C6:E0:1C:41:A3:3B:85:8C:0C:02:A5:09:9E:E1:85:21:C8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BD085841FE7D6807BAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 53813 IP address blocks: 2001:470:8e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bd:08:58:41:fe:7d:68:07:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d5a89b50-5587-4ba3-8acb-fea22bae79bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:a3:4f:1f:a9:cd:0c:a6:89:0d:b3:44:6c: 0c:a5:e9:61:10:52:e0:ee:7a:d6:59:bb:4a:94:72: 20:b0:74:8d:74:95:ca:64:ce:fd:35:39:8a:ce:9e: 4b:6e:fe:c8:1c:26:0f:83:32:65:c1:3c:db:29:93: b6:9e:ae:bc:69:a2:7c:5f:22:c0:4a:4b:3c:ff:9e: 90:91:d4:f4:21:29:4c:7c:36:38:25:f6:8a:23:a9: 07:da:f2:b0:a1:df:97:c9:be:58:7e:1e:64:c6:83: 1a:cb:4e:a6:07:24:4f:69:15:fa:9d:02:1a:e6:7e: 3f:77:8d:46:62:fb:3a:a4:80:14:21:5b:ee:f7:0d: 5a:73:67:46:6f:14:e1:3f:77:ba:c7:41:79:18:89: 64:a9:09:fc:af:b9:1c:c1:eb:d2:e4:95:0c:cc:1a: dd:e2:e2:f7:be:aa:1f:ff:b4:12:25:ae:7a:f2:69: e5:c9:b5:99:bf:a4:d6:99:ff:76:06:63:a9:ba:b2: 0a:5e:a4:1c:ff:f8:bb:14:ec:81:f1:2e:3a:c7:dd: 91:3f:95:1a:55:99:b6:d4:f6:fc:ac:b6:0a:35:39: 0f:6a:e7:af:99:59:6b:1f:cd:22:08:d3:bf:49:aa: 1d:48:14:93:1b:25:08:24:03:b2:57:3f:74:fc:6f: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3E:B2:C6:E0:1C:41:A3:3B:85:8C:0C:02:A5:09:9E:E1:85:21:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2870ce7b-3941-3e3d-98f1-2e8bbc7fe161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:19:f0:f6:ff:fb:fc:39:f7:d9:5d:c2:91:55:2b:6d:37:51: 4c:8b:01:11:4e:f1:f4:9b:3c:df:54:39:90:af:fe:02:69:57: a4:ec:99:00:44:77:05:ce:bc:77:54:1c:06:de:42:81:9e:52: 2f:be:c8:55:3f:96:8f:52:fe:74:00:fb:fc:70:bf:8d:ac:2c: 4a:cd:d1:06:49:4b:89:7c:1c:10:6a:83:97:d0:4e:9f:70:7f: 57:5b:8e:5a:61:83:3f:b9:b2:56:15:9b:a8:3a:a2:5b:27:16: 61:d8:9e:60:cf:3c:f8:9f:4f:26:fe:24:7c:4d:81:d9:9b:65: 47:01:6a:b0:f7:ad:45:00:3f:ec:1a:a9:e7:b5:e0:87:02:38: 2d:57:7d:58:1a:38:b3:49:d0:3c:e9:3f:93:4f:41:9c:9a:21: 62:82:a7:a8:8d:b4:cf:d0:06:b1:fc:b9:60:3f:3a:21:1c:0e: 5d:62:63:32:ca:c3:25:9c:c4:55:9c:a2:f1:bf:cd:58:a3:0e: fb:e1:ba:3c:f2:6e:71:f4:bc:65:a5:1e:66:4d:6f:32:72:99: f4:d0:8e:87:ca:29:f6:b9:da:58:05:c8:fa:51:b6:df:2a:50: 59:e3:b2:c4:13:d0:39:43:b6:99:9f:5f:aa:2f:4d:c0:34:5b: ed:5a:6d:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ170IWEH+fWgHusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDVhODliNTAtNTU4Ny00YmEzLThhY2ItZmVhMjJiYWU3OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ejTx+pzQymiQ2zRGwMpelhEFLg7nrWWbtK lHIgsHSNdJXKZM79NTmKzp5Lbv7IHCYPgzJlwTzbKZO2nq68aaJ8XyLASks8/56Q kdT0ISlMfDY4JfaKI6kH2vKwod+Xyb5Yfh5kxoMay06mByRPaRX6nQIa5n4/d41G Yvs6pIAUIVvu9w1ac2dGbxThP3e6x0F5GIlkqQn8r7kcwevS5JUMzBrd4uL3vqof /7QSJa568mnlybWZv6TWmf92BmOpurIKXqQc//i7FOyB8S46x92RP5UaVZm21Pb8 rLYKNTkPauevmVlrH80iCNO/SaodSBSTGyUIJAOyVz90/G9JlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQ+ssbgHEGjO4WMDAKlCZ7hhSHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MGNlN2ItMzk0MS0z ZTNkLTk4ZjEtMmU4YmJjN2ZlMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4Z8Pb/+/w599ldwpFVK203UUyLARFO8fSbPN9UOZCv/gJpV6Ts mQBEdwXOvHdUHAbeQoGeUi++yFU/lo9S/nQA+/xwv42sLErN0QZJS4l8HBBqg5fQ Tp9wf1dbjlphgz+5slYVm6g6olsnFmHYnmDPPPifTyb+JHxNgdmbZUcBarD3rUUA P+waqee14IcCOC1XfVgaOLNJ0DzpP5NPQZyaIWKCp6iNtM/QBrH8uWA/OiEcDl1i YzLKwyWcxFWcovG/zVijDvvhujzybnH0vGWlHmZNbzJymfTQjofKKfa52lgFyPpR tt8qUFnjssQT0DlDtpmfX6ovTcA0W+1abbs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:50 2025 by rpki-client