$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa File: 2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa (raw, json) Hash identifier: PBgaQZPec8HpS/VgAP9E/QHZjEU0XC4OCbdh7NA1oxo= Subject key identifier: AE:B7:04:41:0F:4E:19:CF:76:2A:31:F9:CC:C5:2B:84:64:3B:59:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB45D3C0E4ECA63A14940F540 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 134677 IP address blocks: 2001:470:e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3c:0e:4e:ca:63:a1:49:40:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=92ad4d6d-773a-43e8-b8d8-187c599fa495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:02:6a:d0:9c:30:b5:da:4e:cf:2e:cc:4f: 21:9e:ed:35:30:46:47:33:6e:5a:35:af:49:16:db: ae:57:26:57:e0:7d:b5:10:c2:80:00:2a:b8:e5:41: b8:1e:f0:7a:40:47:87:f1:29:b8:63:7a:e3:08:ea: 4b:51:e3:4f:86:26:6c:5f:03:87:8d:fb:ff:1b:e5: 81:b0:24:9c:72:24:4c:e3:d6:15:7c:09:6c:6a:0c: 44:5f:a6:42:a0:38:04:d5:64:db:e6:ae:15:88:18: 66:78:0d:91:eb:3a:11:c7:02:c9:dd:1a:ef:a4:c0: 62:12:fc:e1:eb:c5:db:ab:12:66:ae:18:2d:98:13: 23:a1:20:25:8c:d7:f4:95:0f:38:9b:17:45:5e:ef: 6a:84:54:43:1d:a5:14:ad:8e:f8:b1:b8:ce:74:aa: 3e:4c:73:c7:3e:cc:ea:1a:5c:dc:bb:ee:68:e6:6b: bc:c4:83:37:19:86:58:08:f7:92:e4:ff:d1:4e:99: c1:6d:73:9b:6d:1a:96:3a:9b:75:0d:30:89:f9:21: db:ec:dd:a4:69:71:bc:1e:49:b8:a3:40:df:bb:5d: e1:50:9f:49:76:fd:79:b1:86:0d:f1:56:5d:03:ac: b7:9f:ff:c5:18:92:2d:70:58:e7:88:c0:2c:42:b1: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B7:04:41:0F:4E:19:CF:76:2A:31:F9:CC:C5:2B:84:64:3B:59:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7d:5d:e5:e0:48:b9:0d:13:ff:68:dc:b3:05:cc:b8:38:22: 8b:02:84:1c:25:fa:cb:a5:97:6f:cf:fc:2a:1c:12:82:67:58: 23:e5:23:0c:68:50:49:37:3c:d7:96:fe:f0:39:39:b9:3b:f4: 85:9e:bd:0d:99:6d:d2:f3:42:a2:a9:6b:42:dd:62:0a:46:35: e0:bb:52:f3:86:b3:cf:98:72:fd:26:69:5c:ad:f5:49:40:e3: d6:00:c5:6f:4c:8a:38:7e:e4:7e:d7:04:89:bf:3b:e5:30:f9: 47:33:9b:be:f3:35:b8:bf:e5:e4:68:e3:58:79:92:f6:bd:dd: 0d:a2:d3:45:c4:01:f6:33:76:ac:a4:f0:30:dd:a5:a6:04:0d: 0c:bb:bb:2d:0c:02:ac:f6:07:f9:71:22:86:01:b8:93:1f:d2: 40:9b:39:60:d5:7b:42:78:b8:44:a0:9b:35:34:0a:27:13:46: d2:fe:b9:12:68:9b:e7:17:39:2a:44:2c:f8:aa:85:dc:c6:6d: 99:87:4e:a8:71:a3:f9:1e:54:0b:30:ce:4a:7a:cb:9a:7e:b6: 0a:d6:26:fa:bc:23:40:c2:ae:21:2b:90:66:f9:42:a9:7c:db: 93:06:b8:37:48:da:fc:e4:a3:4f:7d:0a:dd:98:c2:4f:12:b3: cd:2c:64:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTwOTspjoUlA9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTJhZDRkNmQtNzczYS00M2U4LWI4ZDgtMTg3YzU5OWZhNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkoCatCcMLXaTs8uzE8hnu01MEZHM25aNa9J FtuuVyZX4H21EMKAACq45UG4HvB6QEeH8Sm4Y3rjCOpLUeNPhiZsXwOHjfv/G+WB sCScciRM49YVfAlsagxEX6ZCoDgE1WTb5q4ViBhmeA2R6zoRxwLJ3RrvpMBiEvzh 68XbqxJmrhgtmBMjoSAljNf0lQ84mxdFXu9qhFRDHaUUrY74sbjOdKo+THPHPszq Glzcu+5o5mu8xIM3GYZYCPeS5P/RTpnBbXObbRqWOpt1DTCJ+SHb7N2kaXG8Hkm4 o0Dfu13hUJ9Jdv15sYYN8VZdA6y3n//FGJItcFjniMAsQrF2vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK63BEEPThnPdiox+czFK4RkO1kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmIwNzA3ODgtY2Q4ZS0z NWEwLWI4YjAtNTM3OGJkZDJmMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG19XeXgSLkNE/9o3LMFzLg4IosChBwl+sull2/P/CocEoJnWCPl IwxoUEk3PNeW/vA5Obk79IWevQ2ZbdLzQqKpa0LdYgpGNeC7UvOGs8+Ycv0maVyt 9UlA49YAxW9Mijh+5H7XBIm/O+Uw+Uczm77zNbi/5eRo41h5kva93Q2i00XEAfYz dqyk8DDdpaYEDQy7uy0MAqz2B/lxIoYBuJMf0kCbOWDVe0J4uESgmzU0CicTRtL+ uRJom+cXOSpELPiqhdzGbZmHTqhxo/keVAswzkp6y5p+tgrWJvq8I0DCriErkGb5 Qql825MGuDdI2vzko099Ct2Ywk8Ss80sZB8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:20 2025 by rpki-client