$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa File: 2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa (raw, json) Hash identifier: eWBerHYZp+tiwCzV6BEiPDjgSF9D7A01yBuuHj3O+CE= Subject key identifier: 4B:65:03:5C:C6:2E:88:18:56:F3:9B:6C:EB:58:B6:DF:18:B7:F1:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C8C308CC63DCF5DABC60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33621 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c8:c3:08:cc:63:dc:f5:da:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0841ff89-be12-4325-9117-de1222972f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:03:94:f5:5a:1a:17:46:b7:95:ce:dc:94: 0d:e8:b9:e8:61:60:a2:0f:cb:e5:df:4f:4d:af:be: 6f:84:ce:99:1b:26:91:55:e9:0a:5d:44:ed:ff:8d: 1d:20:36:81:d5:d6:07:13:cc:79:37:ef:f1:c6:c0: 12:96:e8:d2:84:99:ab:73:95:95:fa:be:51:de:ab: f9:7c:3a:c0:d6:ba:df:10:74:74:01:6e:7f:3e:79: da:06:33:2b:ec:20:80:05:4c:48:d6:f9:fb:0e:28: 6c:dc:48:ed:8d:42:64:dd:cc:18:01:a2:4c:28:39: fc:a8:dd:b5:10:11:eb:01:fc:7f:bd:b7:99:52:ad: 7d:2a:7d:36:d3:ff:85:da:f6:0c:68:f6:5a:b0:95: 67:db:a3:9b:5a:73:18:41:35:18:f1:0a:2b:1b:82: 82:59:3b:c9:1c:5c:24:24:f0:39:01:83:84:2e:e7: fe:3b:df:1e:2b:56:7c:fb:3a:98:bf:f7:a5:20:9f: 92:2c:a7:d9:b8:b6:46:53:d3:29:39:ba:90:d7:2a: b6:fa:db:b6:3c:bf:19:9a:3e:9d:6b:40:d3:48:a5: 23:b5:29:c3:44:7f:8f:a4:db:e5:44:03:9b:80:c0: 4f:23:02:ad:93:84:77:d7:da:5c:f0:a4:31:f3:cb: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:03:5C:C6:2E:88:18:56:F3:9B:6C:EB:58:B6:DF:18:B7:F1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8d:60:19:4a:b7:15:37:bc:44:4d:05:ae:09:b4:22:ce:a2: f6:ef:dd:39:a5:89:9a:d7:23:0d:46:79:4a:47:6f:ef:4b:5b: dd:3d:d0:6a:16:1d:2e:c9:c2:37:6f:34:e1:08:77:c9:a2:9c: c9:21:6e:d6:05:e6:a8:a9:86:07:e3:2c:e4:41:a4:e4:07:8d: fe:61:7b:b3:99:b9:e9:8c:83:fc:ec:03:7d:e6:56:09:b6:c2: bc:27:e2:fd:78:61:8c:67:63:12:8d:8b:1c:69:ca:61:04:d7: 64:24:a0:85:bd:29:39:9c:c3:03:c5:66:eb:dd:9b:43:8b:66: ff:60:87:cb:af:8c:62:00:88:67:44:b5:48:4a:5b:80:74:71: 7f:47:e2:68:51:59:48:63:a4:0c:7a:c7:3f:39:44:57:39:5e: 78:71:af:d7:7f:e5:7e:7b:31:fb:bb:0f:ae:36:65:af:79:88: 55:5c:4b:20:00:45:14:b9:4c:96:bf:ab:08:88:23:dc:54:c9: 5b:a1:f9:1d:07:dc:8e:49:93:56:f0:63:f4:b2:6a:40:13:85: cd:8d:bb:d4:f5:d7:52:17:03:3c:93:2c:7e:62:65:ff:87:d5: 32:60:2b:a6:6e:b8:60:32:f4:4f:24:94:15:f5:53:97:f4:c6: 77:38:83:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18jDCMxj3PXavGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDg0MWZmODktYmUxMi00MzI1LTkxMTctZGUxMjIyOTcyZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5cDlPVaGhdGt5XO3JQN6LnoYWCiD8vl309N r75vhM6ZGyaRVekKXUTt/40dIDaB1dYHE8x5N+/xxsASlujShJmrc5WV+r5R3qv5 fDrA1rrfEHR0AW5/PnnaBjMr7CCABUxI1vn7Dihs3EjtjUJk3cwYAaJMKDn8qN21 EBHrAfx/vbeZUq19Kn020/+F2vYMaPZasJVn26ObWnMYQTUY8QorG4KCWTvJHFwk JPA5AYOELuf+O98eK1Z8+zqYv/elIJ+SLKfZuLZGU9MpObqQ1yq2+tu2PL8Zmj6d a0DTSKUjtSnDRH+PpNvlRAObgMBPIwKtk4R319pc8KQx88tyNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtlA1zGLogYVvObbOtYtt8Yt/EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQwNThmYzItOWQxYi0z N2NlLWJjYzctOWRiZDI2MjdkNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmNYBlKtxU3vERNBa4JtCLOovbv3TmliZrXIw1GeUpHb+9LW909 0GoWHS7JwjdvNOEId8minMkhbtYF5qiphgfjLORBpOQHjf5he7OZuemMg/zsA33m Vgm2wrwn4v14YYxnYxKNixxpymEE12QkoIW9KTmcwwPFZuvdm0OLZv9gh8uvjGIA iGdEtUhKW4B0cX9H4mhRWUhjpAx6xz85RFc5Xnhxr9d/5X57Mfu7D642Za95iFVc SyAARRS5TJa/qwiII9xUyVuh+R0H3I5Jk1bwY/SyakAThc2Nu9T111IXAzyTLH5i Zf+H1TJgK6ZuuGAy9E8klBX1U5f0xnc4g3w= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:06 2025 by rpki-client