$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eccec84-a09b-380c-a720-d925c500299a.roa File: 2eccec84-a09b-380c-a720-d925c500299a.roa (raw, json) Hash identifier: AKaqOXmm+uLbyflMNitVqqK2DvIHJ7VnuEZXfYYt9yw= Subject key identifier: 8D:40:C7:B6:0D:E5:77:8D:87:87:2F:90:AE:21:87:1D:22:86:46:1C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C1CDB2E300BF3E7FBD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eccec84-a09b-380c-a720-d925c500299a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 141475 IP address blocks: 2001:470:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c1:cd:b2:e3:00:bf:3e:7f:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b91c7bfb-58c7-4bd4-8cb3-2d06c8726d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:60:88:a1:37:76:24:8e:c6:6a:a9:44:d6: cb:c8:04:bd:83:b5:03:c9:ba:6c:e3:2e:70:ce:07: 0f:27:de:3e:7b:7d:0b:f8:3a:c4:f4:9d:20:20:45: 21:ae:cd:59:3d:cd:20:7a:22:fa:1d:b3:96:18:f4: 08:06:a1:58:5e:ff:67:d7:08:b3:03:81:35:3e:7b: 4d:2e:51:bb:dc:85:7c:83:96:b4:b4:b0:40:a0:3e: cb:43:5e:da:0a:04:05:df:9a:ce:21:3c:f6:78:b1: e2:6e:0c:aa:48:64:f7:72:cd:f5:6b:32:ff:5e:a7: f1:1a:7b:a7:1a:0c:dd:38:b1:a5:a9:92:4a:f2:fc: cb:06:68:94:ef:71:4f:ea:e3:23:1d:a3:81:9c:c6: dc:41:76:46:be:bd:61:bd:09:9d:0f:86:d7:ae:6d: 91:dd:a1:55:84:a3:b8:d0:56:f3:1f:f0:ed:29:a2: 2b:27:dc:52:df:e4:4d:7d:02:a4:15:61:23:46:22: 30:fc:9f:63:0b:2d:4d:10:53:ba:76:c8:98:4c:d8: 48:49:2e:60:0c:3f:92:73:0f:b2:0f:6f:e0:13:a7: 8d:ff:86:53:a7:cc:91:58:18:28:7d:6e:20:05:ba: 7d:a0:ba:14:cb:53:dc:c9:8b:5f:84:4c:aa:af:a7: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:40:C7:B6:0D:E5:77:8D:87:87:2F:90:AE:21:87:1D:22:86:46:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eccec84-a09b-380c-a720-d925c500299a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:12:8e:c2:fa:80:a6:7d:88:31:d8:19:63:60:18:3b:6b:5a: 0e:94:60:cb:33:a2:57:ba:86:66:80:a4:4a:78:16:f2:e1:a6: f0:05:a8:92:38:52:32:50:ab:03:7a:b7:3e:2c:ef:b9:89:76: 21:ac:aa:12:64:19:cf:92:9b:0e:e4:9e:07:ef:e3:4a:d4:82: ee:67:b2:7f:69:3b:11:42:cf:8f:e5:37:d0:66:c1:5d:1e:45: 75:21:dc:c3:c1:b4:77:67:57:03:a1:79:aa:ef:47:e5:9a:f0: 13:c7:57:1b:41:86:a2:fe:d5:2a:c1:14:fa:27:27:e8:0f:d8: 2f:2b:c3:7a:97:8c:ab:6a:f4:b7:85:d6:29:f6:74:69:fd:0a: c2:b7:0b:e1:5e:26:a9:a9:e8:bd:3b:91:de:aa:86:f1:a5:3c: b4:2f:0c:76:62:0b:cb:0d:41:1e:a3:cd:1d:8f:df:ff:83:88: e4:0a:6d:62:c7:27:85:a8:cc:c1:9e:fb:32:a6:eb:f6:4f:5a: 5c:48:57:ff:28:aa:12:4b:83:d3:8c:b7:4d:84:ad:c1:cd:99: 1a:0d:84:93:82:2a:40:6a:ef:57:19:42:48:99:92:8f:de:e3: 94:42:78:a4:af:3d:c9:0e:8d:e3:a9:8c:d2:ed:dc:72:69:f1: a2:12:70:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18HNsuMAvz5/vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjkxYzdiZmItNThjNy00YmQ0LThjYjMtMmQwNmM4NzI2ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc9giKE3diSOxmqpRNbLyAS9g7UDybps4y5w zgcPJ94+e30L+DrE9J0gIEUhrs1ZPc0geiL6HbOWGPQIBqFYXv9n1wizA4E1PntN LlG73IV8g5a0tLBAoD7LQ17aCgQF35rOITz2eLHibgyqSGT3cs31azL/XqfxGnun GgzdOLGlqZJK8vzLBmiU73FP6uMjHaOBnMbcQXZGvr1hvQmdD4bXrm2R3aFVhKO4 0FbzH/DtKaIrJ9xS3+RNfQKkFWEjRiIw/J9jCy1NEFO6dsiYTNhISS5gDD+Scw+y D2/gE6eN/4ZTp8yRWBgofW4gBbp9oLoUy1PcyYtfhEyqr6fhvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1Ax7YN5XeNh4cvkK4hhx0ihkYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmVjY2VjODQtYTA5Yi0z ODBjLWE3MjAtZDkyNWM1MDAyOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJcSjsL6gKZ9iDHYGWNgGDtrWg6UYMszole6hmaApEp4FvLhpvAF qJI4UjJQqwN6tz4s77mJdiGsqhJkGc+Smw7kngfv40rUgu5nsn9pOxFCz4/lN9Bm wV0eRXUh3MPBtHdnVwOhearvR+Wa8BPHVxtBhqL+1SrBFPonJ+gP2C8rw3qXjKtq 9LeF1in2dGn9CsK3C+FeJqmp6L07kd6qhvGlPLQvDHZiC8sNQR6jzR2P3/+DiOQK bWLHJ4WozMGe+zKm6/ZPWlxIV/8oqhJLg9OMt02ErcHNmRoNhJOCKkBq71cZQkiZ ko/e45RCeKSvPckOjeOpjNLt3HJp8aIScMA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:08 2025 by rpki-client