$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f6c7254-c71b-3314-812c-500c98e1f2d9.roa File: 2f6c7254-c71b-3314-812c-500c98e1f2d9.roa (raw, json) Hash identifier: yK7QR2YwmaNgY5+VMjoI+xP9IcYLIvcD1JwJE6M/Cg0= Subject key identifier: E1:40:60:7F:83:A2:DC:8A:54:E2:B3:1E:83:A0:18:95:23:9D:15:F6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BABFCFC12112A0C8F9F862280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f6c7254-c71b-3314-812c-500c98e1f2d9.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 40355 IP address blocks: 2001:470:11c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fc:12:11:2a:0c:8f:9f:86:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f53001ba-1c26-4ef3-b50c-e1f7e55878f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:c8:85:75:e7:32:51:1f:ef:0b:0e:49:a3: 2d:a4:7f:a5:d7:63:11:b3:db:45:e8:5b:4b:40:e0: 2b:d1:f6:85:cb:7c:95:40:a3:a2:3e:1b:f8:97:b9: 12:cf:a2:35:31:3f:86:3d:4c:38:00:40:01:00:70: ca:8f:5e:00:d6:2c:b9:14:cb:ad:98:2d:b5:49:9e: fc:fc:f0:28:3d:1f:31:17:c4:2f:65:26:21:02:bc: 94:55:49:47:90:19:75:3e:82:7f:1f:1f:f7:81:aa: 52:5f:91:0d:f6:db:72:38:c5:e6:f7:4b:24:d4:e4: 92:96:d3:bc:de:eb:1d:1f:99:0c:6f:bd:c0:a1:04: 9d:74:2b:04:03:0d:c2:52:bd:aa:9d:27:27:54:6d: 22:f3:d9:3f:6f:94:57:5f:26:6b:a8:20:31:d4:38: 20:f7:e0:21:41:5f:c1:50:5c:77:a6:29:bb:1d:e4: 17:02:aa:ab:37:c8:b9:bb:32:21:d8:b2:93:01:0b: 73:9f:c1:e0:ed:a1:a6:83:a5:ad:18:7a:e9:00:ed: 42:e5:f3:0f:4c:1b:98:22:1c:a7:a1:a3:d7:cc:e9: 73:93:f8:5e:1c:ab:bb:3b:7b:3f:bc:1d:b6:50:37: 17:b4:94:ca:87:b5:48:02:0c:a8:8a:c5:4a:7d:18: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:60:7F:83:A2:DC:8A:54:E2:B3:1E:83:A0:18:95:23:9D:15:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f6c7254-c71b-3314-812c-500c98e1f2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:11c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f4:a4:e4:cc:a9:85:a9:d7:6f:fd:14:6c:53:44:80:9f:53: 85:f9:ae:b7:64:cf:fe:b4:8b:68:17:5f:62:21:dc:84:fe:95: 3c:e8:18:6e:2c:d6:de:8d:37:c2:e2:15:98:69:30:d7:17:02: e5:fc:d2:cb:28:38:ef:7b:15:bc:28:4b:08:cd:34:50:ca:dc: 51:6d:30:03:9a:21:f7:f8:7c:4b:cd:82:e7:32:ca:3e:ea:42: e4:5d:19:38:a2:00:3e:14:ab:d3:90:9c:ff:77:55:b5:0b:0e: aa:67:d4:0d:26:22:b4:0b:65:0d:02:53:90:61:76:4d:d4:98: 15:f5:aa:3b:8f:f3:18:71:d4:19:93:41:b8:9d:29:14:1b:ad: 91:ce:fe:fa:d1:9b:8f:3b:fc:46:79:39:9c:0e:b9:49:9d:c9: f4:dd:99:b6:41:d9:37:33:26:05:d0:4f:38:bb:e5:60:ac:c9: 6a:62:ee:a3:f0:0a:ad:d0:31:10:39:db:7f:93:84:17:ae:a2: 68:01:51:23:7f:27:88:c5:41:bc:1c:bb:18:6e:07:69:a8:51: e8:11:87:dd:5a:21:ab:e6:a9:be:e3:ef:67:16:c3:8a:04:bf: eb:e4:24:d7:3f:4a:53:01:d9:73:55:53:8a:25:14:60:9d:33: c2:f5:dc:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/PwSESoMj5+GIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjUzMDAxYmEtMWMyNi00ZWYzLWI1MGMtZTFmN2U1NTg3OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZLIhXXnMlEf7wsOSaMtpH+l12MRs9tF6FtL QOAr0faFy3yVQKOiPhv4l7kSz6I1MT+GPUw4AEABAHDKj14A1iy5FMutmC21SZ78 /PAoPR8xF8QvZSYhAryUVUlHkBl1PoJ/Hx/3gapSX5EN9ttyOMXm90sk1OSSltO8 3usdH5kMb73AoQSddCsEAw3CUr2qnScnVG0i89k/b5RXXyZrqCAx1Dgg9+AhQV/B UFx3pim7HeQXAqqrN8i5uzIh2LKTAQtzn8Hg7aGmg6WtGHrpAO1C5fMPTBuYIhyn oaPXzOlzk/heHKu7O3s/vB22UDcXtJTKh7VIAgyoisVKfRghjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFAYH+DotyKVOKzHoOgGJUjnRX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmY2YzcyNTQtYzcxYi0z MzE0LTgxMmMtNTAwYzk4ZTFmMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKP0pOTMqYWp12/9FGxTRICfU4X5rrdkz/60i2gXX2Ih3IT+lTzo GG4s1t6NN8LiFZhpMNcXAuX80ssoOO97FbwoSwjNNFDK3FFtMAOaIff4fEvNgucy yj7qQuRdGTiiAD4Uq9OQnP93VbULDqpn1A0mIrQLZQ0CU5Bhdk3UmBX1qjuP8xhx 1BmTQbidKRQbrZHO/vrRm487/EZ5OZwOuUmdyfTdmbZB2TczJgXQTzi75WCsyWpi 7qPwCq3QMRA523+ThBeuomgBUSN/J4jFQbwcuxhuB2moUegRh91aIavmqb7j72cW w4oEv+vkJNc/SlMB2XNVU4olFGCdM8L13KU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:57 2025 by rpki-client