$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa File: 397bf181-7f08-3423-bf13-abfcd75aa81e.roa (raw, json) Hash identifier: +QWY3GEdH1Q7fK2cEhtyR5ltk+8GwrCV7kc/pmK0uj8= Subject key identifier: 46:9D:23:3F:BE:76:CD:15:ED:86:F4:64:E6:F1:03:93:10:DB:47:EF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F749039635B432130040 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 64401 IP address blocks: 2001:470:2b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f7:49:03:96:35:b4:32:13:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ca823c17-77f2-4d68-a6b0-1a3b814a4539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:2e:f4:95:24:70:2d:5e:67:af:d4:f5:da: b6:3c:38:0d:15:4c:64:48:fd:89:e0:b6:96:7d:93: e8:95:58:c3:85:4a:f1:b1:f6:68:29:8e:c0:39:3b: 7c:a2:b4:6e:2d:3e:e5:46:50:19:12:26:52:a5:3a: 7e:16:5a:0c:b0:6b:a9:d0:b3:3f:85:50:16:19:6f: 7f:cc:c5:32:16:22:6e:00:23:64:e8:4c:61:33:9f: 6f:4d:3d:3e:00:33:41:60:39:cd:fe:57:25:2b:b7: 32:8e:f7:60:62:db:28:75:d3:ef:65:a1:d4:50:26: a5:f4:30:14:92:81:49:90:f1:41:e5:50:d6:10:86: 55:e3:c5:db:85:10:1d:67:d1:cb:ae:f7:e2:cb:4e: ba:29:fb:dd:90:b0:40:fd:06:dd:e4:57:db:f3:f1: 52:db:70:74:f3:bd:5c:f9:1a:d1:f1:00:17:95:4f: 76:7e:93:e1:f0:96:6a:2b:40:56:33:ff:87:97:5a: 39:c3:51:ca:ab:15:4e:b6:16:0b:73:23:18:a1:11: bd:6c:ea:34:66:d6:f0:bb:64:6c:0a:ed:00:f2:7e: 34:35:28:b1:94:06:31:93:90:35:1d:f4:3a:21:fe: d8:6f:a8:fb:42:60:10:13:19:94:8c:d0:b2:92:36: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:23:3F:BE:76:CD:15:ED:86:F4:64:E6:F1:03:93:10:DB:47:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:68:82:58:46:b4:4c:ae:8c:73:f1:ee:67:ec:bc:b6:2e:14: fc:c1:e3:55:1e:f0:a1:fe:e9:77:cf:8c:81:7f:12:30:07:00: 93:1c:d6:2b:25:f5:3a:7f:44:f7:2a:a7:86:87:83:b6:25:fc: e1:b2:67:9b:00:5a:48:2d:51:39:9d:65:11:71:cc:e3:cc:7c: 9b:19:43:d7:1c:db:35:cc:7a:90:dd:34:53:62:e7:4f:ad:8f: 60:a2:ec:d5:9c:00:5f:aa:7e:de:24:6f:03:fa:9a:72:7a:03: 04:00:df:05:08:94:20:d4:bc:f6:9c:67:bd:b7:55:a6:00:19: ff:f5:fc:53:b1:e2:34:b9:ac:1a:c8:0c:13:b6:b9:55:14:0e: dd:e6:62:e3:fc:15:0a:49:ee:8e:1b:bc:64:94:ef:b9:d6:80: 6d:b0:eb:e7:6a:2c:2d:1a:7a:06:df:17:6b:09:d7:67:13:f7: 80:b2:7c:d2:15:ea:63:53:1f:d5:76:1d:40:e2:1a:a3:89:15: 5d:d1:ac:17:76:43:52:52:83:fe:ff:cb:b7:54:a2:15:b2:e0: 7a:98:7a:c3:29:06:1b:0c:69:7a:b3:94:e5:ff:19:88:2d:99: a3:65:e6:26:6c:37:9c:bb:c4:79:67:cd:67:bf:71:fb:3b:2c: 8a:9c:b4:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/dJA5Y1tDITAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2E4MjNjMTctNzdmMi00ZDY4LWE2YjAtMWEzYjgxNGE0NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Iu9JUkcC1eZ6/U9dq2PDgNFUxkSP2J4LaW fZPolVjDhUrxsfZoKY7AOTt8orRuLT7lRlAZEiZSpTp+FloMsGup0LM/hVAWGW9/ zMUyFiJuACNk6ExhM59vTT0+ADNBYDnN/lclK7cyjvdgYtsoddPvZaHUUCal9DAU koFJkPFB5VDWEIZV48XbhRAdZ9HLrvfiy066KfvdkLBA/Qbd5Ffb8/FS23B0871c +RrR8QAXlU92fpPh8JZqK0BWM/+Hl1o5w1HKqxVOthYLcyMYoRG9bOo0Ztbwu2Rs Cu0A8n40NSixlAYxk5A1HfQ6If7Yb6j7QmAQExmUjNCykjbwEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEadIz++ds0V7Yb0ZObxA5MQ20fvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzk3YmYxODEtN2YwOC0z NDIzLWJmMTMtYWJmY2Q3NWFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJBoglhGtEyujHPx7mfsvLYuFPzB41Ue8KH+6XfPjIF/EjAHAJMc 1isl9Tp/RPcqp4aHg7Yl/OGyZ5sAWkgtUTmdZRFxzOPMfJsZQ9cc2zXMepDdNFNi 50+tj2Ci7NWcAF+qft4kbwP6mnJ6AwQA3wUIlCDUvPacZ723VaYAGf/1/FOx4jS5 rBrIDBO2uVUUDt3mYuP8FQpJ7o4bvGSU77nWgG2w6+dqLC0aegbfF2sJ12cT94Cy fNIV6mNTH9V2HUDiGqOJFV3RrBd2Q1JSg/7/y7dUohWy4HqYesMpBhsMaXqzlOX/ GYgtmaNl5iZsN5y7xHlnzWe/cfs7LIqctEE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:00 2025 by rpki-client