$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa File: 89e9235f-222e-3565-80b2-b651e4f3679c.roa (raw, json) Hash identifier: fnLIy3L9nRhr/YBdYnfc6PSAJ6wpEJCAOMbx0CU3zeM= Subject key identifier: 88:8D:FB:6F:4D:2E:64:04:0C:4B:53:55:A3:E0:28:04:9F:43:F8:BE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BA9329388F44663A7DAAFDD40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 401742 IP address blocks: 2001:470:2ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:93:88:f4:46:63:a7:da:af:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d1d6a7ca-c2b4-4751-bb3c-877a6ba0dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:3b:7b:b9:b1:ea:42:54:1f:8b:30:78:d0: 69:e6:ee:8d:e6:66:aa:c3:8d:81:3e:44:2f:98:a1: 3f:4c:11:ca:67:11:7d:8e:56:6a:a2:66:7f:1b:23: 1d:9e:a2:17:a2:1c:6d:d9:68:65:ec:f5:79:6c:f3: 69:9a:b5:1a:a6:60:84:48:30:24:4e:68:8f:eb:b9: cd:bc:66:0e:f5:06:c1:8e:dc:94:ba:17:20:5a:d0: 21:5b:5f:69:2a:31:3a:57:d6:3f:dc:cc:ec:ab:a8: ee:fa:74:06:82:39:9c:8e:b2:37:20:7a:33:24:06: cb:90:68:61:86:b2:79:6d:1d:65:68:9b:c7:4a:87: d6:c9:9b:57:bd:43:9f:5e:0f:a4:3d:af:39:56:a2: b6:d8:e9:62:b1:60:a0:fe:2c:d2:f2:cd:34:a9:d3: 31:96:b3:4e:f1:aa:f1:e9:f7:29:af:78:04:29:70: 7a:ea:22:d4:7a:93:06:b9:7d:31:5c:15:0a:c6:5a: 2b:f6:44:5b:fa:51:16:e6:ff:24:b1:a8:f3:91:be: 3e:31:13:bd:91:ef:e3:1b:3d:87:cc:8b:a6:1a:1c: f5:5f:dc:f7:4b:f7:58:17:ed:01:21:d9:87:e4:47: 4f:a8:1d:f9:28:16:03:45:02:78:ea:48:e4:56:a0: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:FB:6F:4D:2E:64:04:0C:4B:53:55:A3:E0:28:04:9F:43:F8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ae::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:16:9c:ff:39:cf:19:ec:40:2f:68:06:b1:19:9e:e4:41:b6: 5c:67:f3:72:1c:f6:73:11:1e:85:a0:1b:ad:c9:cf:4b:ec:bf: c3:cb:0d:20:30:c9:1e:6b:ce:5a:94:3a:d6:1d:4b:19:de:c4: 36:a5:ac:77:b1:28:bb:4b:7a:55:ab:e1:1e:9a:fe:71:ce:a8: 34:bf:f5:21:1e:70:f0:b3:d1:0d:34:a3:de:b4:bf:52:1a:30: cb:e9:e4:2d:cd:16:6e:04:07:26:c0:8b:e9:77:49:ac:15:42: e8:98:b3:aa:7a:f1:d2:4f:f6:bc:4b:c3:3a:17:48:39:53:64: a0:2e:43:b3:09:c4:a1:67:09:0e:c2:2d:ab:fb:f4:eb:17:f1: af:8e:f1:1c:fb:cf:64:09:6e:c4:29:6d:ce:ea:42:77:d6:28: c6:7c:91:c1:db:2a:ea:78:52:50:91:c9:e9:ca:84:f1:e1:d1: 32:d6:98:99:d5:8f:f6:b0:c1:a2:04:a9:c8:e7:18:b1:b1:9d: f4:ce:ff:78:de:b4:4a:f2:82:d3:91:bb:53:e0:18:3b:a5:07: 33:c4:27:53:df:9a:8e:8a:3e:b4:a3:3c:2a:6c:b9:18:ec:ab: 7f:14:d8:7c:fe:4a:1b:c5:91:d0:6c:4f:74:db:5e:41:ff:3c: b2:99:a9:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMpOI9EZjp9qv3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDFkNmE3Y2EtYzJiNC00NzUxLWJiM2MtODc3YTZiYTBkYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLU7e7mx6kJUH4sweNBp5u6N5maqw42BPkQv mKE/TBHKZxF9jlZqomZ/GyMdnqIXohxt2Whl7PV5bPNpmrUapmCESDAkTmiP67nN vGYO9QbBjtyUuhcgWtAhW19pKjE6V9Y/3Mzsq6ju+nQGgjmcjrI3IHozJAbLkGhh hrJ5bR1laJvHSofWyZtXvUOfXg+kPa85VqK22OlisWCg/izS8s00qdMxlrNO8arx 6fcpr3gEKXB66iLUepMGuX0xXBUKxlor9kRb+lEW5v8ksajzkb4+MRO9ke/jGz2H zIumGhz1X9z3S/dYF+0BIdmH5EdPqB35KBYDRQJ46kjkVqAWlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiN+29NLmQEDEtTVaPgKASfQ/i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODllOTIzNWYtMjIyZS0z NTY1LTgwYjItYjY1MWU0ZjM2NzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAWnP85zxnsQC9oBrEZnuRBtlxn83Ic9nMRHoWgG63Jz0vsv8PL DSAwyR5rzlqUOtYdSxnexDalrHexKLtLelWr4R6a/nHOqDS/9SEecPCz0Q00o960 v1IaMMvp5C3NFm4EBybAi+l3SawVQuiYs6p68dJP9rxLwzoXSDlTZKAuQ7MJxKFn CQ7CLav79OsX8a+O8Rz7z2QJbsQpbc7qQnfWKMZ8kcHbKup4UlCRyenKhPHh0TLW mJnVj/awwaIEqcjnGLGxnfTO/3jetErygtORu1PgGDulBzPEJ1Pfmo6KPrSjPCps uRjsq38U2Hz+ShvFkdBsT3TbXkH/PLKZqZM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:20:59 2025 by rpki-client