$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa File: a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa (raw, json) Hash identifier: 7pBeoZOnA3jxbFWqG/i3y/RYLCmuCDg6bcUgfS/E21M= Subject key identifier: 28:5F:A8:2C:5B:6C:D0:5F:E6:94:06:10:57:7F:3D:45:36:27:22:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7F6795EB34361CDF7B8E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 62081 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:f6:79:5e:b3:43:61:cd:f7:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=54c91f76-37b2-4662-8611-f194af1c5649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:10:46:2a:a3:b0:63:c4:72:22:dd:a5:c2: e3:5a:16:3a:05:a2:97:99:9a:b4:5f:d4:90:a0:de: 21:59:20:4f:02:95:54:7c:77:76:12:7e:b9:81:3d: 9d:f3:98:c4:22:76:1b:95:62:ad:2f:51:12:71:83: 94:a2:1e:51:17:ce:bc:12:28:db:4d:28:6d:4d:7a: 4d:aa:f7:1e:93:e2:b2:c8:80:82:f7:54:15:ee:1e: 7c:dd:68:b1:17:de:f7:28:a4:54:dc:a9:96:98:29: 40:d6:3b:9d:70:3e:15:e9:70:5e:8e:4f:b6:d6:5b: 99:9d:70:5c:08:74:c0:80:32:8a:d9:e7:4c:36:24: 24:94:54:d9:30:c2:20:82:c2:19:ad:2d:6c:e3:4e: 02:29:65:cb:f8:ff:31:c2:bb:48:09:60:9e:db:d7: b7:60:39:a0:af:43:ad:0e:75:6e:8d:31:0b:f0:0d: c4:84:20:9e:d3:8f:39:e1:34:70:c9:8d:1d:20:a0: 19:04:5a:aa:9f:78:e0:4e:5c:31:cd:b7:9e:e8:4d: 56:7f:ec:cc:e9:59:76:9a:5b:6d:0c:47:e1:a2:d2: c4:6f:5c:4e:9c:9d:39:6b:38:33:1d:67:22:e5:6a: 68:06:e8:1e:6e:91:e6:48:d3:ec:1d:c0:33:b7:d4: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5F:A8:2C:5B:6C:D0:5F:E6:94:06:10:57:7F:3D:45:36:27:22:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7da6d9b-e286-3654-8f45-bcfc78a9fee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:af:23:96:1c:b9:82:56:d3:63:6e:38:15:a6:c3:4c:1d:c8: 59:e5:07:35:92:8e:17:7e:8d:61:b1:80:df:4f:9e:69:4a:7f: af:36:67:08:56:fb:f9:7b:57:9f:ea:cd:3e:bb:81:09:c9:bf: 83:47:92:c7:ac:3c:05:e5:80:0b:8f:b5:47:a6:7a:84:0c:e8: 43:42:05:1e:95:26:70:bb:a6:7e:12:b4:02:5a:7b:d6:39:63: 85:55:4a:9b:1a:af:25:6a:c9:a0:0c:9c:4a:04:6b:09:56:d9: 07:95:30:90:e6:7c:fa:2c:1b:83:48:14:84:3f:1e:b4:0f:74: ae:51:94:91:49:d0:c0:d2:84:c3:76:76:08:23:bc:1d:6d:34: 32:1f:9d:44:0a:d8:a7:02:bc:54:45:52:3f:cd:3d:6e:6f:a4: 8b:d3:8a:72:8d:2f:2e:5a:50:4a:02:a3:40:62:e0:5b:d9:19: fa:b2:0b:48:56:c9:32:9e:91:61:42:ef:ff:1b:e0:92:2f:4d: 02:a0:ab:14:38:7c:7b:b4:15:a1:7c:9d:d3:d1:7b:9d:fa:31: 82:07:13:c0:5a:5d:57:98:3e:3b:9d:d8:62:a2:05:9b:82:1a: d8:36:ed:be:fa:c7:75:85:11:a5:37:61:9d:69:6f:f3:bc:1d: 7f:4c:d1:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/Z5XrNDYc33uOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTRjOTFmNzYtMzdiMi00NjYyLTg2MTEtZjE5NGFmMWM1NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUEQRiqjsGPEciLdpcLjWhY6BaKXmZq0X9SQ oN4hWSBPApVUfHd2En65gT2d85jEInYblWKtL1EScYOUoh5RF868EijbTShtTXpN qvcek+KyyICC91QV7h583WixF973KKRU3KmWmClA1judcD4V6XBejk+21luZnXBc CHTAgDKK2edMNiQklFTZMMIggsIZrS1s404CKWXL+P8xwrtICWCe29e3YDmgr0Ot DnVujTEL8A3EhCCe04854TRwyY0dIKAZBFqqn3jgTlwxzbee6E1Wf+zM6Vl2mltt DEfhotLEb1xOnJ05azgzHWci5WpoBugebpHmSNPsHcAzt9QECQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChfqCxbbNBf5pQGEFd/PUU2JyLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTdkYTZkOWItZTI4Ni0z NjU0LThmNDUtYmNmYzc4YTlmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEavI5YcuYJW02NuOBWmw0wdyFnlBzWSjhd+jWGxgN9PnmlKf682 ZwhW+/l7V5/qzT67gQnJv4NHksesPAXlgAuPtUemeoQM6ENCBR6VJnC7pn4StAJa e9Y5Y4VVSpsaryVqyaAMnEoEawlW2QeVMJDmfPosG4NIFIQ/HrQPdK5RlJFJ0MDS hMN2dggjvB1tNDIfnUQK2KcCvFRFUj/NPW5vpIvTinKNLy5aUEoCo0Bi4FvZGfqy C0hWyTKekWFC7/8b4JIvTQKgqxQ4fHu0FaF8ndPRe536MYIHE8BaXVeYPjud2GKi BZuCGtg27b76x3WFEaU3YZ1pb/O8HX9M0QI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:55 2025 by rpki-client