$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa File: bfaaea38-a576-3f1a-8fae-db459997dda8.roa (raw, json) Hash identifier: XsXThrq9lJ6H8OS9GT5kFIZ6eg0Tbz6bY6qafobFJAQ= Subject key identifier: AA:2A:1C:57:48:64:8D:8D:F9:9C:96:B6:C2:C3:59:FE:C2:F1:59:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB1925981EDD735C0A5971280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 131642 IP address blocks: 2001:470:21e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:59:81:ed:d7:35:c0:a5:97:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=25bb9ac6-8eec-4b43-8f03-59eaee4f6b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:79:3c:fe:28:76:83:6c:2a:21:5e:c7:51: e5:f5:26:98:09:27:df:2a:74:c0:42:43:7b:e5:af: 76:80:1d:a3:51:a7:d6:78:39:97:da:93:25:4d:12: f8:5d:b5:62:9c:7c:05:c4:61:5c:2a:14:0c:3a:4e: c4:b9:b0:ef:56:66:e7:55:27:00:cf:0f:10:ef:a1: d6:5a:99:1b:d6:7e:ea:59:2e:4f:c9:83:8e:2f:1a: a1:51:19:37:40:99:0c:d1:90:fe:89:e7:a8:2e:19: d5:63:db:7f:d2:c6:97:e9:99:c4:bd:70:c8:42:e8: d4:21:20:7e:82:a3:09:f4:03:c2:ce:32:de:9c:4b: da:c2:08:ec:e1:1d:2b:d5:2f:a0:9e:a8:7e:41:59: 21:65:3b:ef:86:62:0d:66:59:b7:32:ee:71:14:0d: 1a:7e:b5:1c:3d:13:35:d0:1c:20:d7:98:26:19:ba: e5:cc:66:d1:6d:c2:5f:47:5c:54:14:82:1e:ae:06: 2e:7a:31:0e:6a:e2:b1:05:c0:06:25:9f:fb:3b:62: f9:2c:3f:68:f6:2b:a9:b7:ff:00:33:a6:c1:c2:b2: 0d:11:18:51:82:7b:d2:0b:b3:82:e7:6c:82:2e:c4: df:93:56:4f:15:03:43:ed:eb:01:ee:d3:3e:5f:0d: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2A:1C:57:48:64:8D:8D:F9:9C:96:B6:C2:C3:59:FE:C2:F1:59:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:20:fc:09:8a:60:1a:12:05:fd:39:e1:4e:84:30:ad:80:7f: 6b:e0:b5:11:d4:be:db:e1:e0:92:26:91:df:53:a1:7f:ae:fd: 62:05:db:d6:4e:f0:1b:ba:c8:ad:70:0a:27:72:5d:1f:74:64: 6b:04:83:fb:0c:b4:5b:79:c9:5d:7e:2a:f9:6d:f4:61:13:f7: 47:58:52:22:12:21:33:2a:fc:cc:01:4d:4a:f7:1d:13:6e:b3: 5e:cc:42:b7:54:76:91:40:db:f1:4c:ca:a9:e8:19:86:39:ef: a1:db:b0:30:86:97:ca:c5:12:45:17:b3:25:b9:cc:14:26:00: 1e:f4:32:6a:14:dd:18:35:b7:03:c0:1e:cb:aa:86:90:7a:c6: 08:12:9f:cb:ad:f2:5b:25:03:19:d8:4c:cd:d0:24:ef:bd:c8: 01:a7:75:d0:ee:2e:ab:8b:38:b5:3c:12:2c:b3:43:b9:49:aa: 1c:87:7d:0d:66:29:88:78:4c:ff:db:00:2b:d4:37:5a:6c:3a: fd:ae:00:47:e7:45:14:88:ce:41:45:22:d1:6f:e4:26:86:66: 38:89:6b:0d:1c:ae:d1:bc:34:f3:6c:05:86:60:e5:6d:af:9e: 03:1d:fc:83:e4:ff:c0:c7:63:91:00:92:ec:81:7c:29:b1:00: 9e:fc:d3:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxklmB7dc1wKWXEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MjViYjlhYzYtOGVlYy00YjQzLThmMDMtNTllYWVlNGY2YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsB5PP4odoNsKiFex1Hl9SaYCSffKnTAQkN7 5a92gB2jUafWeDmX2pMlTRL4XbVinHwFxGFcKhQMOk7EubDvVmbnVScAzw8Q76HW Wpkb1n7qWS5PyYOOLxqhURk3QJkM0ZD+ieeoLhnVY9t/0saX6ZnEvXDIQujUISB+ gqMJ9APCzjLenEvawgjs4R0r1S+gnqh+QVkhZTvvhmINZlm3Mu5xFA0afrUcPRM1 0Bwg15gmGbrlzGbRbcJfR1xUFIIergYuejEOauKxBcAGJZ/7O2L5LD9o9iupt/8A M6bBwrINERhRgnvSC7OC52yCLsTfk1ZPFQND7esB7tM+Xw2xNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKoqHFdIZI2N+ZyWtsLDWf7C8Vl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZhYWVhMzgtYTU3Ni0z ZjFhLThmYWUtZGI0NTk5OTdkZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJcg/AmKYBoSBf054U6EMK2Af2vgtRHUvtvh4JImkd9ToX+u/WIF 29ZO8Bu6yK1wCidyXR90ZGsEg/sMtFt5yV1+Kvlt9GET90dYUiISITMq/MwBTUr3 HRNus17MQrdUdpFA2/FMyqnoGYY576HbsDCGl8rFEkUXsyW5zBQmAB70MmoU3Rg1 twPAHsuqhpB6xggSn8ut8lslAxnYTM3QJO+9yAGnddDuLquLOLU8EiyzQ7lJqhyH fQ1mKYh4TP/bACvUN1psOv2uAEfnRRSIzkFFItFv5CaGZjiJaw0crtG8NPNsBYZg 5W2vngMd/IPk/8DHY5EAkuyBfCmxAJ7800E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:10 2025 by rpki-client