$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa File: cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa (raw, json) Hash identifier: tFxsh/UaoFh6RE+Fsvz3FdW3vAyhIO8TpSt/N8Q7ZLs= Subject key identifier: 21:47:B3:38:E8:5F:E2:B6:4B:B8:8A:F7:94:54:1C:6B:D5:F1:26:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C1DD6879F21BE08850D0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 393737 IP address blocks: 2001:470:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c1:dd:68:79:f2:1b:e0:88:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2b3d1a6e-7bcc-4a6f-95f0-2e3612467a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:4d:82:b5:a8:89:11:ef:a4:c1:dd:05:f6: bd:a2:b9:23:d3:95:3f:93:12:53:b5:40:88:79:bc: 5b:6b:d5:3d:48:c9:db:10:fa:e5:65:68:24:e5:53: 04:3f:07:63:1a:81:35:81:a3:ee:65:37:f9:ca:dd: 39:c5:a9:db:f7:57:c2:95:b5:ef:ab:8e:be:3d:6d: ef:e8:32:07:3e:bc:a2:8e:d9:5e:20:d5:a0:6b:85: c0:6b:bf:de:a7:c4:4e:ee:37:f8:f2:4f:6c:8f:01: 11:f9:f7:34:d5:0c:dd:90:45:3a:bf:13:fa:84:81: 1a:fb:c6:52:14:e9:b9:93:80:48:2d:f4:17:59:95: ec:cb:1d:56:a2:b7:2f:49:7b:dc:9f:72:c6:46:3f: 3b:b0:58:ff:58:7f:fc:ab:48:59:64:bb:3b:5f:f3: 1d:ca:10:49:79:93:f7:58:5c:05:a8:e8:eb:91:9b: 97:45:5d:61:f6:09:7f:8c:40:74:7f:1d:a5:0b:ef: 5a:d5:4d:3b:a6:b9:10:37:df:d4:a4:76:d3:19:d1: f6:06:c6:b1:f2:ef:ef:c8:dd:d5:3f:4c:a5:fa:da: 02:28:18:27:8c:3f:c0:1c:9d:6f:36:57:1e:86:d2: 21:5b:b8:27:6e:2b:e0:fc:a2:43:ea:cb:9a:3c:21: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:B3:38:E8:5F:E2:B6:4B:B8:8A:F7:94:54:1C:6B:D5:F1:26:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:66:16:00:70:d8:a5:9c:c3:e5:9f:ce:46:6e:2f:79:4e:b4: a3:59:51:fd:cc:f8:7a:84:a9:fc:52:af:14:ea:d1:65:81:4c: ae:8b:ab:1a:bf:6d:cb:0c:83:b7:7d:03:ac:9d:f0:54:ca:43: 58:d9:10:df:dc:67:62:57:18:23:c8:5b:e5:6c:66:81:9b:79: 2f:4f:2c:17:bf:3d:5a:fa:02:b1:e6:7b:11:64:ee:fc:45:e8: d4:1e:61:ca:34:c8:68:4b:87:c4:4b:4e:ff:7c:d4:7b:b3:a2: de:de:10:90:6a:5a:4e:92:40:4c:83:f5:d1:13:55:6d:f3:46: 03:a6:7b:34:35:78:b3:ba:c8:87:70:df:b6:5c:5b:06:21:55: 74:f5:e4:23:ce:ba:e2:a6:72:25:b9:26:b9:a3:39:f1:12:bd: f8:e2:a5:12:d7:6f:ec:c2:34:26:c1:a6:70:35:2e:37:38:52: 24:61:6f:78:b4:9e:f1:91:bb:3e:8b:dc:8f:76:8e:6f:01:5f: 28:82:cf:96:31:9c:62:54:6b:2d:41:2e:6e:49:53:22:11:99: 31:f5:8b:39:fa:1e:62:b4:c9:ee:40:b2:5b:ff:1f:19:06:62: e4:a5:15:0a:41:e3:3e:f0:4b:8f:04:70:df:7d:5b:d5:21:a6: d8:64:5f:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18HdaHnyG+CIUNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmIzZDFhNmUtN2JjYy00YTZmLTk1ZjAtMmUzNjEyNDY3YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6BNgrWoiRHvpMHdBfa9orkj05U/kxJTtUCI ebxba9U9SMnbEPrlZWgk5VMEPwdjGoE1gaPuZTf5yt05xanb91fClbXvq46+PW3v 6DIHPryijtleINWga4XAa7/ep8RO7jf48k9sjwER+fc01QzdkEU6vxP6hIEa+8ZS FOm5k4BILfQXWZXsyx1WorcvSXvcn3LGRj87sFj/WH/8q0hZZLs7X/MdyhBJeZP3 WFwFqOjrkZuXRV1h9gl/jEB0fx2lC+9a1U07prkQN9/UpHbTGdH2Bsax8u/vyN3V P0yl+toCKBgnjD/AHJ1vNlcehtIhW7gnbivg/KJD6suaPCFwRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFHszjoX+K2S7iK95RUHGvV8SYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2YzZjNhMWMtM2FhZi0z YzY5LTg4NTAtNGNiNDI1Yjk4OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJBmFgBw2KWcw+WfzkZuL3lOtKNZUf3M+HqEqfxSrxTq0WWBTK6L qxq/bcsMg7d9A6yd8FTKQ1jZEN/cZ2JXGCPIW+VsZoGbeS9PLBe/PVr6ArHmexFk 7vxF6NQeYco0yGhLh8RLTv981Huzot7eEJBqWk6SQEyD9dETVW3zRgOmezQ1eLO6 yIdw37ZcWwYhVXT15CPOuuKmciW5JrmjOfESvfjipRLXb+zCNCbBpnA1Ljc4UiRh b3i0nvGRuz6L3I92jm8BXyiCz5YxnGJUay1BLm5JUyIRmTH1izn6HmK0ye5Aslv/ HxkGYuSlFQpB4z7wS48EcN99W9UhpthkX8w= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:44 2025 by rpki-client