$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa File: cfc2b88e-3d03-39be-b01b-59809c7a6902.roa (raw, json) Hash identifier: FEKRnVvxqsVKJVej71Inl+UBCSSNlJcsfgs7Ik6emzk= Subject key identifier: 0A:4B:7B:75:E6:0B:08:27:61:11:3F:40:07:A9:F6:6F:12:2D:C7:5C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C8A1F6B5410C41C8E500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36666 IP address blocks: 2001:470:1c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c8:a1:f6:b5:41:0c:41:c8:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b6d28769-83d9-4037-8d29-972c1bbb3dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:d5:34:9e:2a:fb:ea:67:49:de:6b:03:1a: c1:24:e4:b2:8c:63:ef:f5:5e:6a:e0:54:d3:95:a2: b8:f9:eb:f6:6a:d0:db:b8:68:cf:d0:0b:fc:cb:a2: bb:d1:3a:01:90:80:db:3e:02:c9:57:2a:20:32:54: 54:36:1f:71:91:56:d3:4f:76:b9:2b:a4:9b:7a:05: 02:b3:7d:c8:29:5b:b1:ba:95:f8:32:5c:3f:8b:70: e2:c4:82:83:25:6e:ae:2c:e0:03:59:a9:5a:a1:f8: 53:88:18:39:9b:b9:2d:e2:d1:8a:75:10:15:11:1b: c0:41:04:5d:70:3d:5b:88:6a:61:fa:35:8b:bf:69: 0b:64:da:dd:74:c8:61:82:9b:50:b7:ad:9c:75:49: b9:c5:48:d8:3d:56:94:96:b8:ff:15:54:7f:b7:4d: 44:8b:90:da:90:06:98:db:e0:99:21:31:55:d2:02: 3d:d0:b2:8e:1d:c0:96:a9:2e:e8:19:49:7c:e9:22: 83:78:99:1e:af:44:c4:2e:80:34:68:7c:3c:be:3f: a5:87:a0:f2:6d:5b:8e:95:2b:a3:94:12:58:42:17: 16:dd:66:3c:95:6d:86:b7:8c:08:c4:77:18:57:9f: bc:f2:1d:78:82:0f:ed:17:a2:68:64:bc:26:5f:32: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:7B:75:E6:0B:08:27:61:11:3F:40:07:A9:F6:6F:12:2D:C7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfc2b88e-3d03-39be-b01b-59809c7a6902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:14:f7:fd:59:ce:81:5b:bb:62:df:48:fc:38:c3:07:f4:03: 4e:87:b5:e4:aa:be:71:03:b8:f6:72:67:ed:73:ca:20:b3:33: 7a:bc:03:40:c1:8e:29:e6:13:9f:91:43:40:3e:fb:a5:28:88: 1b:ad:8f:b6:e7:d7:fd:a3:20:1b:21:e1:a8:41:36:cf:f6:ff: 19:ae:c1:75:4e:be:13:46:64:98:9f:5c:89:13:ba:79:52:be: 97:10:55:fd:e0:d7:4d:ff:98:5a:dd:9e:a7:69:36:66:01:05: 5d:74:bc:7a:5b:08:cf:03:c9:a2:a7:75:c6:79:d9:eb:c3:99: 9d:62:0e:3c:98:be:c2:c3:fb:12:a9:a6:f9:ad:5e:92:9f:59: 4b:84:e0:7b:f7:db:56:70:0a:b0:fa:2c:69:cf:94:8f:f7:6b: da:8d:1f:dc:12:48:ca:cb:1d:30:1e:41:a7:4a:a8:d9:c9:6b: 99:50:eb:79:01:30:ab:32:17:c0:39:02:05:ce:94:d7:4c:14: 76:60:9a:79:73:8d:12:80:c5:b9:86:59:6d:b3:9a:44:e1:1a: d9:c8:13:dd:93:53:d7:66:a5:48:d8:f6:d2:3b:6f:b0:19:d8: 3a:b8:a3:b7:b6:97:1c:63:ea:b6:46:57:83:3e:1b:6c:ad:f6: 40:5c:d6:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18ih9rVBDEHI5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjZkMjg3NjktODNkOS00MDM3LThkMjktOTcyYzFiYmIzZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh7VNJ4q++pnSd5rAxrBJOSyjGPv9V5q4FTT laK4+ev2atDbuGjP0Av8y6K70ToBkIDbPgLJVyogMlRUNh9xkVbTT3a5K6SbegUC s33IKVuxupX4Mlw/i3DixIKDJW6uLOADWalaofhTiBg5m7kt4tGKdRAVERvAQQRd cD1biGph+jWLv2kLZNrddMhhgptQt62cdUm5xUjYPVaUlrj/FVR/t01Ei5DakAaY 2+CZITFV0gI90LKOHcCWqS7oGUl86SKDeJker0TELoA0aHw8vj+lh6DybVuOlSuj lBJYQhcW3WY8lW2Gt4wIxHcYV5+88h14gg/tF6JoZLwmXzL/BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFApLe3XmCwgnYRE/QAep9m8SLcdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2ZjMmI4OGUtM2QwMy0z OWJlLWIwMWItNTk4MDljN2E2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcU9/1ZzoFbu2LfSPw4wwf0A06HteSqvnEDuPZyZ+1zyiCzM3q8 A0DBjinmE5+RQ0A++6UoiButj7bn1/2jIBsh4ahBNs/2/xmuwXVOvhNGZJifXIkT unlSvpcQVf3g103/mFrdnqdpNmYBBV10vHpbCM8DyaKndcZ52evDmZ1iDjyYvsLD +xKppvmtXpKfWUuE4Hv321ZwCrD6LGnPlI/3a9qNH9wSSMrLHTAeQadKqNnJa5lQ 63kBMKsyF8A5AgXOlNdMFHZgmnlzjRKAxbmGWW2zmkThGtnIE92TU9dmpUjY9tI7 b7AZ2Dq4o7e2lxxj6rZGV4M+G2yt9kBc1uM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:23 2025 by rpki-client