$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa File: e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa (raw, json) Hash identifier: tIKrfkpKtBj3zdt4RZSvpnrFH5jeMESWOzk5NoIiQoU= Subject key identifier: 63:FD:34:FB:0E:EB:F8:A7:88:84:26:9D:F9:16:5E:28:75:96:AC:05 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BA7CD09071A4B144427181C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 31877 IP address blocks: 2001:470:38b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:09:07:1a:4b:14:44:27:18:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=1a6c65ea-e858-49da-9537-c8e5ca3710c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:b4:bc:63:49:3b:39:ad:28:de:24:f5:16: e0:13:87:d0:db:ad:ba:f1:2d:e0:9c:5d:a4:2b:22: 55:eb:cb:8c:02:2d:c7:31:7d:71:f8:1d:fa:55:6d: 27:24:30:e5:1b:6a:ef:06:e0:20:15:f1:a1:d4:f8: 79:14:73:b5:a7:18:95:f9:8a:c5:7a:cb:d1:6e:d4: 11:0b:fc:7b:b7:ba:69:f7:16:58:ca:5b:29:68:8c: 09:87:d0:2a:07:d1:71:bd:1f:93:b0:34:bd:7c:8e: 28:b4:4a:f6:05:a3:71:d2:4f:d6:f1:0d:2e:39:5f: 6a:93:27:48:22:e7:f3:82:4b:e4:8b:39:38:cb:20: e2:78:8e:ca:bb:97:d4:e2:23:20:fc:f5:44:ff:72: b7:9b:88:8f:7d:4e:3c:ba:78:e0:fb:0b:06:be:1d: aa:2c:7d:3f:87:ca:4a:7e:12:e0:82:f8:81:6d:1a: 99:0e:a7:c2:1d:29:7c:41:bb:3a:c5:59:b7:80:74: d9:2e:f6:9d:66:4d:22:52:e5:85:7d:bc:08:a7:2f: 6b:af:41:fd:96:45:0f:e3:1b:f4:60:65:2b:e2:8e: 9b:51:64:54:bb:8c:55:45:d8:2f:94:06:61:43:52: a1:5b:ee:7f:d5:41:79:52:13:90:61:78:4b:28:5a: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:34:FB:0E:EB:F8:A7:88:84:26:9D:F9:16:5E:28:75:96:AC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2980b54-87f6-31f5-9ae9-fac73986ddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b3:df:4e:0b:0b:ac:3e:fb:40:f1:c3:2a:01:4f:0c:f6:bf: 20:c3:aa:42:5a:d3:c1:65:b6:e8:80:9f:25:be:35:2f:82:25: a5:96:e9:1e:e3:4b:52:5b:9a:bc:b2:eb:65:9a:68:68:01:70: cc:d9:89:43:ff:da:b3:f6:1d:55:82:1f:b3:07:26:e4:0e:6e: c2:9a:b4:8d:c6:e1:ea:0a:c7:43:ec:c7:f5:61:88:53:a5:a8: 1b:78:42:6a:f7:ee:83:c4:00:e1:c2:90:72:62:12:b0:f8:aa: 54:c2:19:ef:1d:cc:ac:3c:62:36:2e:76:c3:45:15:f5:7c:38: af:e7:24:b0:75:34:b7:d7:3c:b5:83:fa:96:92:24:d3:c7:bd: 71:df:5e:a3:4a:e7:03:ff:92:7d:ad:89:28:69:db:82:e4:04: 81:d5:58:e0:a1:67:b1:13:20:8e:f9:65:7b:6b:b1:1e:60:05: 0e:d4:44:56:14:e0:ff:b4:29:1f:64:b3:fc:e1:47:b1:c9:c3: 16:5e:7a:dd:61:f7:04:ed:5c:30:26:ad:76:2e:c4:2f:b8:b6: 20:ad:1a:43:28:1c:0d:2f:ae:9f:a7:df:d7:b3:e7:4e:52:62: 8d:7e:23:a1:f8:a6:6c:8b:71:eb:04:b8:cc:52:24:3e:56:36: a9:91:a3:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEunzQkHGksURCcYHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWE2YzY1ZWEtZTg1OC00OWRhLTk1MzctYzhlNWNhMzcxMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSi0vGNJOzmtKN4k9RbgE4fQ26268S3gnF2k KyJV68uMAi3HMX1x+B36VW0nJDDlG2rvBuAgFfGh1Ph5FHO1pxiV+YrFesvRbtQR C/x7t7pp9xZYylspaIwJh9AqB9FxvR+TsDS9fI4otEr2BaNx0k/W8Q0uOV9qkydI Iufzgkvkizk4yyDieI7Ku5fU4iMg/PVE/3K3m4iPfU48unjg+wsGvh2qLH0/h8pK fhLggviBbRqZDqfCHSl8Qbs6xVm3gHTZLvadZk0iUuWFfbwIpy9rr0H9lkUP4xv0 YGUr4o6bUWRUu4xVRdgvlAZhQ1KhW+5/1UF5UhOQYXhLKFp7qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGP9NPsO6/iniIQmnfkWXih1lqwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI5ODBiNTQtODdmNi0z MWY1LTlhZTktZmFjNzM5ODZkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOz304LC6w++0DxwyoBTwz2vyDDqkJa08FltuiAnyW+NS+CJaWW 6R7jS1Jbmryy62WaaGgBcMzZiUP/2rP2HVWCH7MHJuQObsKatI3G4eoKx0Psx/Vh iFOlqBt4Qmr37oPEAOHCkHJiErD4qlTCGe8dzKw8YjYudsNFFfV8OK/nJLB1NLfX PLWD+paSJNPHvXHfXqNK5wP/kn2tiShp24LkBIHVWOChZ7ETII75ZXtrsR5gBQ7U RFYU4P+0KR9ks/zhR7HJwxZeet1h9wTtXDAmrXYuxC+4tiCtGkMoHA0vrp+n39ez 505SYo1+I6H4pmyLcesEuMxSJD5WNqmRo38= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:40 2025 by rpki-client