$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa File: e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa (raw, json) Hash identifier: QTzscqzg9EcJrzVH2hm8GgAp5iy2vPn3h7dE9FzHxw8= Subject key identifier: 9F:02:44:A8:71:91:D8:32:65:C0:20:DB:E0:D0:01:A6:4B:6D:FB:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EDA4D27AF03A518C3CC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6204 IP address blocks: 2001:470:1d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ed:a4:d2:7a:f0:3a:51:8c:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=147c92c8-414c-4e86-bb0e-b1dba323b7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:32:7d:41:da:dc:13:bc:06:95:bd:43:78:6b: 38:ee:6e:6b:0d:49:50:20:f0:73:da:71:b3:e7:bc: 20:93:ca:6f:a6:c2:31:44:4f:5c:3b:ce:ea:49:6e: 7b:20:fa:ec:4c:bd:83:bf:0d:36:f2:5c:8f:4c:e0: 48:51:62:af:ff:62:5b:1c:7a:d0:ac:3b:0a:d6:0e: cf:7a:f3:7a:c3:ac:38:5c:89:ae:2e:fd:a5:4f:94: 48:c4:7a:b1:a4:b9:e5:83:82:03:32:84:08:3a:45: 48:0a:a4:dd:34:36:e2:d5:aa:19:fa:2f:e5:4b:b8: 98:96:01:65:ca:f6:38:f5:36:5c:4c:10:01:56:df: 06:97:c8:d6:2b:fc:3f:94:14:b1:b5:7d:99:b5:e7: 7b:84:b9:70:48:9e:84:2c:a7:a8:2e:a9:0b:cf:ba: 10:fd:fb:de:27:cc:28:ad:ba:49:44:1c:2c:07:6c: de:6b:ec:ed:bc:61:d4:55:77:45:27:b8:a7:97:48: e8:47:83:f7:c8:fa:26:95:f8:cc:15:32:ca:20:8a: 05:b1:10:32:74:be:eb:f8:65:37:15:6a:ee:99:67: f5:12:83:ef:2e:e4:c3:47:c4:45:b0:47:f7:b1:3f: a5:8e:f8:82:a0:c8:91:b0:1a:e9:f1:ed:78:08:42: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:44:A8:71:91:D8:32:65:C0:20:DB:E0:D0:01:A6:4B:6D:FB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2fd8ba5-c4c9-3165-aa4d-3110dfb2a46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5a:1c:dd:0e:62:10:8a:ac:f1:8a:ee:da:ff:e8:73:ce:74: eb:f2:35:da:b5:74:3f:80:47:7e:1b:1a:66:30:a4:5f:c4:ee: c5:7e:39:0f:e9:3a:ef:53:14:a3:85:d6:1b:0c:9e:12:68:2e: 11:f4:42:38:ac:7c:09:e7:97:d0:1e:f1:21:10:2f:16:ac:2d: 42:73:3e:11:3b:41:ba:25:9f:6b:e5:5a:a5:a1:96:8c:8e:6b: d6:46:11:0a:02:2d:98:3f:39:25:93:7f:2f:60:d9:84:1d:f2: be:4b:7c:9f:fb:dd:db:a0:92:6a:50:18:4c:cb:b5:e8:7d:88: 0b:91:15:94:4d:de:8b:bb:e4:78:e3:21:d6:7e:da:18:5e:d1: 96:40:d5:13:58:73:a5:20:58:30:c0:d1:91:65:1b:2a:95:d7: 54:d2:1e:c1:24:94:26:87:a1:8f:ea:c4:f8:b0:46:ca:b7:e9: 84:fb:c7:1b:87:24:09:b2:2c:2a:24:f8:d9:e9:ea:72:f2:da: 2f:f8:28:f8:87:94:27:bd:01:cd:54:8c:c2:9e:5d:2b:1c:b7: c9:7c:39:6b:5b:92:2b:90:40:fe:64:65:cf:a1:a9:e3:2b:02: 09:23:b5:09:9a:ff:ca:17:c0:ff:b8:26:a1:0c:cb:7c:d4:60: 48:4c:1e:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+2k0nrwOlGMPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTQ3YzkyYzgtNDE0Yy00ZTg2LWJiMGUtYjFkYmEzMjNiN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzJ9QdrcE7wGlb1DeGs47m5rDUlQIPBz2nGz 57wgk8pvpsIxRE9cO87qSW57IPrsTL2Dvw028lyPTOBIUWKv/2JbHHrQrDsK1g7P evN6w6w4XImuLv2lT5RIxHqxpLnlg4IDMoQIOkVICqTdNDbi1aoZ+i/lS7iYlgFl yvY49TZcTBABVt8Gl8jWK/w/lBSxtX2Zted7hLlwSJ6ELKeoLqkLz7oQ/fveJ8wo rbpJRBwsB2zea+ztvGHUVXdFJ7inl0joR4P3yPomlfjMFTLKIIoFsRAydL7r+GU3 FWrumWf1EoPvLuTDR8RFsEf3sT+ljviCoMiRsBrp8e14CEJONQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8CRKhxkdgyZcAg2+DQAaZLbftKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTJmZDhiYTUtYzRjOS0z MTY1LWFhNGQtMzExMGRmYjJhNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtaHN0OYhCKrPGK7tr/6HPOdOvyNdq1dD+AR34bGmYwpF/E7sV+ OQ/pOu9TFKOF1hsMnhJoLhH0QjisfAnnl9Ae8SEQLxasLUJzPhE7Qboln2vlWqWh loyOa9ZGEQoCLZg/OSWTfy9g2YQd8r5LfJ/73dugkmpQGEzLteh9iAuRFZRN3ou7 5HjjIdZ+2hhe0ZZA1RNYc6UgWDDA0ZFlGyqV11TSHsEklCaHoY/qxPiwRsq36YT7 xxuHJAmyLCok+Nnp6nLy2i/4KPiHlCe9Ac1UjMKeXSsct8l8OWtbkiuQQP5kZc+h qeMrAgkjtQma/8oXwP+4JqEMy3zUYEhMHhA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:58 2025 by rpki-client