$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa File: e9504938-e1da-3e53-81df-7dcbfd45b148.roa (raw, json) Hash identifier: AN6ikfrzTB+bPnYwSmESQyLuvV4RNHdetLX6toDcZ60= Subject key identifier: 3F:BC:4A:2B:15:32:DA:B6:4D:FF:A1:EE:39:0D:DD:93:90:AC:24:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7CDA6339C6733B9FD80E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54686 IP address blocks: 2001:470:251::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:cd:a6:33:9c:67:33:b9:fd:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=570768a0-9422-4b06-9d5b-4fef3f584ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:c6:a6:fb:97:40:86:e6:71:52:01:ac:ac: 1c:53:57:2a:da:a9:4a:3e:b3:8f:0c:55:26:0b:3b: d2:a8:d8:6e:dc:7d:ea:fa:00:e9:91:b7:bd:59:c7: fc:9b:c3:61:f7:c6:5c:29:c6:89:6c:ed:0e:48:a7: fb:ef:29:b9:b7:1a:24:1c:1a:96:db:95:dd:c1:97: f6:ee:4e:d6:67:79:92:ce:9c:26:c6:20:35:56:e2: 13:3c:c1:c4:ef:41:b7:03:41:ce:82:0a:a3:96:40: 0d:9c:00:41:64:86:b7:b3:5e:47:5e:4a:79:fb:14: f2:c7:38:25:df:50:77:22:e8:9f:32:80:94:a5:f8: 62:b8:b0:90:da:bf:47:6d:70:95:3f:58:58:47:00: b2:9d:0c:2a:3b:a1:19:bb:7f:f0:22:bb:6f:2e:02: 36:34:c5:c5:a0:8f:93:d7:91:1c:42:7f:ad:c2:55: 6a:00:25:2c:3a:c2:46:27:40:6b:c7:aa:9b:72:45: 47:92:a0:e4:b8:41:c9:52:69:50:68:74:03:8e:5f: 0f:cf:b7:33:44:9d:6a:5b:e2:96:b9:d5:c7:e0:b7: bd:2d:b6:b0:f2:0e:e9:a6:79:e5:14:d7:ec:ba:43: e4:99:9b:36:07:50:c7:8b:38:77:ca:c5:da:dd:5f: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BC:4A:2B:15:32:DA:B6:4D:FF:A1:EE:39:0D:DD:93:90:AC:24:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:251::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:02:c3:b9:88:47:aa:98:25:b0:65:43:6b:bb:fc:a0:b1:b4: 97:62:87:44:e9:7c:ab:f9:40:b5:47:90:09:9d:23:3c:2c:cc: 00:79:77:22:e3:e8:51:1a:32:23:87:a3:7f:51:d8:f0:06:ea: 76:af:75:73:f6:a1:49:71:e8:a1:1a:6a:64:cf:e8:42:6b:16: cd:ec:6e:a1:9b:09:49:53:78:1d:31:dc:f3:57:18:7d:ec:08: 79:70:85:c2:ed:db:11:c6:a1:a9:08:20:9f:c2:d5:77:8e:56: ec:be:1e:6b:fb:8a:7b:17:2d:90:8a:42:88:87:00:48:4c:36: 2a:bd:71:66:89:42:d0:5e:d8:84:4f:5e:ae:10:4b:4f:ea:d4: 6b:13:52:70:23:61:eb:d5:e1:41:54:7a:ab:9a:55:86:88:a3: a9:d1:5e:e8:a7:5e:28:b7:8b:a8:38:a5:01:63:1c:af:4d:46: 83:ae:3a:97:16:f7:ac:f4:5a:9d:a2:34:10:dd:c6:e0:18:35: 93:28:21:3a:4d:11:52:61:5a:bf:46:cd:32:0c:e1:d1:af:e8: 14:88:6d:98:5c:f1:f7:1d:74:7a:fa:ed:62:df:eb:65:53:64: c7:30:f8:c7:b9:b4:db:ce:9a:cc:0e:c0:b4:bb:b9:64:44:f2: 15:9c:0c:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ182mM5xnM7n9gOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTcwNzY4YTAtOTQyMi00YjA2LTlkNWItNGZlZjNmNTg0Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4LGpvuXQIbmcVIBrKwcU1cq2qlKPrOPDFUm CzvSqNhu3H3q+gDpkbe9Wcf8m8Nh98ZcKcaJbO0OSKf77ym5txokHBqW25XdwZf2 7k7WZ3mSzpwmxiA1VuITPMHE70G3A0HOggqjlkANnABBZIa3s15HXkp5+xTyxzgl 31B3IuifMoCUpfhiuLCQ2r9HbXCVP1hYRwCynQwqO6EZu3/wIrtvLgI2NMXFoI+T 15EcQn+twlVqACUsOsJGJ0Brx6qbckVHkqDkuEHJUmlQaHQDjl8Pz7czRJ1qW+KW udXH4Le9Lbaw8g7ppnnlFNfsukPkmZs2B1DHizh3ysXa3V8IdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+8SisVMtq2Tf+h7jkN3ZOQrCSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTk1MDQ5MzgtZTFkYS0z ZTUzLTgxZGYtN2RjYmZkNDViMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQCw7mIR6qYJbBlQ2u7/KCxtJdih0TpfKv5QLVHkAmdIzwszAB5 dyLj6FEaMiOHo39R2PAG6navdXP2oUlx6KEaamTP6EJrFs3sbqGbCUlTeB0x3PNX GH3sCHlwhcLt2xHGoakIIJ/C1XeOVuy+Hmv7insXLZCKQoiHAEhMNiq9cWaJQtBe 2IRPXq4QS0/q1GsTUnAjYevV4UFUequaVYaIo6nRXuinXii3i6g4pQFjHK9NRoOu OpcW96z0Wp2iNBDdxuAYNZMoITpNEVJhWr9GzTIM4dGv6BSIbZhc8fcddHr67WLf 62VTZMcw+Me5tNvOmswOwLS7uWRE8hWcDOA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:01 2025 by rpki-client