$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa File: 5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa (raw, json) Hash identifier: xwbfB7qqTVOsMVqLBTOJbtQ2N8s4VHWHk1Ln+WCDIn4= Subject key identifier: D7:AC:BA:81:08:5C:A2:88:B0:1C:94:F9:D1:EF:D3:21:08:51:08:BB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B41E728417C7F4F0B0705B480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 45499 IP address blocks: 2001:470:2f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:28:41:7c:7f:4f:0b:07:05:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=2ef50fff-e455-4c3b-b27b-4877881cdb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:40:6e:0b:1b:bd:ca:ef:73:03:69:42:0f: fa:21:0c:06:f6:70:10:e8:9a:a8:46:64:54:cf:cc: 2a:96:d2:54:5e:e1:12:a0:69:c9:af:12:6c:6e:ef: d9:5d:66:ff:fa:6b:6c:7e:9b:91:f4:f0:b4:6f:64: a1:48:1c:12:4c:18:3b:d1:1f:37:5a:c7:d8:23:5e: ed:b1:be:c3:7e:ce:13:f8:33:51:93:ff:e9:f7:8e: a0:36:92:55:21:65:33:7e:64:b1:7d:b1:57:b5:c5: 23:50:1f:ba:5d:2c:f1:09:43:cf:1d:98:bc:1c:2c: cd:79:2f:c2:e9:cc:a1:12:05:fd:d1:72:7f:54:14: c2:be:b6:ad:30:4d:56:d9:5c:b2:ba:20:d9:ee:f4: 3e:49:9c:8a:e1:d3:85:30:51:c1:83:89:6c:bf:f3: 7e:21:a8:12:f4:b5:c5:76:4c:36:7e:c1:cc:6f:0e: 32:53:fb:89:b2:f1:82:3d:ed:69:c4:32:27:8a:18: 1e:3c:41:f4:7a:49:e0:90:94:73:48:20:63:52:41: b2:86:9a:70:2b:fb:79:b5:03:ff:f5:5b:27:ef:d0: 30:f3:17:4b:b6:44:f3:8d:ff:d1:ad:d0:17:d6:2d: 78:21:04:c6:12:84:00:08:10:0e:ee:14:cb:af:ca: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AC:BA:81:08:5C:A2:88:B0:1C:94:F9:D1:EF:D3:21:08:51:08:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a2:ed:7f:31:70:27:3c:fd:e6:90:13:c6:45:f2:b5:7a:51: 57:d6:a6:60:70:6a:35:73:75:3e:b8:bc:66:bb:5b:c5:76:bf: 60:65:65:fc:68:97:1c:fe:10:bc:34:54:92:f2:6c:42:fe:69: e6:65:af:f7:94:73:3d:9c:1d:0f:68:1b:ce:ef:25:34:75:80: 26:b8:e5:a5:21:ec:cb:e7:18:13:f7:e6:45:be:4b:59:8a:0f: 2d:e3:c0:19:41:d5:fe:22:17:05:ab:e4:66:89:f5:da:a4:4f: b6:a0:d4:d8:07:39:94:58:fc:bc:f4:02:5f:3b:69:43:ec:34: 49:cb:c2:21:07:65:ab:d0:05:40:2e:22:55:aa:f0:f1:fa:39: 94:85:51:81:04:f8:b8:52:58:05:65:fa:9d:37:7b:42:05:62: 2a:12:1d:9a:44:93:21:e8:53:f2:cc:70:65:34:a4:e9:cd:3c: 3d:ba:a9:a0:ab:9b:fc:09:c2:f9:dc:a6:05:da:93:73:74:38: 88:76:d6:2a:36:1f:2f:25:11:cb:7b:93:a9:59:48:11:c2:aa: ea:a4:3c:0c:30:85:07:e7:6a:a3:50:f9:58:51:5b:5f:cc:b1: 05:83:83:59:56:87:19:8c:10:d2:bb:33:81:62:b0:39:07:40: 04:bd:2f:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5yhBfH9PCwcFtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MmVmNTBmZmYtZTQ1NS00YzNiLWIyN2ItNDg3Nzg4MWNkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfhAbgsbvcrvcwNpQg/6IQwG9nAQ6JqoRmRU z8wqltJUXuESoGnJrxJsbu/ZXWb/+mtsfpuR9PC0b2ShSBwSTBg70R83WsfYI17t sb7Dfs4T+DNRk//p946gNpJVIWUzfmSxfbFXtcUjUB+6XSzxCUPPHZi8HCzNeS/C 6cyhEgX90XJ/VBTCvratME1W2VyyuiDZ7vQ+SZyK4dOFMFHBg4lsv/N+IagS9LXF dkw2fsHMbw4yU/uJsvGCPe1pxDInihgePEH0ekngkJRzSCBjUkGyhppwK/t5tQP/ 9Vsn79Aw8xdLtkTzjf/RrdAX1i14IQTGEoQACBAO7hTLr8pZBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNesuoEIXKKIsByU+dHv0yEIUQi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWY4ZGJkNGItZTMxNy0z ZGE0LWI0ZjktYjc0YTUwYmZkNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqi7X8xcCc8/eaQE8ZF8rV6UVfWpmBwajVzdT64vGa7W8V2v2Bl Zfxolxz+ELw0VJLybEL+aeZlr/eUcz2cHQ9oG87vJTR1gCa45aUh7MvnGBP35kW+ S1mKDy3jwBlB1f4iFwWr5GaJ9dqkT7ag1NgHOZRY/Lz0Al87aUPsNEnLwiEHZavQ BUAuIlWq8PH6OZSFUYEE+LhSWAVl+p03e0IFYioSHZpEkyHoU/LMcGU0pOnNPD26 qaCrm/wJwvncpgXak3N0OIh21io2Hy8lEct7k6lZSBHCquqkPAwwhQfnaqNQ+VhR W1/MsQWDg1lWhxmMENK7M4FisDkHQAS9L7k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:01 2025 by rpki-client