$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa File: 027e8105-6846-3d39-8fe1-c08048af3419.roa (raw, json) Hash identifier: 7TKAvyA+ovTbKEmovKMz2Q4Pe4oLH5QSIDKMWi+u0VQ= Subject key identifier: 9F:80:47:51:E4:AB:1A:88:40:13:85:4C:E0:0A:E8:3D:B2:8A:B4:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDAFBEC4B50DDEFD5AEE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398273 IP address blocks: 2001:470:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:da:fb:ec:4b:50:dd:ef:d5:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=b5a724e0-8406-480e-b1bf-959d359afed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:f6:ab:24:67:09:3e:b4:54:07:ab:a3:a2: a2:23:7f:0c:b6:75:ab:7b:02:ce:ec:43:e4:3a:5c: da:d8:e1:57:66:79:59:7d:f4:73:c0:87:c3:b2:94: a1:c2:03:70:65:85:69:40:76:a5:f7:15:41:38:67: de:a2:49:33:ee:44:7c:05:c9:91:a7:91:6e:d3:c2: 21:df:5a:27:07:e2:da:18:c5:f0:cf:d2:ee:51:07: 71:9e:b2:0b:48:5a:c2:ea:62:37:9d:b1:f8:24:1c: 09:ec:3f:9d:cb:cf:b5:76:29:fb:28:14:b5:55:2d: 84:c5:21:08:92:ec:1d:2d:dc:92:b0:90:11:5a:27: d6:3f:90:32:4f:46:93:db:c3:0c:5d:86:74:f7:04: bb:cd:91:af:a7:a9:8a:b1:64:da:b3:b8:05:34:d5: c3:8a:93:2f:35:78:c1:b0:d1:ea:72:30:99:e0:85: 32:b0:bf:11:9e:95:92:ef:bd:38:ae:11:16:e9:0f: 3a:94:f5:b6:6a:b8:83:2e:6f:8b:db:fe:75:2b:0a: eb:f2:8b:3e:27:b3:c9:ff:c0:af:2f:03:c1:91:cd: 89:cb:6e:3d:71:78:3a:74:27:07:56:b4:77:2f:a0: 81:d0:22:43:77:b3:f9:17:3b:8f:85:d3:b4:93:dd: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:47:51:E4:AB:1A:88:40:13:85:4C:E0:0A:E8:3D:B2:8A:B4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027e8105-6846-3d39-8fe1-c08048af3419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:04:43:39:c3:63:1f:f4:12:a9:27:10:5e:9d:b3:d6:29:dc: 1b:2c:41:c8:5e:ec:77:c5:9c:b1:36:13:ee:94:89:3f:37:0d: 52:c2:d6:bd:6e:06:bd:bb:fc:f0:72:d4:cd:4f:17:70:c6:0a: 10:36:1f:80:9a:9b:e3:41:00:a3:05:39:6a:84:f9:2f:41:7c: 59:7a:54:1e:d0:8a:4f:7a:b5:8f:19:7c:e4:63:d3:c0:bc:89: 87:b7:c6:39:f6:36:6c:8e:2a:c3:65:07:7e:28:f8:57:09:c6: 76:3f:e8:88:fd:10:1d:37:ff:b6:5b:42:d3:3f:74:c8:12:4e: c1:f7:a0:b7:c7:8c:b1:4d:d8:c7:a5:42:8f:7e:9f:7c:50:74: e1:b6:42:dc:49:97:1e:b5:a4:be:54:5f:24:22:5e:dc:7c:c6: e7:b4:42:9d:00:06:32:b5:4e:6d:3f:d1:8b:29:4f:1d:e6:01: 62:53:f6:d4:1d:1c:38:ef:98:90:47:67:07:91:cb:b8:c1:1f: 60:8e:b2:bb:51:90:fc:4b:f1:6f:44:d3:33:7a:dd:5a:f8:f8: 05:89:84:85:69:67:0c:5f:9d:5a:43:e8:5c:b0:3d:80:a5:0a: 46:3d:34:44:6d:a4:6f:a0:d7:19:32:e2:53:91:d7:83:b7:4c: ae:50:f9:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fdr77EtQ3e/VruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YjVhNzI0ZTAtODQwNi00ODBlLWIxYmYtOTU5ZDM1OWFmZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzD2qyRnCT60VAero6KiI38MtnWrewLO7EPk Olza2OFXZnlZffRzwIfDspShwgNwZYVpQHal9xVBOGfeokkz7kR8BcmRp5Fu08Ih 31onB+LaGMXwz9LuUQdxnrILSFrC6mI3nbH4JBwJ7D+dy8+1din7KBS1VS2ExSEI kuwdLdySsJARWifWP5AyT0aT28MMXYZ09wS7zZGvp6mKsWTas7gFNNXDipMvNXjB sNHqcjCZ4IUysL8RnpWS7704rhEW6Q86lPW2ariDLm+L2/51Kwrr8os+J7PJ/8Cv LwPBkc2Jy249cXg6dCcHVrR3L6CB0CJDd7P5FzuPhdO0k936FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+AR1HkqxqIQBOFTOAK6D2yirRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI3ZTgxMDUtNjg0Ni0z ZDM5LThmZTEtYzA4MDQ4YWYzNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQEQznDYx/0EqknEF6ds9Yp3BssQche7HfFnLE2E+6UiT83DVLC 1r1uBr27/PBy1M1PF3DGChA2H4Cam+NBAKMFOWqE+S9BfFl6VB7Qik96tY8ZfORj 08C8iYe3xjn2NmyOKsNlB34o+FcJxnY/6Ij9EB03/7ZbQtM/dMgSTsH3oLfHjLFN 2MelQo9+n3xQdOG2QtxJlx61pL5UXyQiXtx8xue0Qp0ABjK1Tm0/0YspTx3mAWJT 9tQdHDjvmJBHZweRy7jBH2COsrtRkPxL8W9E0zN63Vr4+AWJhIVpZwxfnVpD6Fyw PYClCkY9NERtpG+g1xky4lOR14O3TK5Q+Uk= -----END CERTIFICATE-----Generated at Mon Nov 2 06:57:42 2026 by rpki-client