$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa File: 08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa (raw, json) Hash identifier: oT4JvpzphhH1TUsmoa+wuvURE+RXnCzEVOeO7SRCPTk= Subject key identifier: B4:EC:CC:3C:8D:23:3E:58:A5:FB:05:13:78:1C:60:F3:0E:BD:D0:ED Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F15CD0643FF092AE93BAFD310 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 600 IP address blocks: 2001:470:2a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:06:43:ff:09:2a:e9:3b:af:d3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=378f96d9-6294-45a3-8731-5ffed5061efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:77:11:d5:da:3e:22:cd:d2:b2:dd:bc:fd: b6:ad:1c:1c:96:55:1a:8f:51:05:48:be:dd:39:25: 47:25:54:27:83:9e:2b:b4:57:5a:d7:04:be:f4:d7: b9:f2:29:fa:a9:6f:d5:de:d1:76:51:98:42:b0:c2: 1a:8e:ef:26:53:8e:f7:4e:a6:76:cc:51:92:ef:61: df:ed:7b:2b:be:ac:d5:e3:ef:b2:40:d3:88:d7:50: 58:c4:c9:cd:8d:c1:46:76:34:41:bd:e4:02:00:36: 2d:7f:4b:ad:e3:84:eb:f1:04:bc:d9:35:91:19:f8: 73:14:ce:ef:52:6e:72:af:9b:7f:ed:ad:e9:2f:1e: 5f:15:8f:e6:74:fa:c9:80:b2:04:e0:ee:68:5b:67: 4f:59:f4:bd:28:56:81:71:13:fd:ee:fb:48:89:b7: 16:16:49:1c:48:70:d4:83:80:eb:e4:a0:2f:64:4f: 78:be:2b:aa:86:a8:09:f6:29:51:e1:96:0b:80:a2: d9:cc:35:08:6e:57:b5:83:b5:27:55:08:1f:f2:d5: 38:09:8e:d6:f7:56:b2:4c:d8:0a:f7:62:d4:42:37: 98:98:5e:12:98:78:7b:1a:00:ba:2e:6e:16:c6:31: 02:60:3c:eb:73:c1:6c:1b:70:2f:1c:21:63:8f:2c: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EC:CC:3C:8D:23:3E:58:A5:FB:05:13:78:1C:60:F3:0E:BD:D0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/08e2c97e-1c7a-3b86-bfb6-c9905282f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d3:4c:ef:09:73:50:37:fc:44:e2:68:42:78:a2:d2:5c:dc: 23:5c:5f:ed:10:a9:d4:47:54:d7:cc:fe:1a:a1:53:94:9c:80: c1:f5:fe:d5:2d:eb:8f:46:f5:37:fb:c4:38:87:d3:8d:be:1a: 56:99:09:12:14:77:5f:09:a5:65:16:75:ba:d0:fe:6d:b7:69: 03:94:eb:dc:32:49:2c:b6:68:85:a1:df:96:21:a0:a0:f5:12: 0b:8b:f4:eb:64:95:b7:bc:c7:84:ac:9d:fa:8a:59:9c:49:8b: 40:4e:ae:20:24:7b:ba:89:6d:35:0a:6d:32:85:bd:29:e9:d4: f1:04:c0:1a:53:cc:d3:b4:cb:b5:7d:03:aa:1c:1f:77:a1:5a: eb:22:5f:fb:76:60:20:3a:d6:6a:54:53:df:08:c5:e4:b2:37: 62:26:f4:53:39:ec:1f:37:f8:d8:d0:08:2c:2c:7c:a2:30:92: 78:91:76:f4:04:a2:b2:61:8a:f8:5b:bd:a1:f3:66:e6:bb:8f: 0d:2d:3f:e2:bc:19:7a:91:a1:57:d3:00:e8:b7:41:df:94:54: f3:92:6d:c1:33:a2:31:09:88:c4:1c:ae:3f:dc:14:c1:21:5a: bd:36:08:8f:ed:25:13:17:2e:a8:01:9a:f0:02:ed:11:e5:15: b2:bf:96:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8VzQZD/wkq6Tuv0xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk Mzc4Zjk2ZDktNjI5NC00NWEzLTg3MzEtNWZmZWQ1MDYxZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPl3EdXaPiLN0rLdvP22rRwcllUaj1EFSL7d OSVHJVQng54rtFda1wS+9Ne58in6qW/V3tF2UZhCsMIaju8mU473TqZ2zFGS72Hf 7XsrvqzV4++yQNOI11BYxMnNjcFGdjRBveQCADYtf0ut44Tr8QS82TWRGfhzFM7v Um5yr5t/7a3pLx5fFY/mdPrJgLIE4O5oW2dPWfS9KFaBcRP97vtIibcWFkkcSHDU g4Dr5KAvZE94viuqhqgJ9ilR4ZYLgKLZzDUIble1g7UnVQgf8tU4CY7W91ayTNgK 92LUQjeYmF4SmHh7GgC6Lm4WxjECYDzrc8FsG3AvHCFjjywyhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTszDyNIz5YpfsFE3gcYPMOvdDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDhlMmM5N2UtMWM3YS0z Yjg2LWJmYjYtYzk5MDUyODJmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3TTO8Jc1A3/ETiaEJ4otJc3CNcX+0QqdRHVNfM/hqhU5ScgMH1 /tUt649G9Tf7xDiH042+GlaZCRIUd18JpWUWdbrQ/m23aQOU69wySSy2aIWh35Yh oKD1EguL9Otklbe8x4SsnfqKWZxJi0BOriAke7qJbTUKbTKFvSnp1PEEwBpTzNO0 y7V9A6ocH3ehWusiX/t2YCA61mpUU98IxeSyN2Im9FM57B83+NjQCCwsfKIwkniR dvQEorJhivhbvaHzZua7jw0tP+K8GXqRoVfTAOi3Qd+UVPOSbcEzojEJiMQcrj/c FMEhWr02CI/tJRMXLqgBmvAC7RHlFbK/lr4= -----END CERTIFICATE-----Generated at Sat Sep 12 08:26:55 2026 by rpki-client