$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa File: 09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa (raw, json) Hash identifier: bLtJfgVR+imheqf+g3Z1Ovj8v419gu9CZ6E0jh+39tQ= Subject key identifier: 53:E1:CD:53:57:0A:C5:AF:2B:4E:2F:21:AD:37:6F:B2:C4:82:44:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDF66325DEF2FE5C31370 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 17117 IP address blocks: 2001:470:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:df:66:32:5d:ef:2f:e5:c3:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=27861700-9fae-4735-aa0f-85a8c40014ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:31:77:22:90:64:d5:22:6b:9a:bf:c9:53: 3f:fc:d1:7e:0e:27:3d:ba:6d:9a:d7:44:5e:c4:c4: 0d:1f:fa:8f:85:38:3d:fc:c3:7c:c1:3d:99:72:37: f2:db:f5:7d:c7:50:bc:38:f8:98:1f:01:02:66:e3: 09:7f:91:fa:cc:3a:7e:a9:82:a2:91:b1:44:f4:ee: 7b:3e:13:74:91:40:32:41:09:47:7d:ea:36:df:6e: 00:3d:57:6b:20:07:b2:ad:f3:dd:2d:07:cb:b7:14: 53:3c:21:c4:ed:d4:78:18:b9:c7:78:77:55:85:c3: cc:81:f9:d5:2c:44:1f:7c:81:f5:17:67:b1:48:58: 05:4b:7e:9e:a2:38:2d:85:dc:4c:b4:80:fc:07:cf: bc:95:fe:7b:03:ab:15:de:f1:24:ef:40:4a:99:97: ae:1c:f0:6a:df:2c:13:d4:9a:a0:13:61:54:56:19: 63:02:e1:22:3c:bd:41:b8:55:c1:30:7d:9c:ef:c2: e9:40:46:8e:4c:e6:bb:0e:17:b2:44:f8:e6:50:94: e7:4b:a3:a3:fc:ec:4c:ca:d1:b1:53:a2:41:20:c8: 33:c6:92:0a:ea:ec:9c:55:ec:b2:84:2e:62:12:34: 9a:84:db:e2:35:ad:17:f4:98:99:6e:55:c2:f1:73: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E1:CD:53:57:0A:C5:AF:2B:4E:2F:21:AD:37:6F:B2:C4:82:44:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09f7d68c-1d48-3f10-92b1-b0a17ecc8991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:152::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:89:a1:42:2d:db:7b:38:8a:c2:20:b9:be:dc:e8:01:db:62: 4a:3d:61:92:be:bf:80:e8:9a:4a:1f:8c:8f:90:e0:fa:0b:e2: af:60:6d:03:df:52:4c:d0:e0:43:4c:41:c3:12:47:a7:2c:93: 1a:cc:90:a2:60:e2:21:ca:06:be:4b:60:5f:3f:ee:d4:1a:75: 61:03:f7:af:76:ac:17:af:5d:ba:d2:5a:a0:2e:82:d0:e3:e6: 34:cd:4d:08:40:94:23:cb:ca:6b:cd:b6:52:e9:2f:f4:51:64: 1e:35:ba:fb:7f:14:05:52:5c:43:12:d4:95:01:74:be:2d:91: 97:2d:f9:03:40:1a:bb:3e:c8:7a:22:f0:b9:1f:59:fb:63:3e: 6a:6e:ef:bc:4c:b8:78:3f:65:02:85:72:f3:7f:07:b3:28:31: 3b:80:f1:4c:87:1f:82:cb:cf:67:2e:14:58:db:f0:a8:32:b0: 60:44:59:9f:40:c2:58:e0:8d:a5:6d:c9:20:a7:0a:88:df:0f: 7e:a9:1f:45:d1:84:84:ec:76:78:09:02:b0:fa:d6:aa:6f:55: 5e:79:16:57:0d:74:08:4d:14:db:b9:4f:28:2d:b5:1b:cf:e8: 90:27:d3:eb:31:de:2b:1e:ec:5f:f7:9d:e6:b7:e2:3c:4c:dc: 3f:8b:d6:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fd9mMl3vL+XDE3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjc4NjE3MDAtOWZhZS00NzM1LWFhMGYtODVhOGM0MDAxNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL0xdyKQZNUia5q/yVM//NF+Dic9um2a10Re xMQNH/qPhTg9/MN8wT2Zcjfy2/V9x1C8OPiYHwECZuMJf5H6zDp+qYKikbFE9O57 PhN0kUAyQQlHfeo2324APVdrIAeyrfPdLQfLtxRTPCHE7dR4GLnHeHdVhcPMgfnV LEQffIH1F2exSFgFS36eojgthdxMtID8B8+8lf57A6sV3vEk70BKmZeuHPBq3ywT 1JqgE2FUVhljAuEiPL1BuFXBMH2c78LpQEaOTOa7DheyRPjmUJTnS6Oj/OxMytGx U6JBIMgzxpIK6uycVeyyhC5iEjSahNviNa0X9JiZblXC8XPrlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPhzVNXCsWvK04vIa03b7LEgkTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDlmN2Q2OGMtMWQ0OC0z ZjEwLTkyYjEtYjBhMTdlY2M4OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6JoUIt23s4isIgub7c6AHbYko9YZK+v4DomkofjI+Q4PoL4q9g bQPfUkzQ4ENMQcMSR6cskxrMkKJg4iHKBr5LYF8/7tQadWED9692rBevXbrSWqAu gtDj5jTNTQhAlCPLymvNtlLpL/RRZB41uvt/FAVSXEMS1JUBdL4tkZct+QNAGrs+ yHoi8LkfWftjPmpu77xMuHg/ZQKFcvN/B7MoMTuA8UyHH4LLz2cuFFjb8KgysGBE WZ9AwljgjaVtySCnCojfD36pH0XRhITsdngJArD61qpvVV55FlcNdAhNFNu5Tygt tRvP6JAn0+sx3ise7F/3nea34jxM3D+L1vw= -----END CERTIFICATE-----Generated at Sat Oct 24 19:06:49 2026 by rpki-client