$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa File: 0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa (raw, json) Hash identifier: NwVV8v5+EkH+IeyiCfkmOujSPTcLeaVNL2Hb7Mjso6Q= Subject key identifier: 24:D9:B7:25:45:84:5B:4E:0B:10:A2:AA:FF:85:03:DE:1F:0B:40:85 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F14678F26B3EAF7C8CBA00F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 49984 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8f:26:b3:ea:f7:c8:cb:a0:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=245a45c1-7300-4fad-9cf1-f93f75ced7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:21:42:79:81:00:78:00:4f:5e:b9:71:88: de:97:00:b6:42:b1:96:40:c5:d4:fc:7f:15:b3:8c: c5:b6:f4:2e:0e:2f:20:34:33:3d:fe:ff:59:fd:ff: b7:5b:d9:5a:cc:59:7a:7b:ea:c9:ec:37:4c:b9:50: 8d:68:46:43:b4:2b:bf:64:50:82:5d:6d:28:10:6f: bb:f6:b8:0d:6e:95:20:e0:57:38:8d:ac:0d:e5:e8: bb:47:25:f2:10:2a:63:0a:25:a0:7c:39:a1:82:96: bf:e4:ee:55:3d:83:76:5a:fc:48:f1:28:bf:58:54: 42:07:f1:c3:55:33:72:8c:ba:d5:0e:ba:68:72:db: 17:e8:07:c0:be:ac:c1:15:ef:e2:46:7d:55:de:4a: ec:3d:80:85:46:dc:72:51:10:75:83:27:8a:07:19: f6:1c:7a:1c:2e:f0:f1:cf:b4:74:59:d2:2b:d9:d4: 2c:17:dd:04:5f:d2:c4:5c:97:d6:7f:a8:9b:04:9d: 99:06:a5:e5:67:09:0d:71:ad:a0:3a:d7:35:98:3e: 97:bf:d6:e9:15:c7:34:69:d8:7f:32:54:ca:53:f9: 2f:60:c6:5d:48:f6:61:bb:d2:e2:7a:91:7a:7c:b0: d6:a6:d7:ff:4b:7b:17:af:8f:3b:46:3b:fe:51:c9: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:B7:25:45:84:5B:4E:0B:10:A2:AA:FF:85:03:DE:1F:0B:40:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:7a:22:23:5c:60:a2:2f:2e:06:4f:4d:11:10:03:67:96: 9c:3c:0b:5e:fa:d0:cf:c2:60:56:26:d5:01:4f:40:b9:9d:20: 46:78:f5:b1:09:35:28:a9:b4:84:4e:e6:34:f9:fd:71:ab:69: 3a:2d:bb:5d:9a:1e:c0:b5:65:fe:d6:f5:da:cb:14:54:3c:67: 08:3c:cb:6e:a1:5c:2d:51:e7:bf:ac:0f:be:55:e8:74:fe:7a: ba:6e:b3:38:04:9a:e2:40:81:7c:d6:ce:76:f9:33:a6:86:1b: df:0e:de:22:fa:97:33:88:58:5f:4f:43:8d:f6:29:03:45:7d: 46:b1:b3:1b:11:e9:b4:95:6c:94:7a:ef:d9:0a:27:f7:d5:83: 47:05:3a:36:c0:03:5f:ce:b5:ec:32:48:1e:bc:97:a1:79:a1: 5d:19:5b:39:c8:3b:72:2c:09:b5:4c:30:83:c6:0a:52:c4:e0: 55:96:93:b2:d6:2e:20:a9:06:16:7f:b5:b1:e4:3b:28:4d:e5: c4:74:3e:1d:32:b8:d8:b9:f1:22:18:d6:0a:51:26:42:0e:2e: ce:24:ad:fe:20:9f:34:5b:76:d8:43:98:9a:2a:69:b9:d8:a9: 09:da:b1:40:aa:80:6d:82:61:bb:7b:40:6a:44:fc:6a:66:60: ab:f2:25:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ48ms+r3yMugDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjQ1YTQ1YzEtNzMwMC00ZmFkLTljZjEtZjkzZjc1Y2VkN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw8hQnmBAHgAT165cYjelwC2QrGWQMXU/H8V s4zFtvQuDi8gNDM9/v9Z/f+3W9lazFl6e+rJ7DdMuVCNaEZDtCu/ZFCCXW0oEG+7 9rgNbpUg4Fc4jawN5ei7RyXyECpjCiWgfDmhgpa/5O5VPYN2WvxI8Si/WFRCB/HD VTNyjLrVDrpoctsX6AfAvqzBFe/iRn1V3krsPYCFRtxyURB1gyeKBxn2HHocLvDx z7R0WdIr2dQsF90EX9LEXJfWf6ibBJ2ZBqXlZwkNca2gOtc1mD6Xv9bpFcc0adh/ MlTKU/kvYMZdSPZhu9LiepF6fLDWptf/S3sXr487Rjv+Ucl84wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTZtyVFhFtOCxCiqv+FA94fC0CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGFmMzNlYmMtNmRhMS0z ZDBmLWI3MzItOTRmYTU4ZjJlOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8QeiIjXGCiLy4GT00REANnlpw8C1760M/CYFYm1QFPQLmdIEZ4 9bEJNSiptIRO5jT5/XGraTotu12aHsC1Zf7W9drLFFQ8Zwg8y26hXC1R57+sD75V 6HT+erpuszgEmuJAgXzWznb5M6aGG98O3iL6lzOIWF9PQ432KQNFfUaxsxsR6bSV bJR679kKJ/fVg0cFOjbAA1/OtewySB68l6F5oV0ZWznIO3IsCbVMMIPGClLE4FWW k7LWLiCpBhZ/tbHkOyhN5cR0Ph0yuNi58SIY1gpRJkIOLs4krf4gnzRbdthDmJoq abnYqQnasUCqgG2CYbt7QGpE/GpmYKvyJZU= -----END CERTIFICATE-----Generated at Sat Sep 12 09:03:02 2026 by rpki-client