$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa File: 0e22289e-2285-3c89-acb7-d2901b13d450.roa (raw, json) Hash identifier: 0pjBqQiaRcrhb27hnjph8izniQG+pKmj/HcT1XMJixE= Subject key identifier: 1A:AF:7E:B5:9D:6E:E3:17:52:0A:4F:EA:94:4E:3D:CC:70:52:D7:38 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F82AD9ABA82F79EFE12033700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 399761 IP address blocks: 2001:470:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:9a:ba:82:f7:9e:fe:12:03:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=6c0235b0-5848-4dc5-8ba0-f926099412f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:79:8e:18:1f:65:3d:b9:5f:13:7d:06:04: 69:43:e7:8c:21:7f:ea:98:1d:f8:22:be:24:f6:72: af:37:db:6c:de:40:ad:c3:c8:da:33:ca:7a:04:75: 9b:c9:f6:24:0c:80:8d:03:ce:77:dc:7d:ef:61:6d: 9c:77:d8:24:fd:6b:78:ab:1c:97:06:ea:c0:82:55: 7d:dc:e1:18:55:e2:07:89:19:5a:b4:1d:9d:02:43: b0:d0:c9:43:88:89:4c:eb:af:c0:8d:ca:76:00:d2: dd:ca:49:f9:94:cf:1d:e6:f3:40:5b:3e:63:1f:fa: 61:64:f6:32:28:77:59:2f:dd:4e:14:22:9b:a9:2e: 4d:c1:67:2e:97:62:79:29:1f:88:63:03:74:a3:0e: 65:32:b3:d8:43:49:6e:9a:6e:c5:f6:a0:5a:e3:9a: 88:d4:44:9c:fa:eb:49:f8:5a:ae:7c:68:23:0b:57: 85:58:0b:dc:8a:0f:ec:31:82:b2:46:56:29:7e:c5: 6a:aa:6e:2e:aa:5a:08:c3:17:ee:40:52:1c:be:03: 1f:ac:67:eb:a1:7a:8a:2b:70:51:e3:23:9c:c3:18: cd:47:8e:69:15:8d:69:24:a7:af:cd:e2:a8:0a:b1: 89:ca:91:89:2e:5e:13:40:25:2b:9a:a3:29:6d:93: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AF:7E:B5:9D:6E:E3:17:52:0A:4F:EA:94:4E:3D:CC:70:52:D7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:35:79:e2:66:56:6f:41:ae:88:ec:83:64:75:6e:6e:38:89: 1c:73:96:2b:8e:ed:21:cc:b7:e2:28:cd:9d:9a:e9:32:31:56: 36:24:d3:21:81:62:0d:4c:5e:62:3a:24:55:a4:af:50:93:91: 5b:ba:46:41:aa:cb:5a:c8:e2:40:06:8e:8e:89:3b:3b:bb:44: ee:ba:c3:ab:b1:8e:6e:f2:bf:9d:1c:1c:67:75:17:a4:ba:99: f7:63:48:b7:a3:93:2b:16:36:36:f3:a0:43:41:e7:f9:2d:51: d3:df:38:62:e5:e1:9d:29:01:63:5b:e6:c1:31:6d:80:f3:73: c1:4a:84:d9:4e:00:eb:ec:23:f9:87:1c:0b:34:92:43:71:39: 2b:93:20:9a:8d:10:f4:29:26:b3:60:61:63:fe:c0:d4:c7:d3: 90:a2:4a:5c:ca:56:3d:2b:cc:f5:40:68:1a:5f:dc:d8:dc:3f: c6:30:8e:71:23:ce:19:01:4a:bd:f8:ea:3a:34:ca:9c:1d:ed: 24:8c:e3:53:b8:38:21:d8:ae:e2:73:ad:79:b1:b1:64:41:7f: ab:5d:5f:23:e0:6f:0e:ee:18:71:20:b2:7d:68:bb:60:a4:ef: ab:c3:63:9e:39:21:0e:8b:c2:5a:41:8d:d4:25:22:68:53:69: fc:28:e6:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CrZq6gvee/hIDNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NmMwMjM1YjAtNTg0OC00ZGM1LThiYTAtZjkyNjA5OTQxMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC55jhgfZT25XxN9BgRpQ+eMIX/qmB34Ir4k 9nKvN9ts3kCtw8jaM8p6BHWbyfYkDICNA8533H3vYW2cd9gk/Wt4qxyXBurAglV9 3OEYVeIHiRlatB2dAkOw0MlDiIlM66/Ajcp2ANLdykn5lM8d5vNAWz5jH/phZPYy KHdZL91OFCKbqS5NwWcul2J5KR+IYwN0ow5lMrPYQ0lumm7F9qBa45qI1ESc+utJ +FqufGgjC1eFWAvcig/sMYKyRlYpfsVqqm4uqloIwxfuQFIcvgMfrGfroXqKK3BR 4yOcwxjNR45pFY1pJKevzeKoCrGJypGJLl4TQCUrmqMpbZMt3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqvfrWdbuMXUgpP6pROPcxwUtc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGUyMjI4OWUtMjI4NS0z Yzg5LWFjYjctZDI5MDFiMTNkNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAo1eeJmVm9Brojsg2R1bm44iRxzliuO7SHMt+IozZ2a6TIxVjYk 0yGBYg1MXmI6JFWkr1CTkVu6RkGqy1rI4kAGjo6JOzu7RO66w6uxjm7yv50cHGd1 F6S6mfdjSLejkysWNjbzoENB5/ktUdPfOGLl4Z0pAWNb5sExbYDzc8FKhNlOAOvs I/mHHAs0kkNxOSuTIJqNEPQpJrNgYWP+wNTH05CiSlzKVj0rzPVAaBpf3NjcP8Yw jnEjzhkBSr346jo0ypwd7SSM41O4OCHYruJzrXmxsWRBf6tdXyPgbw7uGHEgsn1o u2Ck76vDY545IQ6LwlpBjdQlImhTafwo5tE= -----END CERTIFICATE-----Generated at Sun Nov 1 18:39:32 2026 by rpki-client