$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e224d5-9d0d-3958-a0a5-500d9e2a6b3d.roa File: 10e224d5-9d0d-3958-a0a5-500d9e2a6b3d.roa (raw, json) Hash identifier: IY+Bwatt4hNhaFtzhiYYqU38ODCbH86Zi10FXq9lml8= Subject key identifier: 0C:D8:2E:CA:E9:11:EA:34:0B:EB:FD:8A:E2:DB:43:63:FE:30:15:16 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F8DE753469995093FBFFE6520 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e224d5-9d0d-3958-a0a5-500d9e2a6b3d.roa Signing time: Mon 19 Oct 2026 13:30:31 +0000 ROA not before: Mon 19 Oct 2026 13:30:31 +0000 ROA not after: Sun 17 Jan 2027 14:30:31 +0000 asID: 48438 IP address blocks: 2001:470:174::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:e7:53:46:99:95:09:3f:bf:fe:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 19 13:30:31 2026 GMT Not After : Jan 17 14:30:31 2027 GMT Subject: CN=3fa96bac-164c-46a3-afb0-e61aee6513e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:c0:b0:19:ba:c9:fa:83:c1:d0:b4:ce:ce: 37:9e:47:ec:25:fe:07:66:53:57:b6:4b:cd:b9:31: f1:15:48:fb:9e:23:78:25:5c:85:8c:f5:fe:72:16: 28:1f:20:37:87:dc:f6:03:1d:cd:1e:7e:9e:8d:e6: b6:30:5c:0e:ef:e2:2d:fa:5d:e5:9f:ed:e9:39:ba: 94:b6:38:2e:e5:2e:50:45:f8:51:f2:91:50:ce:3c: aa:a8:06:3a:a9:b3:32:a3:f8:9e:5c:3c:3b:96:fe: 27:0f:d3:51:df:8b:dd:e9:fa:a4:23:cf:86:3a:8c: f3:50:20:9b:2e:a1:3e:5a:b7:8a:74:27:2e:9e:46: dd:ba:d1:06:fa:14:d4:f1:6b:da:ca:4c:17:91:c2: 9f:06:e1:d0:e2:0c:40:a1:6b:0e:2f:04:37:9f:ef: fc:7e:b8:ec:af:9c:21:06:9f:52:fa:65:22:77:29: 51:30:28:e2:e1:ad:6c:28:01:7a:6a:82:f6:93:7a: 8c:fb:d3:11:07:06:fc:fc:41:06:b4:8e:34:da:d6: 3e:ad:5f:28:de:d5:a5:8e:6c:cc:30:9d:e1:c6:87: 50:08:80:19:d9:09:a5:0c:60:b2:3c:41:cf:8c:b1: f8:1b:b2:13:df:d5:4f:8c:04:d0:07:26:3b:4e:b6: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:2E:CA:E9:11:EA:34:0B:EB:FD:8A:E2:DB:43:63:FE:30:15:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10e224d5-9d0d-3958-a0a5-500d9e2a6b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:174::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5f:70:6e:16:28:26:22:75:29:3a:f1:40:9b:58:7c:76:e9: ff:20:9f:1d:da:99:fc:49:48:ab:65:03:81:cc:bf:21:69:fa: 7b:37:31:65:c6:0f:38:47:d3:fa:96:15:c9:b8:fc:3b:e6:8c: bd:af:d3:20:2f:4a:9c:d5:9a:c0:f7:f5:a0:1a:63:54:5a:66: ed:58:a8:98:60:ff:7c:1e:b3:4a:ed:97:b4:40:35:a9:4e:51: 6f:4f:1d:83:61:c4:d0:8b:2c:17:79:2e:dc:f8:fd:6d:0b:65: ca:42:bf:3b:17:2c:b8:0c:6c:ed:20:e7:6c:e5:44:a0:a3:bb: 6c:7e:0d:96:6d:07:6e:fd:de:71:44:e0:62:93:bd:65:e7:b0: 83:66:45:90:32:ac:17:03:60:49:38:2b:bd:3c:26:7b:99:c2: ff:68:4d:5d:3a:05:55:87:43:70:03:61:56:c3:cf:74:36:b3: b0:fd:74:6a:35:30:1f:09:c3:6c:85:c6:45:05:43:64:d6:52: e5:2f:66:dc:d7:8b:ae:5a:e8:d0:ba:ff:d7:4f:1f:1a:ef:31: 54:14:5a:38:e8:dd:08:36:72:e0:47:e8:67:f8:9a:91:f8:c2: 36:9b:b4:84:1c:33:e0:54:3c:2f:f9:76:d2:55:26:51:51:5e: 71:8f:20:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+N51NGmZUJP7/+ZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxOTEzMzAzMVoXDTI3MDExNzE0MzAzMVowLzEtMCsGA1UEAxMk M2ZhOTZiYWMtMTY0Yy00NmEzLWFmYjAtZTYxYWVlNjUxM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY3AsBm6yfqDwdC0zs43nkfsJf4HZlNXtkvN uTHxFUj7niN4JVyFjPX+chYoHyA3h9z2Ax3NHn6ejea2MFwO7+It+l3ln+3pObqU tjgu5S5QRfhR8pFQzjyqqAY6qbMyo/ieXDw7lv4nD9NR34vd6fqkI8+GOozzUCCb LqE+WreKdCcunkbdutEG+hTU8WvaykwXkcKfBuHQ4gxAoWsOLwQ3n+/8frjsr5wh Bp9S+mUidylRMCji4a1sKAF6aoL2k3qM+9MRBwb8/EEGtI402tY+rV8o3tWljmzM MJ3hxodQCIAZ2QmlDGCyPEHPjLH4G7IT39VPjATQByY7TrZT3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzYLsrpEeo0C+v9iuLbQ2P+MBUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTBlMjI0ZDUtOWQwZC0z OTU4LWEwYTUtNTAwZDllMmE2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdfcG4WKCYidSk68UCbWHx26f8gnx3amfxJSKtlA4HMvyFp+ns3 MWXGDzhH0/qWFcm4/DvmjL2v0yAvSpzVmsD39aAaY1RaZu1YqJhg/3wes0rtl7RA NalOUW9PHYNhxNCLLBd5Ltz4/W0LZcpCvzsXLLgMbO0g52zlRKCju2x+DZZtB279 3nFE4GKTvWXnsINmRZAyrBcDYEk4K708JnuZwv9oTV06BVWHQ3ADYVbDz3Q2s7D9 dGo1MB8Jw2yFxkUFQ2TWUuUvZtzXi65a6NC6/9dPHxrvMVQUWjjo3Qg2cuBH6Gf4 mpH4wjabtIQcM+BUPC/5dtJVJlFRXnGPIFs= -----END CERTIFICATE-----Generated at Wed Oct 21 04:51:47 2026 by rpki-client