$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa File: 1cc65f5b-a492-3ed0-b146-e29593a49d69.roa (raw, json) Hash identifier: GxAF6EFKsT9aeBTvwKDLcYP1/KreD3AFHWS+I4s31m8= Subject key identifier: B4:B2:68:16:C1:5D:7F:28:14:CF:F3:46:8D:83:06:1B:90:FC:34:D6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9BCDDDA89573C929E7C7F340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 46491 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:dd:a8:95:73:c9:29:e7:c7:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=f7d9c955-d84f-4e25-8e18-b1d2f2bdda1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:3a:78:7c:fb:76:e3:5a:7e:7a:b0:23:03: ee:8f:9d:d2:18:25:57:50:8d:70:e0:ab:f5:c4:34: 00:14:3f:64:0a:e4:9a:d3:b7:cc:37:5d:28:14:f0: 7f:b0:1e:c9:55:3a:40:19:46:09:32:73:3c:23:e4: 86:e5:43:76:77:2a:2f:3d:9c:5e:10:1b:dd:1e:bf: 96:91:2b:ba:fa:62:c9:bb:3f:a0:09:f2:c2:6d:43: ba:b6:75:ea:2d:73:a0:79:66:c6:f5:94:c0:76:57: 1e:3b:85:95:8e:ca:b0:62:07:76:06:0f:4e:10:63: 33:bd:6b:7b:0d:ab:6c:94:5a:c5:18:dc:89:d4:41: d3:22:97:1b:3a:74:77:5f:ef:e6:da:c8:00:07:c2: 4f:7c:86:21:52:01:69:1f:1d:c9:f6:dd:6c:f4:db: a6:cd:25:81:db:a4:55:44:cb:f8:56:12:e9:b5:c8: e0:0b:f0:58:50:b7:22:e7:56:00:ad:95:ea:c8:93: 22:d3:66:c7:7f:9a:9a:4b:43:05:a5:9c:81:22:0a: ab:25:32:b8:ea:9d:bc:b5:0b:cc:fe:a5:05:b4:a9: 74:f9:09:83:4d:cc:94:82:ba:b3:ba:58:9c:55:94: 75:1d:c4:e1:7e:0b:05:b8:6a:e0:d0:39:46:4f:85: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B2:68:16:C1:5D:7F:28:14:CF:F3:46:8D:83:06:1B:90:FC:34:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bb:1a:54:f8:e5:77:4d:c1:37:15:46:ea:40:1a:1a:0e:ef: 1a:11:b0:db:e8:ba:96:b0:2e:b3:ad:08:37:96:7f:2c:0d:2e: 2b:60:6e:78:d0:0f:82:76:50:0e:69:33:5c:89:23:54:41:0c: 12:a8:b2:9f:1f:d5:bf:3d:94:ba:a6:45:78:01:49:9f:27:47: b0:45:1f:9c:43:34:4a:4e:d7:ec:e5:4c:75:03:5e:68:8d:f3: 63:17:4a:f5:bc:92:f8:5d:73:96:c0:21:3b:cf:f4:bd:5b:5e: f8:7b:f4:93:10:6d:f4:6d:0e:cd:84:dc:12:93:4c:3b:4d:52: 24:70:27:90:74:9c:d5:f6:5b:1b:5c:5d:fc:7f:b3:52:7c:af: e1:d2:90:34:bf:68:7f:40:66:2d:99:6e:d8:82:01:92:6e:b3: 0b:2e:52:03:bf:55:91:c2:26:12:a8:cf:eb:25:32:f4:33:33: a6:8c:ea:81:1c:6b:4b:44:a7:41:14:ea:91:2f:e1:c0:88:be: 23:3b:d1:c1:9a:aa:44:03:7a:39:47:77:fa:00:39:2d:e3:0b: 53:f3:d0:9a:26:fd:fa:cf:3d:d6:c6:ec:be:2c:c8:2c:88:ae: 31:b9:23:3b:d7:21:7a:65:91:90:3d:91:27:e3:0e:9e:25:6e: 19:e5:aa:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzd2olXPJKefH80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjdkOWM5NTUtZDg0Zi00ZTI1LThlMTgtYjFkMmYyYmRkYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u86eHz7duNafnqwIwPuj53SGCVXUI1w4Kv1 xDQAFD9kCuSa07fMN10oFPB/sB7JVTpAGUYJMnM8I+SG5UN2dyovPZxeEBvdHr+W kSu6+mLJuz+gCfLCbUO6tnXqLXOgeWbG9ZTAdlceO4WVjsqwYgd2Bg9OEGMzvWt7 DatslFrFGNyJ1EHTIpcbOnR3X+/m2sgAB8JPfIYhUgFpHx3J9t1s9NumzSWB26RV RMv4VhLptcjgC/BYULci51YArZXqyJMi02bHf5qaS0MFpZyBIgqrJTK46p28tQvM /qUFtKl0+QmDTcyUgrqzulicVZR1HcThfgsFuGrg0DlGT4VcbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSyaBbBXX8oFM/zRo2DBhuQ/DTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWNjNjVmNWItYTQ5Mi0z ZWQwLWIxNDYtZTI5NTkzYTQ5ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACy7GlT45XdNwTcVRupAGhoO7xoRsNvoupawLrOtCDeWfywNLitg bnjQD4J2UA5pM1yJI1RBDBKosp8f1b89lLqmRXgBSZ8nR7BFH5xDNEpO1+zlTHUD XmiN82MXSvW8kvhdc5bAITvP9L1bXvh79JMQbfRtDs2E3BKTTDtNUiRwJ5B0nNX2 WxtcXfx/s1J8r+HSkDS/aH9AZi2ZbtiCAZJuswsuUgO/VZHCJhKoz+slMvQzM6aM 6oEca0tEp0EU6pEv4cCIviM70cGaqkQDejlHd/oAOS3jC1Pz0Jom/frPPdbG7L4s yCyIrjG5IzvXIXplkZA9kSfjDp4lbhnlqmc= -----END CERTIFICATE-----Generated at Mon Nov 2 12:43:42 2026 by rpki-client