$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json) Hash identifier: U/47Nx5G2huXYPU6z0Wz/XiCGm3DXsLUSrTy5s+J/Pc= Subject key identifier: 22:9C:2F:08:FC:A6:C6:8C:88:12:57:36:40:E9:87:E2:86:21:C3:AF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFE671F8F48285F2DBB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 135423 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:fe:67:1f:8f:48:28:5f:2d:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=57eec8d8-b2a0-4b3c-9a76-54257de7312d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:49:cc:bb:25:1c:53:2b:12:64:e2:6a:9f: 68:9c:a3:b7:25:09:cf:92:79:e9:2d:6d:77:a9:1d: 9f:f9:19:b5:e7:40:31:80:4e:cd:15:98:64:06:03: 06:da:02:20:69:39:86:bb:e9:7c:d4:07:31:89:30: 30:ce:2d:50:70:14:c9:24:28:35:0d:c3:c8:cd:c2: 9c:76:4e:88:67:c3:10:4b:b2:7e:9c:df:95:8f:ad: 72:c4:e4:3c:f2:07:a5:e2:70:7e:65:08:49:92:af: b7:ae:97:36:24:b7:d1:d0:2d:40:38:bf:90:98:26: 62:de:51:c4:a2:58:c6:13:e9:f6:b8:16:33:95:04: 6a:24:4a:95:ae:91:0e:3d:a3:4c:0f:da:81:57:6b: a2:fc:8f:f9:72:fc:6a:7e:57:17:b0:9e:d1:24:b7: 75:05:69:6c:e0:4e:8d:5b:51:2d:3c:58:aa:08:e0: 9f:7c:31:f6:52:02:34:39:08:f8:1b:f3:21:77:02: 93:83:1a:8d:d5:3f:21:78:c7:51:0e:0b:a3:af:f7: dc:ac:5e:66:a7:64:2a:c1:1a:65:2d:f0:71:5f:64: 8f:7f:f7:f0:30:24:99:f8:99:c6:b7:64:75:40:b6: 7a:6f:fd:f1:e6:5e:94:bf:ce:ab:ab:86:e3:04:f2: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9C:2F:08:FC:A6:C6:8C:88:12:57:36:40:E9:87:E2:86:21:C3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d1:c0:47:86:61:c5:a3:fd:71:99:bd:5d:bc:5c:34:90:b1: 65:81:63:f6:76:04:61:3f:07:2b:2b:38:fb:99:03:81:fb:d4: b3:42:8e:6c:05:6e:46:14:ea:a6:31:f7:1a:ea:1f:ef:70:a1: 40:07:76:01:c9:0c:35:e4:e9:a9:08:13:c2:2e:65:db:de:97: 85:69:7b:41:88:b2:27:ac:15:be:0e:8f:0b:c5:1a:fe:66:90: 3a:21:0a:5b:4b:d4:8a:b1:51:49:25:a3:65:33:34:8f:8c:0a: e4:ce:aa:60:c5:8d:7b:88:ff:5f:00:98:f6:b0:2a:89:63:79: a9:bb:d4:de:f1:50:d3:35:97:cc:42:bd:ed:26:ca:51:a0:49: 0b:85:87:69:a2:ed:75:34:18:b9:0f:ed:fd:c3:2c:08:cb:34: ea:e8:14:10:2b:30:10:0f:12:61:a3:c3:ad:0e:69:90:f7:41: 21:09:ad:a2:1f:14:cc:c1:45:a5:cc:f8:82:c6:15:f3:f5:23: eb:56:a3:f8:d0:e7:76:18:72:ba:fa:3a:76:95:4e:9a:85:c8: 9e:80:e3:b4:a7:21:57:fb:36:ed:4b:41:fd:06:69:18:db:33: 18:68:17:0a:16:f1:9a:54:c0:46:33:2a:d9:f6:97:28:71:15: dd:a1:d3:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ff5nH49IKF8tu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTdlZWM4ZDgtYjJhMC00YjNjLTlhNzYtNTQyNTdkZTczMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hhJzLslHFMrEmTiap9onKO3JQnPknnpLW13 qR2f+Rm150AxgE7NFZhkBgMG2gIgaTmGu+l81AcxiTAwzi1QcBTJJCg1DcPIzcKc dk6IZ8MQS7J+nN+Vj61yxOQ88gel4nB+ZQhJkq+3rpc2JLfR0C1AOL+QmCZi3lHE oljGE+n2uBYzlQRqJEqVrpEOPaNMD9qBV2ui/I/5cvxqflcXsJ7RJLd1BWls4E6N W1EtPFiqCOCffDH2UgI0OQj4G/MhdwKTgxqN1T8heMdRDgujr/fcrF5mp2QqwRpl LfBxX2SPf/fwMCSZ+JnGt2R1QLZ6b/3x5l6Uv86rq4bjBPKJZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKcLwj8psaMiBJXNkDph+KGIcOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQyNDIxZjktODdlZi0z OTI5LTk5ZGQtZjY1ZTllOTY3MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHRwEeGYcWj/XGZvV28XDSQsWWBY/Z2BGE/BysrOPuZA4H71LNC jmwFbkYU6qYx9xrqH+9woUAHdgHJDDXk6akIE8IuZdvel4Vpe0GIsiesFb4OjwvF Gv5mkDohCltL1IqxUUklo2UzNI+MCuTOqmDFjXuI/18AmPawKoljeam71N7xUNM1 l8xCve0mylGgSQuFh2mi7XU0GLkP7f3DLAjLNOroFBArMBAPEmGjw60OaZD3QSEJ raIfFMzBRaXM+ILGFfP1I+tWo/jQ53YYcrr6OnaVTpqFyJ6A47SnIVf7Nu1LQf0G aRjbMxhoFwoW8ZpUwEYzKtn2lyhxFd2h0xA= -----END CERTIFICATE-----Generated at Sun Oct 25 23:18:06 2026 by rpki-client