$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json) Hash identifier: d9OOLemGW9xKHq9yx7oYHrk4posj9cb8JkPb96Exq3s= Subject key identifier: 81:71:25:45:FA:EB:E1:55:C7:03:EF:71:51:15:B9:BD:E7:61:73:BE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC923F6EBAD1AD25A15EE650 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 135423 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:3f:6e:ba:d1:ad:25:a1:5e:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=7e40898f-6786-4914-8eec-1e0dd4574b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:7e:67:7b:d4:55:af:01:51:ee:43:f0:14: 56:7b:cc:a3:d4:42:81:ba:cf:33:c5:a5:b6:3e:97: d6:2a:9b:17:d2:78:24:1a:72:c4:c0:d5:e2:7e:d5: d9:dd:90:5a:bb:d5:46:e5:8b:bb:c8:8a:e3:da:d5: 6c:48:22:94:8a:e2:b3:93:9e:5a:5a:85:a3:50:0b: 15:0d:02:93:86:81:27:7b:7b:c9:4f:e7:a2:32:d7: 66:b6:ae:b1:a4:d3:71:23:dc:1c:7a:0b:f7:3d:88: bb:bc:03:9d:62:29:cb:e7:ec:19:96:21:a7:55:cb: 6a:c5:5c:0a:da:e4:ff:23:09:69:b6:36:61:6e:e5: cb:95:72:61:ff:37:e4:d6:45:99:82:86:60:82:35: bf:98:83:f9:6d:44:43:c6:f3:b0:21:1a:91:e4:fc: 71:49:b9:05:c2:e0:6d:32:79:dd:c0:07:a3:bb:57: 08:db:31:c0:44:ca:b2:4f:96:d1:36:71:db:2e:5b: 14:36:42:8b:68:f1:31:66:ef:0c:93:f8:19:89:de: 07:c7:a0:a4:ef:54:f4:c8:bc:42:ef:d2:62:d8:ae: 31:13:1b:e6:96:93:62:21:50:d8:8f:ba:7d:c4:92: 6b:62:b6:0d:b6:c0:a3:06:35:a6:2c:bc:d6:74:2c: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:25:45:FA:EB:E1:55:C7:03:EF:71:51:15:B9:BD:E7:61:73:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f4:46:c7:bf:ea:26:f3:31:7c:a0:5c:b6:df:16:42:7d:8d: 4c:5b:d9:ff:04:17:9a:c8:28:57:19:d5:20:c7:f8:7d:33:f5: f6:6f:71:56:c9:f1:e0:cc:5c:dd:58:2f:cd:00:5f:55:5a:a0: 9c:a0:65:67:a0:82:dc:5a:21:b9:ee:da:5e:a4:26:56:f1:ea: c4:35:41:b1:05:06:c3:a7:14:22:3e:82:ac:28:32:02:a1:3e: 74:fc:dd:47:e7:7f:8c:70:bc:83:ba:34:89:02:13:a9:eb:f9: 8c:fb:a3:30:c1:59:71:c2:0e:ff:56:38:da:70:f7:04:2a:cb: bf:c8:60:5f:a5:2f:40:25:53:e7:74:02:da:ca:4a:3e:f1:eb: 9f:10:a4:36:7c:ce:7c:92:6d:2a:bd:67:22:9c:37:8a:9d:20: ef:a7:c7:6f:02:65:eb:05:03:a2:c0:92:d6:c0:04:72:46:f0: 38:27:83:58:75:6a:c1:8c:06:2e:02:df:d8:83:07:b5:72:e3: 8e:5f:92:1b:10:5e:86:c8:7f:f2:95:17:4f:f9:fa:01:cb:4c: 11:2f:c1:f0:14:ec:11:ea:50:80:6a:5c:e7:51:e7:42:b8:82: b2:93:6c:aa:a0:65:cc:b4:25:b2:24:3d:f4:4c:df:11:1d:cf: 12:72:96:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckj9uutGtJaFe5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk N2U0MDg5OGYtNjc4Ni00OTE0LThlZWMtMWUwZGQ0NTc0YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKd+Z3vUVa8BUe5D8BRWe8yj1EKBus8zxaW2 PpfWKpsX0ngkGnLEwNXiftXZ3ZBau9VG5Yu7yIrj2tVsSCKUiuKzk55aWoWjUAsV DQKThoEne3vJT+eiMtdmtq6xpNNxI9wcegv3PYi7vAOdYinL5+wZliGnVctqxVwK 2uT/IwlptjZhbuXLlXJh/zfk1kWZgoZggjW/mIP5bURDxvOwIRqR5PxxSbkFwuBt MnndwAeju1cI2zHARMqyT5bRNnHbLlsUNkKLaPExZu8Mk/gZid4Hx6Ck71T0yLxC 79Ji2K4xExvmlpNiIVDYj7p9xJJrYrYNtsCjBjWmLLzWdCyr5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIFxJUX66+FVxwPvcVEVub3nYXO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQyNDIxZjktODdlZi0z OTI5LTk5ZGQtZjY1ZTllOTY3MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALL0Rse/6ibzMXygXLbfFkJ9jUxb2f8EF5rIKFcZ1SDH+H0z9fZv cVbJ8eDMXN1YL80AX1VaoJygZWeggtxaIbnu2l6kJlbx6sQ1QbEFBsOnFCI+gqwo MgKhPnT83Ufnf4xwvIO6NIkCE6nr+Yz7ozDBWXHCDv9WONpw9wQqy7/IYF+lL0Al U+d0AtrKSj7x658QpDZ8znySbSq9ZyKcN4qdIO+nx28CZesFA6LAktbABHJG8Dgn g1h1asGMBi4C39iDB7Vy445fkhsQXobIf/KVF0/5+gHLTBEvwfAU7BHqUIBqXOdR 50K4grKTbKqgZcy0JbIkPfRM3xEdzxJylpg= -----END CERTIFICATE-----Generated at Sat Sep 5 07:31:10 2026 by rpki-client