$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fba5cfb-f334-3f9b-b62a-ff0341a5efe4.roa File: 1fba5cfb-f334-3f9b-b62a-ff0341a5efe4.roa (raw, json) Hash identifier: 2TGp8mzSE++Tge3m1TvApanhqZaF4NmAJWMA5nh2AVI= Subject key identifier: 60:4E:0F:DC:9C:0F:81:DF:4E:E8:26:CF:24:08:E7:8C:E1:C6:76:B4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF462F9BEB2EB187DD900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fba5cfb-f334-3f9b-b62a-ff0341a5efe4.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36791 IP address blocks: 2001:470:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f4:62:f9:be:b2:eb:18:7d:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=85aa2fe4-1204-4c6d-9487-434c1183276d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:f4:cc:e1:88:35:d1:38:86:38:56:e2:77: d4:87:96:6d:ab:c7:35:97:c4:f0:67:85:d0:b6:b6: c3:f1:74:78:c5:64:a1:ae:db:00:28:39:88:de:2e: 5e:c7:69:4b:3f:28:78:a0:b8:a2:8b:51:96:79:cf: 8c:03:cc:cc:36:fa:f6:2a:9f:95:03:d9:e7:94:86: 62:ea:36:a2:0b:27:ad:7e:c8:8d:92:b9:20:03:a8: e7:ee:7b:33:46:a5:d1:75:dd:59:6b:40:ad:c6:c9: 45:dd:4d:65:fb:71:8f:fb:15:67:10:94:8b:10:2c: fa:0b:4d:5d:3a:3a:30:2b:73:0e:e5:4c:78:45:97: af:77:8b:98:6e:89:4b:93:2c:e9:4e:5d:89:e9:1c: c0:73:5a:29:28:27:7c:c2:42:dd:fa:08:07:d1:15: 74:b2:84:5f:a0:2e:b3:87:74:fc:c6:93:b6:73:26: ce:ef:10:0e:5d:b7:be:71:5a:5f:76:94:c8:07:54: 99:61:ce:41:ee:01:ba:16:84:76:e4:c3:05:99:7c: d0:f7:5c:3f:9b:2f:2e:41:43:c2:c6:00:d0:a6:b2: 69:a1:cd:d3:f5:6b:84:f5:85:87:18:84:c6:9d:73: 1d:fe:78:60:33:f8:13:34:b7:59:70:0e:d7:e4:63: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4E:0F:DC:9C:0F:81:DF:4E:E8:26:CF:24:08:E7:8C:E1:C6:76:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fba5cfb-f334-3f9b-b62a-ff0341a5efe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:50::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:20:84:61:e1:c0:fb:14:96:8b:02:33:d1:35:c6:d9:76:5c: 81:5c:fd:77:ce:6a:f5:0f:3d:b8:31:91:e4:94:67:20:5f:76: 6c:83:95:e4:84:f2:7f:fd:b1:c5:59:b6:b8:26:11:53:3f:d3: 7c:c9:ec:ca:cc:d2:cf:05:96:49:78:6c:d0:9f:7e:96:72:c1: c2:9d:7a:5b:a2:54:a3:10:01:13:eb:66:be:a7:87:7b:54:09: 4f:98:fa:53:f5:eb:f0:e7:d6:02:c8:71:a6:8a:d6:76:4a:9a: c3:64:0f:87:f1:ef:af:0f:32:6c:72:70:16:bb:10:1f:65:ff: 66:38:33:eb:f6:14:2f:14:1a:70:f9:26:a2:f1:fc:ec:87:6f: e2:24:36:e0:84:03:6c:17:9b:5b:83:1a:7b:64:41:7c:f0:05: be:87:cf:08:bd:20:b7:06:ea:78:f3:be:3f:53:4b:65:cb:b0: 49:93:14:89:99:ce:c3:d3:97:6a:95:57:42:21:b0:de:c2:2a: 0b:0a:55:fe:6d:58:6b:09:72:f1:00:eb:8d:3e:2d:57:45:23: bd:a0:ab:d8:1c:12:58:cb:41:3e:5d:8e:1f:c0:5c:65:65:72: e4:56:9a:4f:c4:c0:cf:a4:4d:7b:ba:a7:9a:65:12:61:2e:d5: 9d:4e:41:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffRi+b6y6xh92QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODVhYTJmZTQtMTIwNC00YzZkLTk0ODctNDM0YzExODMyNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm370zOGINdE4hjhW4nfUh5Ztq8c1l8TwZ4XQ trbD8XR4xWShrtsAKDmI3i5ex2lLPyh4oLiii1GWec+MA8zMNvr2Kp+VA9nnlIZi 6jaiCyetfsiNkrkgA6jn7nszRqXRdd1Za0CtxslF3U1l+3GP+xVnEJSLECz6C01d OjowK3MO5Ux4RZevd4uYbolLkyzpTl2J6RzAc1opKCd8wkLd+ggH0RV0soRfoC6z h3T8xpO2cybO7xAOXbe+cVpfdpTIB1SZYc5B7gG6FoR25MMFmXzQ91w/my8uQUPC xgDQprJpoc3T9WuE9YWHGITGnXMd/nhgM/gTNLdZcA7X5GNNZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBOD9ycD4HfTugmzyQI54zhxna0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWZiYTVjZmItZjMzNC0z ZjliLWI2MmEtZmYwMzQxYTVlZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEsghGHhwPsUlosCM9E1xtl2XIFc/XfOavUPPbgxkeSUZyBfdmyD leSE8n/9scVZtrgmEVM/03zJ7MrM0s8Flkl4bNCffpZywcKdeluiVKMQARPrZr6n h3tUCU+Y+lP16/Dn1gLIcaaK1nZKmsNkD4fx768PMmxycBa7EB9l/2Y4M+v2FC8U GnD5JqLx/OyHb+IkNuCEA2wXm1uDGntkQXzwBb6Hzwi9ILcG6njzvj9TS2XLsEmT FImZzsPTl2qVV0IhsN7CKgsKVf5tWGsJcvEA640+LVdFI72gq9gcEljLQT5djh/A XGVlcuRWmk/EwM+kTXu6p5plEmEu1Z1OQXQ= -----END CERTIFICATE-----Generated at Tue Oct 20 02:56:13 2026 by rpki-client