$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25065774-be91-3eff-a193-b19fafcd483a.roa File: 25065774-be91-3eff-a193-b19fafcd483a.roa (raw, json) Hash identifier: Wr+f/D1kXA1R8MTsvK+wvpQ9h0jWKO5oVC3Xz5SI+pk= Subject key identifier: BC:3B:F5:8A:DE:12:61:2F:00:76:99:95:2C:4C:08:66:81:33:97:E1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF57064FA900D0D788B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25065774-be91-3eff-a193-b19fafcd483a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 40841 IP address blocks: 2001:470:8b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f5:70:64:fa:90:0d:0d:78:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=a68ed17e-deb2-4cb2-a436-548d4ec563d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:35:48:fa:e7:8f:e2:30:14:d8:53:e8:a8: dd:53:a4:09:59:bc:a3:35:93:aa:9f:5f:c6:4c:a9: 4b:2d:d5:9b:68:d7:a5:c9:9a:9b:3d:94:06:ea:41: 02:bb:93:3d:b2:05:7e:04:f0:98:34:38:ba:6f:4f: 35:fd:7a:a3:23:1e:73:fe:38:b7:dd:8d:13:a3:63: 2c:c8:ba:63:62:02:72:14:c8:fc:ad:80:9b:21:86: 45:c3:91:cc:40:7f:9f:00:71:81:a0:ff:e2:31:2e: 99:ca:d9:1c:f1:6e:57:a3:a8:47:b2:d2:dc:09:4f: f5:00:7b:16:09:66:73:8d:ad:89:f7:76:f9:68:b4: 92:21:cb:be:71:cd:ab:11:56:4a:1e:d7:a9:7e:a7: e3:77:f0:b9:65:ea:17:61:82:15:74:01:ef:f2:b5: e6:1b:23:16:41:f9:69:b7:0e:2d:a8:1c:ad:16:bf: 6d:73:69:a9:76:62:9b:a4:70:e5:f2:0e:87:f5:66: f0:c0:75:4b:7e:a5:64:b6:e4:39:fb:b2:c6:ac:2a: 9b:4e:67:c7:f0:f1:0a:f5:ee:64:dd:ef:87:14:75: 1e:03:e4:66:5b:d8:aa:50:8f:7a:ad:0e:59:95:61: 9c:e1:3f:ab:01:71:8b:26:be:58:14:9c:71:d7:10: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3B:F5:8A:DE:12:61:2F:00:76:99:95:2C:4C:08:66:81:33:97:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25065774-be91-3eff-a193-b19fafcd483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9c:5f:73:7a:aa:72:3d:a7:fd:4a:0d:64:6b:bc:e6:65:fb: 8a:fb:4b:95:37:86:31:d3:4f:cf:13:c1:1e:91:14:67:07:04: a7:60:cc:6b:e3:7a:fd:d9:c6:d0:0f:73:32:13:de:b0:45:30: 2d:c0:77:a7:af:ca:fb:ae:02:88:a4:67:7f:79:8c:bc:29:c6: f5:48:44:d6:cf:c2:f0:58:8d:26:53:72:8c:57:67:c8:4c:0a: f6:9e:6b:8b:0a:14:01:ed:b2:24:3b:32:1c:90:4a:12:7d:86: 11:46:b7:65:da:12:45:f7:02:2e:cd:d2:a0:24:bd:30:7b:8b: e4:16:bf:29:d5:3e:81:fd:43:e5:5d:b7:e5:0a:5c:5a:7d:43: 76:59:04:49:e5:1a:b2:41:4a:e4:6e:a0:e6:4f:c2:31:65:84: 59:df:af:ae:4a:9a:42:d0:0e:85:ff:b3:21:b6:07:4f:f9:2b: 98:1c:f2:5d:26:90:da:d3:26:b9:9e:23:a3:19:cb:04:19:24: 38:9a:73:48:b6:51:51:1b:1e:56:8c:d3:b9:62:40:d3:bf:e5: cc:d3:96:a9:1e:fe:8e:33:f0:d9:df:34:ef:2d:98:dd:0f:a1: 6b:e9:47:11:fc:5f:c5:32:c1:f8:e7:1e:90:ca:19:00:e6:c7: e3:d8:48:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffVwZPqQDQ14i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTY4ZWQxN2UtZGViMi00Y2IyLWE0MzYtNTQ4ZDRlYzU2M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kk1SPrnj+IwFNhT6KjdU6QJWbyjNZOqn1/G TKlLLdWbaNelyZqbPZQG6kECu5M9sgV+BPCYNDi6b081/XqjIx5z/ji33Y0To2Ms yLpjYgJyFMj8rYCbIYZFw5HMQH+fAHGBoP/iMS6Zytkc8W5Xo6hHstLcCU/1AHsW CWZzja2J93b5aLSSIcu+cc2rEVZKHtepfqfjd/C5ZeoXYYIVdAHv8rXmGyMWQflp tw4tqBytFr9tc2mpdmKbpHDl8g6H9WbwwHVLfqVktuQ5+7LGrCqbTmfH8PEK9e5k 3e+HFHUeA+RmW9iqUI96rQ5ZlWGc4T+rAXGLJr5YFJxx1xD94QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLw79YreEmEvAHaZlSxMCGaBM5fhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUwNjU3NzQtYmU5MS0z ZWZmLWExOTMtYjE5ZmFmY2Q0ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOcX3N6qnI9p/1KDWRrvOZl+4r7S5U3hjHTT88TwR6RFGcHBKdg zGvjev3ZxtAPczIT3rBFMC3Ad6evyvuuAoikZ395jLwpxvVIRNbPwvBYjSZTcoxX Z8hMCvaea4sKFAHtsiQ7MhyQShJ9hhFGt2XaEkX3Ai7N0qAkvTB7i+QWvynVPoH9 Q+Vdt+UKXFp9Q3ZZBEnlGrJBSuRuoOZPwjFlhFnfr65KmkLQDoX/syG2B0/5K5gc 8l0mkNrTJrmeI6MZywQZJDiac0i2UVEbHlaM07liQNO/5czTlqke/o4z8NnfNO8t mN0PoWvpRxH8X8UywfjnHpDKGQDmx+PYSME= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:48 2026 by rpki-client