$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1d1b93-1f19-3308-9269-1dab902feb22.roa File: 2a1d1b93-1f19-3308-9269-1dab902feb22.roa (raw, json) Hash identifier: lokuWbVWGF7DAwh527z24ehtRIMnqIzRgKE6cnn8WVU= Subject key identifier: 8D:65:73:31:DF:AD:EA:8E:74:F0:37:FF:83:00:44:7B:73:9E:7D:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584FA594027160740221C087AAA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1d1b93-1f19-3308-9269-1dab902feb22.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 396100 IP address blocks: 2001:470:554::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:94:02:71:60:74:02:21:c0:87:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=ee701998-3870-4b05-9d7d-d5601c15528d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:c0:b2:b3:66:27:6d:be:bb:8a:4f:a4:ef: 75:20:b1:2b:1f:d2:1a:96:0c:c9:a5:4c:eb:8c:ed: b5:03:80:26:2d:41:51:28:39:97:59:24:bc:ec:46: b9:ce:4b:45:40:4b:44:ea:cb:aa:8a:dc:e6:03:47: bd:63:d7:e9:e1:13:d1:a4:f7:53:ae:a2:1d:47:34: cc:54:11:c5:f5:55:aa:7b:07:f8:9f:02:ed:6e:fc: 33:7a:3d:25:97:9e:cb:28:0a:11:57:78:b7:b4:d9: 3b:ce:80:7e:fc:34:a8:05:eb:92:b4:42:b6:b6:39: 5b:9c:cc:4d:95:79:8e:36:e6:c5:4a:96:63:bf:e7: 19:b2:6a:a3:72:12:fe:47:41:77:ab:e6:c0:a8:c2: 48:de:06:3c:3e:6e:97:96:e0:fa:08:58:dc:62:5a: 5e:fd:87:bf:db:02:97:c1:27:d4:77:e0:32:27:56: d7:a7:8c:6d:04:92:4c:b5:2e:71:74:cc:26:6b:9d: 9c:21:d6:97:07:53:f0:a4:40:d7:9e:54:20:bc:92: 57:d1:88:56:32:54:59:0b:b6:9b:a6:e5:61:c7:73: f9:a5:68:71:1b:81:df:b9:4c:bb:ce:4f:ed:b2:fa: 90:e7:1b:b5:d8:f2:e7:2b:90:f0:21:35:cc:dc:cd: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:65:73:31:DF:AD:EA:8E:74:F0:37:FF:83:00:44:7B:73:9E:7D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a1d1b93-1f19-3308-9269-1dab902feb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:554::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:32:3a:9c:98:ee:80:1e:f9:07:54:ea:80:51:fc:2b:3a:fc: d2:2b:4b:4f:de:40:ad:fc:94:e7:21:d9:0f:aa:1b:a2:0e:56: e2:d9:b4:b2:b4:8e:fe:1a:d9:9b:8e:54:70:4d:e1:99:71:79: 24:c5:21:df:07:56:e1:7c:79:71:32:ec:32:3f:95:ab:1b:c3: a4:af:4b:00:c8:d9:32:43:5b:15:f2:e2:40:30:70:a6:28:cd: 83:84:53:5e:bc:a8:94:c0:a8:65:15:36:db:90:9c:4f:b0:fd: 1a:df:65:be:64:9f:d1:4a:3d:c1:24:a6:a7:4f:97:ca:a4:f3: 3a:ad:49:54:72:4c:c0:52:72:49:03:02:62:38:21:53:cb:93: c4:52:c6:94:99:04:b6:65:49:44:2f:b7:0f:3b:a7:90:90:97: af:e7:67:0f:df:cb:1e:2a:58:3f:e6:10:94:46:19:f4:68:65: b3:56:23:85:84:99:a0:a3:81:b7:46:a8:5b:ea:88:3f:5c:f5: 2e:39:34:05:54:ed:cf:0d:5a:34:e7:db:10:7d:f5:2c:5f:b1: 14:e9:52:2a:35:b1:48:1d:d5:a0:47:23:6f:02:bc:35:d1:47: 6d:79:34:02:cf:fd:10:ad:1e:32:89:27:09:7f:09:b8:f0:5b: 68:fa:ae:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+llAJxYHQCIcCHqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk ZWU3MDE5OTgtMzg3MC00YjA1LTlkN2QtZDU2MDFjMTU1MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvAsrNmJ22+u4pPpO91ILErH9IalgzJpUzr jO21A4AmLUFRKDmXWSS87Ea5zktFQEtE6suqitzmA0e9Y9fp4RPRpPdTrqIdRzTM VBHF9VWqewf4nwLtbvwzej0ll57LKAoRV3i3tNk7zoB+/DSoBeuStEK2tjlbnMxN lXmONubFSpZjv+cZsmqjchL+R0F3q+bAqMJI3gY8Pm6XluD6CFjcYlpe/Ye/2wKX wSfUd+AyJ1bXp4xtBJJMtS5xdMwma52cIdaXB1PwpEDXnlQgvJJX0YhWMlRZC7ab puVhx3P5pWhxG4HfuUy7zk/tsvqQ5xu12PLnK5DwITXM3M0yRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1lczHfreqOdPA3/4MARHtznn1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmExZDFiOTMtMWYxOS0z MzA4LTkyNjktMWRhYjkwMmZlYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEyOpyY7oAe+QdU6oBR/Cs6/NIrS0/eQK38lOch2Q+qG6IOVuLZ tLK0jv4a2ZuOVHBN4ZlxeSTFId8HVuF8eXEy7DI/lasbw6SvSwDI2TJDWxXy4kAw cKYozYOEU168qJTAqGUVNtuQnE+w/RrfZb5kn9FKPcEkpqdPl8qk8zqtSVRyTMBS ckkDAmI4IVPLk8RSxpSZBLZlSUQvtw87p5CQl6/nZw/fyx4qWD/mEJRGGfRoZbNW I4WEmaCjgbdGqFvqiD9c9S45NAVU7c8NWjTn2xB99SxfsRTpUio1sUgd1aBHI28C vDXRR215NALP/RCtHjKJJwl/CbjwW2j6rrA= -----END CERTIFICATE-----Generated at Wed Oct 28 11:43:52 2026 by rpki-client