$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa File: 2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa (raw, json) Hash identifier: iv+V7IbCtYNwXDVxdiJK6CwXbFl+XV4X0iG2KMu/M/I= Subject key identifier: 39:7B:63:A8:00:24:90:2B:9D:6D:CE:E9:8F:A4:E4:5D:EE:6E:84:3B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F655E6CDD60BA7D9CCDBF6AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 397373 IP address blocks: 2001:470:49c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:6c:dd:60:ba:7d:9c:cd:bf:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=3dc59e8a-d946-48ee-9864-109f3d51c5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:ed:83:95:81:da:3e:81:5c:cd:59:80:3a: c7:c7:c3:80:02:f1:95:a2:4d:b9:04:06:39:c8:64: 35:f1:d7:c3:84:f9:31:f3:5f:82:0e:e7:55:78:b6: 09:a7:fb:d2:50:fe:e5:63:21:d9:58:6e:49:86:f4: 6d:8a:b1:f2:0b:cd:10:fb:58:0b:ee:58:d8:74:d0: 2c:05:00:26:f2:f0:ec:41:98:e8:a7:9c:dd:e0:f9: d5:e5:10:b7:44:70:d7:91:b8:e7:f8:2d:a5:c2:54: ed:80:f0:07:6b:34:97:43:3c:17:56:28:99:53:24: ab:ec:77:16:f7:e3:8c:6b:f1:cd:05:96:e6:39:29: de:f0:c4:7e:b2:c7:a9:31:13:80:a0:b3:62:82:04: 29:94:bb:14:a3:7f:72:89:8c:08:e8:2a:6b:b8:0f: 61:9f:ff:d8:8a:82:b0:c1:1e:77:29:6c:3f:9f:51: 96:e9:ac:a5:1f:2a:5b:00:a5:34:ba:15:0a:ff:ba: 5d:ca:e7:bd:c5:b0:de:01:2e:fc:ef:88:5d:f7:2c: 45:96:73:1f:94:c6:a3:fc:e3:26:93:b9:5e:3d:af: 52:43:db:c1:89:e7:17:ba:f6:8a:00:ee:6e:bc:13: 15:89:1f:82:03:60:e4:ce:e7:21:74:fa:84:0f:e3: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7B:63:A8:00:24:90:2B:9D:6D:CE:E9:8F:A4:E4:5D:EE:6E:84:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:49c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:8a:c4:a2:55:73:c6:00:fd:07:b2:94:8f:6c:37:fd:ff: eb:ab:8f:6f:b6:f0:93:04:b2:5d:7e:25:a3:d9:b2:60:85:0a: ee:4d:00:7a:40:97:ff:d7:6c:41:d6:2c:13:a4:15:dd:77:d2: 92:40:e5:5c:ab:c3:70:be:83:68:22:91:59:cf:c1:52:6d:c2: 14:7e:ce:11:2b:90:76:e2:10:c8:10:c0:c3:26:70:76:e1:0a: dd:eb:ed:a1:51:34:25:30:cd:19:30:72:2e:c9:39:23:c3:30: 01:1c:a5:09:e1:05:d7:4e:03:16:db:21:c7:16:ce:ab:7b:9a: 31:9a:8f:fb:32:69:8d:ff:99:75:ba:6e:9a:64:c8:54:40:a4: ab:48:a2:20:dc:82:97:06:41:81:4f:86:26:5c:e3:bb:5a:21: bd:99:c7:54:f9:ee:2c:d1:c2:13:c8:10:b2:cd:00:b4:8f:8c: 15:36:3f:ee:34:65:37:a9:2c:66:63:e9:1b:81:5a:c6:53:21: e9:8f:9c:6f:8c:00:2f:e6:ae:68:87:b6:40:1b:04:4c:14:2b: a7:89:ed:74:7e:b3:51:44:e5:ef:1f:3e:0b:62:ce:70:fb:9b: 11:89:0c:70:b5:06:ab:68:67:3d:02:ab:b7:2e:e4:53:7d:02: de:4c:27:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9lXmzdYLp9nM2/asAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk M2RjNTllOGEtZDk0Ni00OGVlLTk4NjQtMTA5ZjNkNTFjNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXLtg5WB2j6BXM1ZgDrHx8OAAvGVok25BAY5 yGQ18dfDhPkx81+CDudVeLYJp/vSUP7lYyHZWG5JhvRtirHyC80Q+1gL7ljYdNAs BQAm8vDsQZjop5zd4PnV5RC3RHDXkbjn+C2lwlTtgPAHazSXQzwXViiZUySr7HcW 9+OMa/HNBZbmOSne8MR+ssepMROAoLNiggQplLsUo39yiYwI6CpruA9hn//YioKw wR53KWw/n1GW6aylHypbAKU0uhUK/7pdyue9xbDeAS7874hd9yxFlnMflMaj/OMm k7lePa9SQ9vBiecXuvaKAO5uvBMViR+CA2DkzuchdPqED+Oh3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDl7Y6gAJJArnW3O6Y+k5F3uboQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmY0MDVmNDItMWEwMS0z YjBiLWE2MzYtODFjZmNiYzZiNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMYisSiVXPGAP0HspSPbDf9/+urj2+28JMEsl1+JaPZsmCFCu5N AHpAl//XbEHWLBOkFd130pJA5Vyrw3C+g2gikVnPwVJtwhR+zhErkHbiEMgQwMMm cHbhCt3r7aFRNCUwzRkwci7JOSPDMAEcpQnhBddOAxbbIccWzqt7mjGaj/syaY3/ mXW6bppkyFRApKtIoiDcgpcGQYFPhiZc47taIb2Zx1T57izRwhPIELLNALSPjBU2 P+40ZTepLGZj6RuBWsZTIemPnG+MAC/mrmiHtkAbBEwUK6eJ7XR+s1FE5e8fPgti znD7mxGJDHC1BqtoZz0Cq7cu5FN9At5MJ7k= -----END CERTIFICATE-----Generated at Sun Oct 25 20:08:31 2026 by rpki-client