$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30137a5f-23f2-315b-9a6f-b6ffe26b5dd0.roa File: 30137a5f-23f2-315b-9a6f-b6ffe26b5dd0.roa (raw, json) Hash identifier: GmRLzsRw/zT+KfdpJ3/NOz1JMo/HCBXWXrz7gV3w7c8= Subject key identifier: 4F:74:EB:B8:5A:F7:B8:E9:F2:9B:ED:FD:73:CE:33:77:91:6C:F7:B8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F86EC9210706BD78A869BDB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30137a5f-23f2-315b-9a6f-b6ffe26b5dd0.roa Signing time: Sat 17 Oct 2026 01:30:26 +0000 ROA not before: Sat 17 Oct 2026 01:30:26 +0000 ROA not after: Fri 15 Jan 2027 02:30:26 +0000 asID: 24812 IP address blocks: 2001:470:647::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:ec:92:10:70:6b:d7:8a:86:9b:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 17 01:30:26 2026 GMT Not After : Jan 15 02:30:26 2027 GMT Subject: CN=1babf5bd-4e58-45d2-acfb-0ba232329609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:10:8c:24:a0:f5:f2:18:6e:57:46:82:88: 31:d5:26:35:20:9a:df:fc:78:31:ca:56:9d:28:17: 4b:92:23:25:2f:42:87:63:00:11:70:ba:93:0d:0c: c7:c9:f0:6e:e8:80:54:5b:c3:f2:5c:b3:ed:ff:ae: b6:e4:25:85:f6:5f:10:34:a4:7d:36:81:95:dc:64: 22:b9:01:de:c2:ac:7b:60:75:74:27:e1:59:9c:7e: ab:e0:cf:9d:0f:2a:5d:96:4c:e9:f7:09:9f:08:26: 15:d2:3e:f0:16:df:89:47:c6:13:1b:60:00:86:a0: be:0d:8f:f3:5c:85:22:e1:cb:ef:7d:ce:18:eb:5c: 0c:f2:a9:9d:40:9d:8e:37:78:e1:89:3d:96:86:15: 18:4c:20:ac:b9:3c:f1:ab:df:25:e3:01:66:15:55: 50:b0:30:1b:d2:7a:2f:e2:9e:e8:65:4a:8a:13:b7: e2:93:be:32:a7:b3:89:be:22:07:e7:12:55:fe:6f: 01:b3:36:c9:cb:cb:a3:12:50:58:a6:b3:9f:de:49: be:3d:10:c6:9b:d9:e3:62:97:89:b8:7e:3c:28:2f: 27:49:77:98:43:f4:57:55:65:17:a0:22:88:9b:6c: 6b:de:b5:83:00:2c:30:64:f1:37:0e:e8:e0:41:ed: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:EB:B8:5A:F7:B8:E9:F2:9B:ED:FD:73:CE:33:77:91:6C:F7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30137a5f-23f2-315b-9a6f-b6ffe26b5dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:647::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f8:57:6b:1b:cd:d7:1d:c6:f3:e4:1b:96:65:b0:d9:7e:e2: 49:06:cb:a5:b1:64:d4:03:f0:6c:e1:1f:3c:39:86:b1:1a:29: 10:8a:75:bb:21:14:cf:27:e5:e1:d2:ff:85:d9:58:0f:22:f4: cf:e5:12:2b:33:b7:42:93:1b:2d:14:8b:82:7f:9f:87:d0:89: 55:7b:91:f2:c8:f1:5e:44:5d:68:12:77:c3:59:a2:66:64:76: a5:e6:b5:19:73:34:82:04:e3:a5:06:3a:d7:b9:4e:2c:c3:64: 10:00:4e:e2:16:f7:f8:1b:05:09:cc:e7:4c:d6:42:75:3d:ce: 07:39:52:71:9b:c1:c2:93:52:67:67:d0:c6:25:81:46:89:c5: 51:a6:ea:86:fb:35:89:5e:c7:d5:a7:2a:4d:19:e7:cf:22:2e: 16:8f:2a:4f:9c:40:46:d3:f1:20:34:83:e0:0c:91:ba:21:b8: 0f:9e:b1:18:57:d7:6e:38:21:b7:89:ba:db:09:03:04:d3:45: 6b:ab:09:d6:47:87:a4:87:f5:6e:b4:67:e7:b4:e7:6c:26:5b: 23:2d:60:65:f8:51:77:ce:ee:09:40:d9:3d:ba:6e:3a:04:6c: 36:07:de:1c:64:f5:33:d2:e7:91:ef:c0:da:60:b2:1e:ac:11: 62:54:09:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+G7JIQcGvXioab2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNzAxMzAyNloXDTI3MDExNTAyMzAyNlowLzEtMCsGA1UEAxMk MWJhYmY1YmQtNGU1OC00NWQyLWFjZmItMGJhMjMyMzI5NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2AQjCSg9fIYbldGgogx1SY1IJrf/Hgxylad KBdLkiMlL0KHYwARcLqTDQzHyfBu6IBUW8PyXLPt/6625CWF9l8QNKR9NoGV3GQi uQHewqx7YHV0J+FZnH6r4M+dDypdlkzp9wmfCCYV0j7wFt+JR8YTG2AAhqC+DY/z XIUi4cvvfc4Y61wM8qmdQJ2ON3jhiT2WhhUYTCCsuTzxq98l4wFmFVVQsDAb0nov 4p7oZUqKE7fik74yp7OJviIH5xJV/m8BszbJy8ujElBYprOf3km+PRDGm9njYpeJ uH48KC8nSXeYQ/RXVWUXoCKIm2xr3rWDACwwZPE3DujgQe0nQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9067ha97jp8pvt/XPOM3eRbPe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzAxMzdhNWYtMjNmMi0z MTViLTlhNmYtYjZmZmUyNmI1ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAZH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGr4V2sbzdcdxvPkG5ZlsNl+4kkGy6WxZNQD8GzhHzw5hrEaKRCK dbshFM8n5eHS/4XZWA8i9M/lEiszt0KTGy0Ui4J/n4fQiVV7kfLI8V5EXWgSd8NZ omZkdqXmtRlzNIIE46UGOte5TizDZBAATuIW9/gbBQnM50zWQnU9zgc5UnGbwcKT Umdn0MYlgUaJxVGm6ob7NYlex9WnKk0Z588iLhaPKk+cQEbT8SA0g+AMkbohuA+e sRhX1244IbeJutsJAwTTRWurCdZHh6SH9W60Z+e052wmWyMtYGX4UXfO7glA2T26 bjoEbDYH3hxk9TPS55HvwNpgsh6sEWJUCeI= -----END CERTIFICATE-----Generated at Sun Oct 18 23:02:32 2026 by rpki-client