$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa File: 30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa (raw, json) Hash identifier: H7qlRhLLz7tz0NpgcaIWPpXYKkirqAfFkWSPCt3ZsoA= Subject key identifier: C4:4B:21:D0:E1:9F:83:6B:D1:95:E4:B2:D2:90:FA:9D:9E:DA:81:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EE0C2163283087C747FC99380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 201470 IP address blocks: 2001:470:3db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:16:32:83:08:7c:74:7f:c9:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=988320b9-c2fa-4f18-8c5c-f334434a2aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:49:80:06:52:5c:9e:47:e6:f1:19:12:c9: 70:6d:7a:8a:4a:7c:4e:90:10:d3:30:ba:df:ab:b7: a1:0d:67:45:29:8d:f0:27:38:6f:25:fc:cc:19:66: aa:df:e3:23:ec:1e:8c:31:89:6c:40:99:46:c6:62: ff:7a:ab:be:4e:44:d3:21:76:58:f1:24:de:90:d5: 26:b3:34:77:07:30:f2:77:e2:48:a2:c3:4d:a5:96: 0f:64:aa:23:38:d5:eb:d9:c4:0f:db:2f:d5:b7:fd: 92:4c:90:91:69:20:3f:80:96:e4:be:06:cf:37:bf: 87:31:60:0d:87:6a:e2:12:0b:d3:85:98:38:15:24: b6:45:f0:aa:bb:2c:fb:43:6e:7b:f5:b1:66:72:a4: 49:c3:57:40:7d:b2:c6:65:66:cd:37:c0:1c:20:32: 11:12:bc:c7:eb:53:c4:e2:e3:eb:94:4a:01:6a:6b: b2:fb:a4:28:ae:8e:3c:37:46:93:bc:f3:ad:80:29: 7e:43:64:7a:3b:5c:10:33:58:dd:ab:2d:26:45:6e: 8e:b1:64:b5:1d:d2:ee:80:e7:be:29:6b:da:13:cc: 26:9b:f0:b8:a1:77:b2:ae:07:02:52:62:94:c1:7c: 92:50:de:66:70:99:9b:14:57:69:b9:e6:a9:d7:a9: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:21:D0:E1:9F:83:6B:D1:95:E4:B2:D2:90:FA:9D:9E:DA:81:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30e8b5f6-cab0-3792-a066-73cd0a40b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:fb:aa:92:78:e9:e5:14:d5:ea:15:01:9d:4b:5a:04:a5:f0: 62:a6:98:92:11:d9:14:33:d7:32:24:be:a6:80:d8:b2:7d:bc: 31:2d:73:e5:02:55:46:20:12:df:80:a0:15:08:f7:be:74:5d: 09:0b:79:ca:f0:ce:34:d6:6e:3d:c4:c7:9f:30:5b:0b:83:a8: 76:8d:a5:5f:9a:0e:8c:3e:34:84:ae:05:85:fb:d7:cd:1b:1b: 0e:4e:3b:f2:62:51:2d:4d:61:3a:7f:5d:78:4e:03:ba:48:55: 76:7c:39:01:49:38:ae:ed:9d:37:38:8e:90:e4:a1:05:f7:5d: de:c4:49:d0:0d:28:fb:b3:d8:b9:15:74:11:e6:99:f4:5f:67: 6f:d3:8f:55:75:95:9c:10:bc:b9:dd:0a:a8:9a:af:4b:d8:2a: 07:da:e4:d8:b3:ac:6c:d7:f7:7c:73:24:34:0e:e0:b7:8f:63: 96:36:2c:8c:ac:2a:f1:84:55:2f:53:14:26:26:19:d8:7a:db: 0e:f1:e0:32:07:0f:ea:3d:53:11:90:c6:70:24:48:2a:43:fb: 43:61:1d:c1:14:d7:23:91:39:11:a8:f5:dc:cb:2b:13:88:ad: da:9c:fc:34:7c:8f:28:46:7e:00:11:d0:51:12:bc:e6:cb:12: 32:8c:65:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7gwhYygwh8dH/Jk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk OTg4MzIwYjktYzJmYS00ZjE4LThjNWMtZjMzNDQzNGEyYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfxJgAZSXJ5H5vEZEslwbXqKSnxOkBDTMLrf q7ehDWdFKY3wJzhvJfzMGWaq3+Mj7B6MMYlsQJlGxmL/equ+TkTTIXZY8STekNUm szR3BzDyd+JIosNNpZYPZKojONXr2cQP2y/Vt/2STJCRaSA/gJbkvgbPN7+HMWAN h2riEgvThZg4FSS2RfCquyz7Q2579bFmcqRJw1dAfbLGZWbNN8AcIDIRErzH61PE 4uPrlEoBamuy+6Qoro48N0aTvPOtgCl+Q2R6O1wQM1jdqy0mRW6OsWS1HdLugOe+ KWvaE8wmm/C4oXeyrgcCUmKUwXySUN5mcJmbFFdpueap16lIhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRLIdDhn4Nr0ZXkstKQ+p2e2oFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzBlOGI1ZjYtY2FiMC0z NzkyLWEwNjYtNzNjZDBhNDBiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMT7qpJ46eUU1eoVAZ1LWgSl8GKmmJIR2RQz1zIkvqaA2LJ9vDEt c+UCVUYgEt+AoBUI9750XQkLecrwzjTWbj3Ex58wWwuDqHaNpV+aDow+NISuBYX7 180bGw5OO/JiUS1NYTp/XXhOA7pIVXZ8OQFJOK7tnTc4jpDkoQX3Xd7ESdANKPuz 2LkVdBHmmfRfZ2/Tj1V1lZwQvLndCqiar0vYKgfa5NizrGzX93xzJDQO4LePY5Y2 LIysKvGEVS9TFCYmGdh62w7x4DIHD+o9UxGQxnAkSCpD+0NhHcEU1yORORGo9dzL KxOIrdqc/DR8jyhGfgAR0FESvObLEjKMZeA= -----END CERTIFICATE-----Generated at Sat Aug 22 04:35:04 2026 by rpki-client