$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/323c8b7e-b869-3fa0-a69b-c1d06b87c15d.roa File: 323c8b7e-b869-3fa0-a69b-c1d06b87c15d.roa (raw, json) Hash identifier: H+nQVOWIAR4OmdZd90ED/oax6wsOtWUNwf4723vs5N0= Subject key identifier: 8D:18:37:05:C3:98:F3:BC:26:66:E3:22:97:0B:06:9C:CC:E0:F3:BA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F86ECA5A87CC4CDB72DFC1A60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/323c8b7e-b869-3fa0-a69b-c1d06b87c15d.roa Signing time: Sat 17 Oct 2026 01:30:35 +0000 ROA not before: Sat 17 Oct 2026 01:30:35 +0000 ROA not after: Fri 15 Jan 2027 02:30:35 +0000 asID: 48422 IP address blocks: 2001:470:647::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:ec:a5:a8:7c:c4:cd:b7:2d:fc:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 17 01:30:35 2026 GMT Not After : Jan 15 02:30:35 2027 GMT Subject: CN=c2c68b88-1ca0-408e-a9e4-f01bb295e4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:20:ff:db:8b:d3:1e:b2:4b:37:37:9d:ce: d2:30:34:f1:59:0f:90:d4:bc:ff:5c:77:ec:19:ca: 1e:09:8b:1b:a3:24:b6:31:ce:ae:24:25:02:41:9c: 58:33:c5:f4:12:dd:59:77:74:06:86:8a:f7:5f:ab: a8:fb:ba:85:5e:89:7b:6d:d8:1f:aa:16:ef:2d:dc: 1d:d2:d4:fc:64:89:cf:b5:47:83:86:ec:f1:bc:3d: c9:58:08:5f:58:0d:3d:22:4e:b9:a0:2f:58:d3:d7: f8:22:47:07:fc:58:2e:c3:e5:c4:fd:05:b2:d7:48: f4:09:38:d8:1c:b2:12:d1:b2:c9:f6:09:99:55:ce: 41:59:08:36:43:ce:b9:d1:af:81:06:05:1c:00:18: fa:c1:52:fc:d5:43:06:94:94:e4:da:6f:16:0e:d0: 12:60:c6:60:8d:d4:8f:98:fb:17:9a:fa:67:aa:3d: 1e:36:d7:37:4b:31:e6:ff:8c:fc:c6:0e:6d:2a:f7: 31:38:f8:6e:80:ca:be:bb:0c:58:65:35:92:04:c0: c6:65:46:ac:02:4f:f5:f8:cf:c1:2d:38:54:a3:60: 54:5e:90:29:c5:0c:22:dd:9e:cf:86:36:ff:1a:0a: d6:af:3d:1a:3f:cb:be:80:5a:63:8e:24:5c:4b:10: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:18:37:05:C3:98:F3:BC:26:66:E3:22:97:0B:06:9C:CC:E0:F3:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/323c8b7e-b869-3fa0-a69b-c1d06b87c15d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:647::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:29:3e:1c:ea:c5:6f:fd:a1:a5:d1:0c:0b:53:27:62:3a:fe: 66:87:59:4b:b9:51:33:f0:66:1c:4f:0b:04:43:f3:ba:b2:91: 37:02:8c:3d:fc:e1:3a:e1:83:42:cd:8d:0d:e2:26:0b:ba:d0: 3e:3e:2c:a4:9a:93:3d:06:8b:18:1f:5c:1e:d0:a8:a1:d2:72: c5:d7:3d:13:3f:86:f0:28:f4:ca:ff:20:8c:95:dd:c5:46:69: 1d:70:70:0a:9f:6d:a8:e4:f5:47:45:4f:1c:89:dd:12:af:65: bc:19:d5:fb:58:51:3b:f0:6e:43:56:ed:95:6d:23:42:fb:6c: 74:e4:22:7e:81:e8:56:92:96:7c:66:1f:72:61:38:bb:3f:d4: 04:0d:52:48:43:71:ae:39:d0:a4:a7:02:25:84:68:4e:61:74: 40:39:70:cf:f7:31:b1:c4:fd:7c:08:f5:ce:a1:de:61:df:b2: 4e:58:70:6b:40:e1:f9:e0:e9:61:f4:10:7a:ab:bd:57:0e:af: 7a:61:0c:09:be:88:93:9e:ef:fb:e8:f3:36:5f:b8:22:cc:c4: d7:61:0e:95:13:0a:7e:c7:68:59:05:84:69:dd:bd:db:6b:d7: a9:07:94:a1:34:4c:82:8e:b9:da:62:7c:4d:83:98:77:43:e0: 99:49:31:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+G7KWofMTNty38GmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNzAxMzAzNVoXDTI3MDExNTAyMzAzNVowLzEtMCsGA1UEAxMk YzJjNjhiODgtMWNhMC00MDhlLWE5ZTQtZjAxYmIyOTVlNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZYg/9uL0x6ySzc3nc7SMDTxWQ+Q1Lz/XHfs GcoeCYsboyS2Mc6uJCUCQZxYM8X0Et1Zd3QGhor3X6uo+7qFXol7bdgfqhbvLdwd 0tT8ZInPtUeDhuzxvD3JWAhfWA09Ik65oC9Y09f4IkcH/Fguw+XE/QWy10j0CTjY HLIS0bLJ9gmZVc5BWQg2Q8650a+BBgUcABj6wVL81UMGlJTk2m8WDtASYMZgjdSP mPsXmvpnqj0eNtc3SzHm/4z8xg5tKvcxOPhugMq+uwxYZTWSBMDGZUasAk/1+M/B LThUo2BUXpApxQwi3Z7Phjb/GgrWrz0aP8u+gFpjjiRcSxCGLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0YNwXDmPO8JmbjIpcLBpzM4PO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzIzYzhiN2UtYjg2OS0z ZmEwLWE2OWItYzFkMDZiODdjMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAZH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAcpPhzqxW/9oaXRDAtTJ2I6/maHWUu5UTPwZhxPCwRD87qykTcC jD384Trhg0LNjQ3iJgu60D4+LKSakz0GixgfXB7QqKHScsXXPRM/hvAo9Mr/IIyV 3cVGaR1wcAqfbajk9UdFTxyJ3RKvZbwZ1ftYUTvwbkNW7ZVtI0L7bHTkIn6B6FaS lnxmH3JhOLs/1AQNUkhDca450KSnAiWEaE5hdEA5cM/3MbHE/XwI9c6h3mHfsk5Y cGtA4fng6WH0EHqrvVcOr3phDAm+iJOe7/vo8zZfuCLMxNdhDpUTCn7HaFkFhGnd vdtr16kHlKE0TIKOudpifE2DmHdD4JlJMa8= -----END CERTIFICATE-----Generated at Tue Oct 20 12:47:59 2026 by rpki-client