$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3667b8d2-edca-339a-9a28-856866f41e21.roa File: 3667b8d2-edca-339a-9a28-856866f41e21.roa (raw, json) Hash identifier: ahsGEWbrtclBC/Jy7F7pPy9J7ET5c+qmKeK/1XIJa7E= Subject key identifier: 7F:1C:7B:07:47:10:27:8B:E9:F9:71:40:88:01:00:F7:C3:E9:A0:2F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F74B82E99E8CC3B41FCC9BF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3667b8d2-edca-339a-9a28-856866f41e21.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 400535 IP address blocks: 2001:470:3f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2e:99:e8:cc:3b:41:fc:c9:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=24c69427-ca5b-4e19-9e8d-7f1b9543e712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:ed:8e:51:4f:b5:f2:97:52:c9:9f:08:e9: bf:6b:09:ed:b5:32:bc:3e:3f:31:c3:b8:00:ae:a3: 59:2c:da:87:cb:a1:40:71:75:b4:30:9b:7c:d3:c0: 2c:48:a8:ca:12:a1:24:2a:e2:29:25:d9:6f:41:76: f0:ce:62:8a:bf:c3:4f:1b:f3:c4:b7:7c:ef:f9:5d: 29:11:0f:36:2d:97:26:a0:6a:54:f0:a7:6a:f7:d3: 83:39:a6:c0:58:e6:2a:32:b7:50:9c:47:85:b3:12: 94:7d:b5:49:bf:89:ef:dd:73:79:89:1c:37:b8:09: c2:ea:eb:dc:67:48:49:70:6a:a7:b0:20:fc:55:05: d3:4e:67:f7:76:98:cf:85:e0:1e:61:95:84:f3:79: 02:f1:e6:3f:32:98:58:ba:30:ff:3b:9a:86:5f:a1: 45:df:91:2f:2a:5d:17:70:58:87:6a:ed:ba:47:9f: c0:05:21:a5:9e:fb:fd:9b:80:04:b2:62:39:d0:6b: ed:0c:3a:92:d8:03:89:74:61:ee:b2:f1:69:36:5d: 8d:eb:4c:97:9a:07:21:51:96:fa:e1:89:06:b8:4b: 06:10:44:fe:48:d4:86:b6:11:62:75:28:c5:36:41: f7:d0:67:43:cd:ff:90:92:e4:b2:89:12:47:47:fa: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1C:7B:07:47:10:27:8B:E9:F9:71:40:88:01:00:F7:C3:E9:A0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3667b8d2-edca-339a-9a28-856866f41e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:07:cc:5f:21:6a:83:70:e0:31:55:d5:07:45:22:4f:7c:38: 14:d7:20:40:00:df:52:50:29:11:fa:b4:1f:93:01:fe:5b:ea: 22:92:e2:2c:01:45:d7:f4:f5:a3:99:c0:26:3c:5b:a2:42:b2: a2:3f:bb:e1:38:8b:84:84:9d:8b:e8:5e:f7:0e:e5:39:c8:69: 82:92:9c:38:80:f8:85:c2:92:e5:e8:65:77:87:80:10:e0:62: 4d:a1:15:a0:c6:b7:03:3a:9f:65:86:b5:90:d2:b8:bc:96:28: 69:00:08:47:49:c1:c9:e2:aa:b6:45:91:12:65:31:4b:44:b1: 21:99:56:80:67:41:0a:67:6f:43:fb:86:a4:55:a0:c4:9c:4e: 92:d7:dd:a4:e6:17:3c:f0:c3:92:63:88:28:0d:34:f8:5d:92: a3:73:1f:3d:c9:0d:d4:47:e6:b4:d2:46:76:30:74:50:1d:e9: 9b:41:67:b4:24:20:0f:b8:53:cb:47:44:f7:3e:74:85:e7:de: 4d:a4:99:b3:31:e3:97:28:bb:45:28:a8:a8:13:43:47:fd:25: 57:16:94:26:36:46:b7:52:96:83:3e:f8:a1:42:68:7d:9a:03: 75:5e:e3:3f:12:ac:4a:b2:b9:ae:de:0e:e0:12:7f:e3:11:83: 91:85:b5:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE90uC6Z6Mw7QfzJvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk MjRjNjk0MjctY2E1Yi00ZTE5LTllOGQtN2YxYjk1NDNlNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD3tjlFPtfKXUsmfCOm/awnttTK8Pj8xw7gA rqNZLNqHy6FAcXW0MJt808AsSKjKEqEkKuIpJdlvQXbwzmKKv8NPG/PEt3zv+V0p EQ82LZcmoGpU8Kdq99ODOabAWOYqMrdQnEeFsxKUfbVJv4nv3XN5iRw3uAnC6uvc Z0hJcGqnsCD8VQXTTmf3dpjPheAeYZWE83kC8eY/MphYujD/O5qGX6FF35EvKl0X cFiHau26R5/ABSGlnvv9m4AEsmI50GvtDDqS2AOJdGHusvFpNl2N60yXmgchUZb6 4YkGuEsGEET+SNSGthFidSjFNkH30GdDzf+QkuSyiRJHR/p3HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8cewdHECeL6flxQIgBAPfD6aAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzY2N2I4ZDItZWRjYS0z MzlhLTlhMjgtODU2ODY2ZjQxZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgHzF8haoNw4DFV1QdFIk98OBTXIEAA31JQKRH6tB+TAf5b6iKS 4iwBRdf09aOZwCY8W6JCsqI/u+E4i4SEnYvoXvcO5TnIaYKSnDiA+IXCkuXoZXeH gBDgYk2hFaDGtwM6n2WGtZDSuLyWKGkACEdJwcniqrZFkRJlMUtEsSGZVoBnQQpn b0P7hqRVoMScTpLX3aTmFzzww5JjiCgNNPhdkqNzHz3JDdRH5rTSRnYwdFAd6ZtB Z7QkIA+4U8tHRPc+dIXn3k2kmbMx45cou0UoqKgTQ0f9JVcWlCY2RrdSloM++KFC aH2aA3Ve4z8SrEqyua7eDuASf+MRg5GFtcs= -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:27 2026 by rpki-client