$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36980691-4d9c-3748-8052-cadfec743278.roa File: 36980691-4d9c-3748-8052-cadfec743278.roa (raw, json) Hash identifier: zstK5zo2WnsUfF9LYO5lnXxoLej+QcLfCiePwGvwVm4= Subject key identifier: B9:59:FF:1F:36:8C:3C:36:1C:16:FE:B6:D6:90:7B:DB:25:C5:28:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584FA593AB1614075D29F785B120 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36980691-4d9c-3748-8052-cadfec743278.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 393950 IP address blocks: 2001:470:333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:ab:16:14:07:5d:29:f7:85:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=0c02ce16-d588-4f2e-9bc1-700bc57aba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bc:e7:4d:6f:44:dc:e0:c4:40:79:50:9c:82: 7d:c0:93:40:a7:2d:88:66:ec:22:a5:5c:23:8a:d5: 63:f0:34:8d:08:bd:4f:d1:19:58:f7:eb:32:ad:36: 11:8c:65:c9:d5:e3:b1:27:a2:3c:df:4d:0f:07:7e: fe:af:7f:e2:f3:ae:c3:93:2d:73:0f:b0:a1:90:fd: 90:88:95:46:b7:59:19:30:a3:46:00:47:c5:b8:55: 3c:d9:7f:cd:d4:f5:0f:98:53:fa:cd:68:41:e7:72: 3a:35:1e:f1:5c:2c:eb:82:58:1d:ce:47:8e:86:5c: 39:16:35:83:83:34:dd:e3:e5:74:6d:69:18:9b:ad: e9:05:1f:33:fc:20:3b:66:06:87:35:51:be:b5:3d: 7b:9c:73:a4:2d:54:d5:70:68:7e:41:66:1f:52:e6: b4:0b:d8:e5:3d:e8:33:c8:98:2b:78:d2:6e:46:65: e4:5e:44:db:6f:0d:8e:e2:2c:51:ad:ef:b7:05:b8: a5:0a:43:15:38:1b:f5:3f:b9:1b:03:3b:ca:93:2f: 0e:df:30:c4:74:e0:5a:26:21:86:31:e4:b9:b4:3a: 97:6d:53:54:31:1d:18:f2:ae:d4:0b:8f:45:1b:9b: de:59:10:67:4e:78:ba:bd:1f:1f:21:b6:a1:bc:0c: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:FF:1F:36:8C:3C:36:1C:16:FE:B6:D6:90:7B:DB:25:C5:28:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36980691-4d9c-3748-8052-cadfec743278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:333::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b5:cf:5c:c1:0d:66:57:9b:3c:8e:99:74:17:98:f5:4f:b0: 24:86:ca:9f:1b:25:f2:09:67:6f:34:28:d3:72:ba:da:0f:7e: 1b:b8:f1:fc:74:53:d4:ad:a0:98:fe:3d:5a:20:1b:4f:a3:45: 74:c8:53:b0:83:75:3a:de:e6:04:53:c5:a2:34:d4:ed:72:81: 91:4c:60:5b:22:3e:ef:69:89:85:63:5b:61:c8:6a:5a:4f:c9: cf:ea:72:ab:72:2b:e2:c5:4f:55:86:48:58:a6:ce:62:31:a9: 14:d2:53:c0:05:42:26:5a:a7:55:d6:68:08:6e:39:1e:78:86: 7b:95:6e:3a:cc:d8:29:0b:62:03:59:af:c7:34:94:75:52:39: da:a0:0c:e0:27:09:3b:a2:2c:2e:67:64:01:ef:b5:95:b5:ce: fc:35:fd:d1:b4:af:58:39:a8:e9:c6:b9:c7:af:2f:cd:5f:05: 76:cf:75:94:83:98:9d:c6:f6:76:26:1d:a0:5a:88:ba:75:4d: e5:02:95:df:3f:54:0b:d9:3c:a3:db:64:5c:d4:5b:f5:d6:26: 46:29:c6:4c:e1:ba:30:70:38:95:45:c3:14:5e:00:b7:b8:a2: 0e:f4:09:d4:10:1a:51:38:f1:3a:ff:bc:37:bb:8d:b8:b8:c6: 47:14:97:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+lk6sWFAddKfeFsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk MGMwMmNlMTYtZDU4OC00ZjJlLTliYzEtNzAwYmM1N2FiYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrznTW9E3ODEQHlQnIJ9wJNApy2IZuwipVwj itVj8DSNCL1P0RlY9+syrTYRjGXJ1eOxJ6I8300PB37+r3/i867Dky1zD7ChkP2Q iJVGt1kZMKNGAEfFuFU82X/N1PUPmFP6zWhB53I6NR7xXCzrglgdzkeOhlw5FjWD gzTd4+V0bWkYm63pBR8z/CA7ZgaHNVG+tT17nHOkLVTVcGh+QWYfUua0C9jlPegz yJgreNJuRmXkXkTbbw2O4ixRre+3BbilCkMVOBv1P7kbAzvKky8O3zDEdOBaJiGG MeS5tDqXbVNUMR0Y8q7UC49FG5veWRBnTni6vR8fIbahvAzgdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLlZ/x82jDw2HBb+ttaQe9slxSjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzY5ODA2OTEtNGQ5Yy0z NzQ4LTgwNTItY2FkZmVjNzQzMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEu1z1zBDWZXmzyOmXQXmPVPsCSGyp8bJfIJZ280KNNyutoPfhu4 8fx0U9StoJj+PVogG0+jRXTIU7CDdTre5gRTxaI01O1ygZFMYFsiPu9piYVjW2HI alpPyc/qcqtyK+LFT1WGSFimzmIxqRTSU8AFQiZap1XWaAhuOR54hnuVbjrM2CkL YgNZr8c0lHVSOdqgDOAnCTuiLC5nZAHvtZW1zvw1/dG0r1g5qOnGucevL81fBXbP dZSDmJ3G9nYmHaBaiLp1TeUCld8/VAvZPKPbZFzUW/XWJkYpxkzhujBwOJVFwxRe ALe4og70CdQQGlE48Tr/vDe7jbi4xkcUl5c= -----END CERTIFICATE-----Generated at Mon Nov 2 05:52:31 2026 by rpki-client