$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa File: 397bf181-7f08-3423-bf13-abfcd75aa81e.roa (raw, json) Hash identifier: gTcWm48DWYTDyK4QqKnMlpJNngELmq7OROj1SYnkQNE= Subject key identifier: 15:91:60:5F:17:BE:8C:28:4F:03:C4:A3:EF:0A:4F:58:DE:02:B5:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7E00161B48D7FC81F47580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 64401 IP address blocks: 2001:470:2b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:00:16:1b:48:d7:fc:81:f4:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=cc122164-1126-4f67-a59e-09a8dd06fbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:17:04:1f:07:64:8f:bb:5a:59:d9:1f:81: c3:02:cd:8d:3a:b7:2c:d5:20:27:17:0e:17:11:14: a4:0e:2b:78:4b:8d:51:49:07:84:05:c5:1c:fa:a5: e9:4d:d3:d7:25:45:84:ba:e8:dd:1d:07:00:ad:f4: 42:a7:9a:0f:fc:c1:4a:37:e0:1c:50:aa:56:22:5d: 1f:78:eb:4d:75:e4:ca:4d:8e:3e:50:00:05:40:10: 56:84:2c:03:a9:23:4c:1d:3f:7f:19:6a:2d:ed:f8: 17:53:33:aa:9d:4d:ed:2f:68:62:c8:6b:5b:02:06: 8f:98:28:d1:cb:0c:13:40:00:87:27:8d:e7:6d:c7: 05:8c:6d:ea:42:f9:14:5a:45:c1:3e:0c:62:b9:ad: 29:1a:1a:fb:ca:ca:60:4f:b7:69:ce:60:f7:87:2f: 17:6f:5e:52:4f:21:4b:aa:ec:8b:90:fe:39:98:31: 8a:c8:7c:91:15:d9:36:14:d7:2a:fb:3a:7f:f5:47: e4:84:81:86:3c:36:c1:c5:a3:c0:13:56:a0:02:74: 32:fb:d2:75:36:30:6b:21:bb:1a:ad:6a:f6:f3:8c: d7:c6:0a:26:41:98:11:9b:ae:0a:de:2a:1c:7d:3f: 8a:5e:10:4e:99:d5:d6:b8:4e:28:96:5c:9e:61:fc: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:91:60:5F:17:BE:8C:28:4F:03:C4:A3:EF:0A:4F:58:DE:02:B5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397bf181-7f08-3423-bf13-abfcd75aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:36:75:4b:60:03:2a:2a:3b:d3:ee:58:1a:d9:5c:14:c2:7d: 1b:eb:d9:be:f5:c0:c0:6a:bd:d3:1d:f4:d4:37:1c:0d:2b:41: 9f:55:d8:80:8c:4c:45:81:9c:dc:92:a1:2d:8c:e8:f9:24:1d: be:49:f3:ee:7a:af:29:88:e2:f3:9c:02:ca:b0:b9:1e:bf:78: 7b:4e:f0:1c:bd:9c:a9:7f:eb:12:45:a2:f5:d2:a2:bc:c5:a9: ed:ed:eb:e0:7c:b6:b9:ab:25:9d:d1:d8:ae:e4:f7:06:67:15: c2:df:f4:43:f6:3a:59:94:1e:19:88:1d:8f:d5:9e:65:3e:67: 2e:ee:2f:1e:0f:68:b4:3e:b4:24:0d:ad:39:8a:11:5a:34:17: d5:c7:19:5c:7f:15:bd:a7:15:66:d5:9d:ad:e2:44:6b:76:2e: 88:bc:bd:6c:95:2f:0f:a1:45:d3:81:6f:4f:56:7f:f9:4f:22: a3:73:13:2c:79:43:75:9e:ac:ed:b4:f3:3d:26:81:d0:c3:90: 0c:d2:e8:eb:8c:48:7f:66:8e:0d:b0:29:ee:02:54:c7:5c:62: b9:00:28:67:b8:46:ed:66:df:f6:7a:61:3b:1f:74:60:24:9d: 1d:44:b0:96:90:b6:b7:8e:f3:55:10:3a:53:cb:39:f5:3a:1d: f2:bb:87:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fgAWG0jX/IH0dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2MxMjIxNjQtMTEyNi00ZjY3LWE1OWUtMDlhOGRkMDZmYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZAXBB8HZI+7WlnZH4HDAs2NOrcs1SAnFw4X ERSkDit4S41RSQeEBcUc+qXpTdPXJUWEuujdHQcArfRCp5oP/MFKN+AcUKpWIl0f eOtNdeTKTY4+UAAFQBBWhCwDqSNMHT9/GWot7fgXUzOqnU3tL2hiyGtbAgaPmCjR ywwTQACHJ43nbccFjG3qQvkUWkXBPgxiua0pGhr7yspgT7dpzmD3hy8Xb15STyFL quyLkP45mDGKyHyRFdk2FNcq+zp/9UfkhIGGPDbBxaPAE1agAnQy+9J1NjBrIbsa rWr284zXxgomQZgRm64K3iocfT+KXhBOmdXWuE4ollyeYfwiSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWRYF8XvowoTwPEo+8KT1jeArX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzk3YmYxODEtN2YwOC0z NDIzLWJmMTMtYWJmY2Q3NWFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH42dUtgAyoqO9PuWBrZXBTCfRvr2b71wMBqvdMd9NQ3HA0rQZ9V 2ICMTEWBnNySoS2M6PkkHb5J8+56rymI4vOcAsqwuR6/eHtO8By9nKl/6xJFovXS orzFqe3t6+B8trmrJZ3R2K7k9wZnFcLf9EP2OlmUHhmIHY/VnmU+Zy7uLx4PaLQ+ tCQNrTmKEVo0F9XHGVx/Fb2nFWbVna3iRGt2Loi8vWyVLw+hRdOBb09Wf/lPIqNz Eyx5Q3WerO208z0mgdDDkAzS6OuMSH9mjg2wKe4CVMdcYrkAKGe4Ru1m3/Z6YTsf dGAknR1EsJaQtreO81UQOlPLOfU6HfK7hwI= -----END CERTIFICATE-----Generated at Sun Nov 1 14:48:33 2026 by rpki-client