$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa File: 3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa (raw, json) Hash identifier: 4AzzhzSAyOCFPNLyKO1oy0KP23dUJ9Q+U29k8GR9ZFk= Subject key identifier: F4:90:71:71:8C:E3:9D:90:B7:7A:16:44:C5:92:3A:0F:0B:70:BA:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DEB33DECD14A49D093BC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398493 IP address blocks: 2001:470:31d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:eb:33:de:cd:14:a4:9d:09:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=65996a7e-2043-43ba-9821-d611d7a19217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:06:21:ac:b4:d6:bf:1b:bb:eb:36:21:9c: 0d:01:58:9c:50:a4:55:6a:ff:59:a3:62:69:dd:c0: b8:a9:79:5f:22:fc:4b:d1:de:27:b6:41:89:d7:4b: 75:77:77:a2:b0:32:d5:b7:1e:97:59:bb:cd:c7:51: d2:d0:e3:57:64:d6:aa:e4:a0:44:06:d9:51:89:19: 0b:08:b5:98:36:b1:91:5b:35:26:a1:42:64:d0:d8: 73:e8:03:b9:88:ba:0f:80:64:43:7c:52:c7:af:27: e0:1c:32:c2:3c:8f:43:8f:03:82:03:15:94:3b:71: fa:ea:91:6d:05:e6:60:6f:a6:cb:12:d8:76:31:86: 20:ca:8e:51:7b:b4:94:f1:75:3c:11:bb:bf:67:70: ba:65:58:5a:34:0e:63:9f:9c:8a:d7:a6:15:cc:a8: ec:de:db:da:13:5b:73:2b:19:1f:2c:ba:fb:79:3b: b2:ad:0e:09:76:13:4f:1c:65:20:3f:8a:ba:d2:88: a0:86:37:ef:04:48:4a:3a:58:27:d8:ca:41:fe:f7: da:ef:93:94:67:8e:d8:12:89:11:5a:95:33:91:b1: 7e:b0:6f:1b:f4:e7:63:b2:32:e6:b7:68:f5:ee:21: 5c:60:bd:b2:31:9d:9c:45:fb:5b:50:18:f5:78:2c: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:71:71:8C:E3:9D:90:B7:7A:16:44:C5:92:3A:0F:0B:70:BA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a5d49c5-49e3-31f6-aa8c-87f9ba1ad140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:31d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:3d:6a:60:0f:3f:2a:c9:29:18:28:2d:a4:77:96:39:8c:a3: b4:1b:01:cd:7a:6f:a0:36:ec:10:49:41:b3:09:7e:85:05:41: d7:87:89:28:68:6b:d3:4b:80:01:7c:b1:a6:17:2e:8a:8e:1d: 8e:4a:db:86:97:09:6c:b8:e6:5d:a7:9e:34:a7:d5:74:4a:66: 06:4b:1a:d0:d4:cd:3f:71:80:46:7f:f1:0a:d7:f0:bb:ae:8a: b4:f4:35:22:b7:86:80:f2:0a:82:54:8d:a5:ca:43:3b:0b:7d: 12:96:d2:d6:27:c3:e5:76:61:6a:df:61:2b:11:2f:84:e1:03: 06:41:5b:be:28:29:30:fd:b0:74:c3:96:ac:ca:b8:1e:f6:3b: d7:a0:a2:49:96:97:62:7a:2d:db:a6:4b:c7:ba:a0:d7:b9:26: 8b:69:30:4b:8d:68:4f:a4:49:71:34:60:d0:5f:aa:a4:71:97: 47:93:25:78:30:f9:29:53:31:37:20:63:ad:a9:9b:c2:b3:12: 00:7d:b4:f3:4d:fd:7a:0e:98:89:08:d6:5d:66:57:47:87:6f: f4:2a:bf:10:1e:21:b6:44:7f:f6:a3:91:40:8e:d9:a6:ab:ff: 81:29:f6:09:51:98:b4:00:f9:90:5a:6a:42:d7:01:f3:ae:f6: 34:ad:10:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fesz3s0UpJ0JO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NjU5OTZhN2UtMjA0My00M2JhLTk4MjEtZDYxMWQ3YTE5MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYkGIay01r8bu+s2IZwNAVicUKRVav9Zo2Jp 3cC4qXlfIvxL0d4ntkGJ10t1d3eisDLVtx6XWbvNx1HS0ONXZNaq5KBEBtlRiRkL CLWYNrGRWzUmoUJk0Nhz6AO5iLoPgGRDfFLHryfgHDLCPI9DjwOCAxWUO3H66pFt BeZgb6bLEth2MYYgyo5Re7SU8XU8Ebu/Z3C6ZVhaNA5jn5yK16YVzKjs3tvaE1tz KxkfLLr7eTuyrQ4JdhNPHGUgP4q60oighjfvBEhKOlgn2MpB/vfa75OUZ47YEokR WpUzkbF+sG8b9OdjsjLmt2j17iFcYL2yMZ2cRftbUBj1eCxIXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSQcXGM452Qt3oWRMWSOg8LcLrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2E1ZDQ5YzUtNDllMy0z MWY2LWFhOGMtODdmOWJhMWFkMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMI9amAPPyrJKRgoLaR3ljmMo7QbAc16b6A27BBJQbMJfoUFQdeH iShoa9NLgAF8saYXLoqOHY5K24aXCWy45l2nnjSn1XRKZgZLGtDUzT9xgEZ/8QrX 8LuuirT0NSK3hoDyCoJUjaXKQzsLfRKW0tYnw+V2YWrfYSsRL4ThAwZBW74oKTD9 sHTDlqzKuB72O9egokmWl2J6LdumS8e6oNe5JotpMEuNaE+kSXE0YNBfqqRxl0eT JXgw+SlTMTcgY62pm8KzEgB9tPNN/XoOmIkI1l1mV0eHb/QqvxAeIbZEf/ajkUCO 2aar/4Ep9glRmLQA+ZBaakLXAfOu9jStEM0= -----END CERTIFICATE-----Generated at Tue Oct 27 12:32:25 2026 by rpki-client