$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa File: 3aefd595-846f-396c-b594-07c14e248ae5.roa (raw, json) Hash identifier: uPykGd+0QYQkOdqPc9nZXZy59uqU1Ij18Eq78U99StI= Subject key identifier: 47:19:5E:3E:BB:95:14:82:9E:E9:CE:21:4E:4B:AF:3F:E9:28:D9:F7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584FAC8DDC73DD8AE2B311E52CA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa Signing time: Fri 30 Oct 2026 13:00:12 +0000 ROA not before: Fri 30 Oct 2026 13:00:12 +0000 ROA not after: Thu 28 Jan 2027 14:00:12 +0000 asID: 30150 IP address blocks: 2001:470:423::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:8d:dc:73:dd:8a:e2:b3:11:e5:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 13:00:12 2026 GMT Not After : Jan 28 14:00:12 2027 GMT Subject: CN=71f76afa-f979-496c-a3f2-d086c90a7175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:40:37:22:f8:ac:25:b9:9e:53:c8:d4:70: 15:21:6b:1f:45:e9:ff:76:75:30:eb:3c:4d:45:f8: 2c:db:1e:4f:ab:12:b0:7d:c2:6e:e7:22:a7:cb:e8: d3:21:7a:b0:a0:a0:33:e5:23:b2:19:b6:93:f1:8b: 0b:4a:a5:47:c6:0c:3e:8a:54:de:2d:bc:67:ef:2b: 30:c9:0d:cb:58:64:c8:55:c1:6b:08:97:d1:8c:e3: 4f:99:eb:8b:85:88:27:33:dd:bf:3e:62:81:6d:93: 58:f8:56:1a:52:5f:38:0d:65:d5:94:6d:4e:e5:36: bc:04:90:67:cd:35:98:e4:0e:8f:7c:80:c9:fa:12: 08:1b:cb:0d:fd:cf:d8:85:08:fa:ab:4c:b8:a4:ce: 95:b6:af:8a:d5:78:ab:0b:c4:7c:c2:65:63:9f:c4: 62:f1:4c:03:cb:01:83:7d:6c:fc:1d:35:b3:f1:c8: bb:32:4b:45:c6:52:a6:58:e4:03:cb:1b:6b:c5:7e: 7f:57:ce:fd:8b:9c:9c:5d:b7:38:a9:b4:0c:85:35: 6e:ef:fa:1e:c0:5b:fb:20:bb:20:2b:9f:6d:8a:b1: cf:03:e4:41:29:4e:22:d7:01:25:8e:84:e4:06:06: 14:12:46:02:b6:32:c4:69:94:c7:96:3b:83:6c:33: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:19:5E:3E:BB:95:14:82:9E:E9:CE:21:4E:4B:AF:3F:E9:28:D9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:423::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:04:7f:3e:68:c0:71:fc:71:92:c1:3f:88:b8:a0:f9:7e:25: bb:93:60:af:7a:9e:ab:e7:4e:31:02:d0:1c:ea:86:e1:1c:04: d7:58:a3:20:ae:00:07:d6:54:b2:75:71:a7:d3:d0:36:b7:7f: 29:27:87:d5:33:77:2f:81:95:56:96:0a:17:93:c0:cb:ae:2a: 79:64:12:d6:99:b5:41:88:db:62:cd:6f:b1:64:df:63:9d:9e: d1:c4:fe:9e:1b:54:de:4e:ad:b3:fe:b1:02:bc:90:86:74:f9: aa:9c:f9:90:8c:d5:2c:2f:78:ef:38:a7:0d:6e:17:a3:0b:74: 3e:06:5f:2a:be:a4:c1:68:55:68:ee:5b:c5:27:74:46:09:29: a0:69:5c:fc:7c:f8:b8:51:83:cb:9f:c7:bf:57:54:0e:e5:a3: b1:3f:b5:68:ab:58:a2:98:dc:06:7e:1b:c1:8e:35:c2:3a:47: ba:8d:7b:bc:6b:55:b4:82:22:22:bf:e6:c6:0e:9d:da:6f:ec: 5a:fe:cf:f4:7e:49:15:e6:ef:5e:57:2c:04:be:6e:a4:84:39: 5a:f4:04:1c:d0:55:6c:2b:0f:88:91:d3:96:c1:a8:fe:06:53: 2a:c2:a2:77:4f:f9:70:56:1a:91:85:d0:73:3d:75:b7:c4:a7: 52:5e:85:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+sjdxz3YrisxHlLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAzMDEzMDAxMloXDTI3MDEyODE0MDAxMlowLzEtMCsGA1UEAxMk NzFmNzZhZmEtZjk3OS00OTZjLWEzZjItZDA4NmM5MGE3MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscZANyL4rCW5nlPI1HAVIWsfRen/dnUw6zxN Rfgs2x5PqxKwfcJu5yKny+jTIXqwoKAz5SOyGbaT8YsLSqVHxgw+ilTeLbxn7ysw yQ3LWGTIVcFrCJfRjONPmeuLhYgnM92/PmKBbZNY+FYaUl84DWXVlG1O5Ta8BJBn zTWY5A6PfIDJ+hIIG8sN/c/YhQj6q0y4pM6Vtq+K1XirC8R8wmVjn8Ri8UwDywGD fWz8HTWz8ci7MktFxlKmWOQDyxtrxX5/V879i5ycXbc4qbQMhTVu7/oewFv7ILsg K59tirHPA+RBKU4i1wEljoTkBgYUEkYCtjLEaZTHljuDbDNPXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcZXj67lRSCnunOIU5Lrz/pKNn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FlZmQ1OTUtODQ2Zi0z OTZjLWI1OTQtMDdjMTRlMjQ4YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoEfz5owHH8cZLBP4i4oPl+JbuTYK96nqvnTjEC0BzqhuEcBNdY oyCuAAfWVLJ1cafT0Da3fyknh9Uzdy+BlVaWCheTwMuuKnlkEtaZtUGI22LNb7Fk 32OdntHE/p4bVN5OrbP+sQK8kIZ0+aqc+ZCM1SwveO84pw1uF6MLdD4GXyq+pMFo VWjuW8UndEYJKaBpXPx8+LhRg8ufx79XVA7lo7E/tWirWKKY3AZ+G8GONcI6R7qN e7xrVbSCIiK/5sYOndpv7Fr+z/R+SRXm715XLAS+bqSEOVr0BBzQVWwrD4iR05bB qP4GUyrCondP+XBWGpGF0HM9dbfEp1JehR4= -----END CERTIFICATE-----Generated at Sun Nov 1 21:05:17 2026 by rpki-client