$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b810a74-94ad-3a73-8d3f-204a5e7368d3.roa File: 3b810a74-94ad-3a73-8d3f-204a5e7368d3.roa (raw, json) Hash identifier: hzonE4qpd+TI0XI41QWCG9u/sYacL0Rv6Abrsj4WXxU= Subject key identifier: 47:7B:69:90:15:B4:32:54:64:95:F4:41:C4:14:97:B8:08:4C:A0:A2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F03A8474E366A361B05135100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b810a74-94ad-3a73-8d3f-204a5e7368d3.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 398206 IP address blocks: 2001:470:555::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:47:4e:36:6a:36:1b:05:13:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=ca13fd58-6e4c-4814-93b4-01fb9b74e69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:69:22:39:cc:8e:42:cc:6e:04:6e:e6:50:ba: 00:44:19:a4:b4:9e:d3:b2:00:25:16:e7:25:52:fe: 85:78:05:5d:4c:0c:09:08:31:7b:f8:3c:4f:0e:53: 3e:6b:ba:99:95:ef:b6:5c:25:ae:b4:da:a6:4b:da: 6d:23:62:7d:d0:9f:c2:ac:02:1a:8b:2a:e1:69:e6: c8:53:c3:82:44:96:2c:94:13:68:c1:78:e4:78:bd: 7a:38:dd:34:22:5b:10:23:f5:06:07:59:b5:4b:29: 86:d9:c8:60:38:4f:04:72:46:46:7b:84:f2:b8:3a: 8d:55:c3:8c:cb:c8:54:8c:80:df:3e:92:a2:84:ef: fc:fa:96:45:d1:31:2d:5a:b3:dc:68:27:b9:74:ec: d3:7e:e8:60:06:b3:58:54:6d:8d:34:ad:bc:99:20: 4e:d8:d1:91:66:64:24:fb:31:a8:dd:e8:b1:f2:c2: fd:88:f4:a3:25:65:ca:6c:d6:4f:11:f2:7a:4e:2e: 0c:d4:7f:32:bf:52:6b:ca:61:83:84:34:a7:37:4f: 0d:0a:39:4e:4a:89:a6:27:1c:23:c5:49:a6:77:17: b2:bb:b3:18:0e:9d:cd:db:a1:16:ed:38:7b:34:c6: 4d:81:0c:9a:2d:f9:01:ac:19:4e:30:2b:a3:c2:9b: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:69:90:15:B4:32:54:64:95:F4:41:C4:14:97:B8:08:4C:A0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b810a74-94ad-3a73-8d3f-204a5e7368d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:555::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6e:d4:be:f4:4f:a3:f0:ff:cf:31:cb:c6:93:6a:1e:f4:68: 4c:33:c2:dd:f1:80:58:93:29:ad:0d:4e:61:48:4e:4c:b4:d5: 08:86:6a:cc:95:7e:e7:6a:be:59:36:b9:84:9e:54:bd:13:f6: 07:b4:4a:fc:17:29:2b:84:42:4f:05:1b:bc:8c:6a:66:d3:3c: 3e:64:52:c1:33:66:ff:e3:b9:08:e9:8e:50:a4:62:57:45:5c: b8:cd:95:6a:b7:99:6f:2d:3c:97:96:5c:6d:51:ed:6a:55:b9: d5:6e:34:9b:a3:58:69:fd:22:a5:34:39:3d:cb:c1:e9:52:29: 6b:29:e8:4b:25:3d:1d:fd:f6:87:42:24:69:94:8b:a5:a9:1b: d0:18:35:f7:1b:33:99:04:a7:d7:24:af:72:84:a5:e7:71:00: c4:5f:df:89:26:2d:34:d9:d7:a5:83:e1:24:6f:6e:4e:7e:0a: 2a:ad:77:00:58:61:90:6f:df:19:0d:d4:00:2f:c4:4f:c4:d5: 72:28:be:56:f9:5a:90:8c:76:6c:b5:5f:a9:7f:dd:fd:4b:5b: f0:fa:ae:08:2e:eb:62:05:5f:4b:60:ea:fe:71:bc:a9:76:c2: 40:d3:e8:d3:17:d9:5f:6a:c9:98:c9:d9:bc:ca:2d:2f:98:3b: c5:cf:21:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8DqEdONmo2GwUTUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2ExM2ZkNTgtNmU0Yy00ODE0LTkzYjQtMDFmYjliNzRlNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWkiOcyOQsxuBG7mULoARBmktJ7TsgAlFucl Uv6FeAVdTAwJCDF7+DxPDlM+a7qZle+2XCWutNqmS9ptI2J90J/CrAIaiyrhaebI U8OCRJYslBNowXjkeL16ON00IlsQI/UGB1m1SymG2chgOE8EckZGe4TyuDqNVcOM y8hUjIDfPpKihO/8+pZF0TEtWrPcaCe5dOzTfuhgBrNYVG2NNK28mSBO2NGRZmQk +zGo3eix8sL9iPSjJWXKbNZPEfJ6Ti4M1H8yv1JrymGDhDSnN08NCjlOSommJxwj xUmmdxeyu7MYDp3N26EW7Th7NMZNgQyaLfkBrBlOMCujwptlJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEd7aZAVtDJUZJX0QcQUl7gITKCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I4MTBhNzQtOTRhZC0z YTczLThkM2YtMjA0YTVlNzM2OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1u1L70T6Pw/88xy8aTah70aEwzwt3xgFiTKa0NTmFITky01QiG asyVfudqvlk2uYSeVL0T9ge0SvwXKSuEQk8FG7yMambTPD5kUsEzZv/juQjpjlCk YldFXLjNlWq3mW8tPJeWXG1R7WpVudVuNJujWGn9IqU0OT3LwelSKWsp6EslPR39 9odCJGmUi6WpG9AYNfcbM5kEp9ckr3KEpedxAMRf34kmLTTZ16WD4SRvbk5+Ciqt dwBYYZBv3xkN1AAvxE/E1XIovlb5WpCMdmy1X6l/3f1LW/D6rggu62IFX0tg6v5x vKl2wkDT6NMX2V9qyZjJ2bzKLS+YO8XPISo= -----END CERTIFICATE-----Generated at Mon Aug 31 10:51:36 2026 by rpki-client