$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa File: 3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa (raw, json) Hash identifier: gD45m0QUSG6rVhzsp9bdajDf43d8tEcVsIo3Hata5vI= Subject key identifier: 00:9F:5B:1D:E3:25:BD:C8:8E:91:AD:B6:9A:CF:B0:12:4B:2E:B0:1B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFCC38661258A1E5AB000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 28773 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:fc:c3:86:61:25:8a:1e:5a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=03bc92d9-4343-47fb-9b77-7eced14c2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:05:4b:94:28:15:f3:75:80:09:f6:0c:4d: 27:82:e9:06:31:97:c3:76:12:c6:ae:35:2b:4d:f0: 9b:de:ab:58:07:62:47:21:9d:b4:4c:67:fb:f0:ad: 35:63:89:f8:42:48:0e:a8:f8:8c:a6:4e:ec:0d:f4: f0:ef:ba:d0:a5:39:4f:ca:d9:c8:95:ec:c4:99:f0: 56:cc:b9:72:b7:ec:11:fb:c9:44:91:ff:a4:86:e3: 4e:7a:86:48:d3:ee:a5:97:b2:c0:b5:f0:96:ba:8f: a7:c6:14:11:c5:e9:a6:eb:d4:4e:9b:4d:ea:bf:6e: ed:1a:52:1e:a2:30:10:ff:f7:77:e1:73:af:21:74: b3:5a:4c:87:b7:fc:66:4a:1e:5e:4c:0d:82:95:3c: d5:bd:9c:1e:98:d6:51:9c:32:97:38:30:ea:f2:6f: a4:a6:33:c7:63:99:15:f7:89:7b:31:68:81:83:1b: b8:f0:78:8d:bb:30:7e:4c:4c:77:eb:57:69:ce:c4: 53:97:4d:2b:08:21:ae:ca:22:6d:ed:3d:36:b8:40: f4:51:cd:3c:8f:e3:4a:32:a2:58:5e:43:b1:cd:b7: d0:8c:69:f8:3a:bb:9f:b5:17:13:59:ed:ee:fd:56: b1:37:2a:21:9d:81:88:96:68:70:b5:80:e4:fb:12: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:5B:1D:E3:25:BD:C8:8E:91:AD:B6:9A:CF:B0:12:4B:2E:B0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3da39cfb-63c4-33b9-bdee-cefca99f1a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:4b:10:a4:0c:e8:ba:89:c0:b3:69:a4:33:be:67:29:36:67: ee:c3:5a:60:63:be:74:75:dd:be:da:26:11:2e:05:52:71:2d: 21:68:d1:e8:5d:c6:c9:7f:b4:ea:17:ec:3c:0e:b5:c3:96:2d: 88:d1:89:2d:da:7d:32:e0:e7:eb:f5:84:f5:69:3e:4d:94:11: e4:95:1f:99:32:a0:9b:9a:5f:ad:7f:97:b2:48:0b:dc:42:04: bc:c2:95:2b:e8:49:e6:a8:c5:19:85:2e:87:22:55:1b:26:e3: 92:0e:92:b5:fc:16:0e:e6:49:14:64:3c:f6:cc:40:7f:7e:ba: 9c:e9:12:67:2c:04:39:75:99:61:22:d6:a4:0a:b1:f4:7d:ed: 45:ac:91:29:57:47:59:a3:60:9a:5e:ed:92:1c:8a:28:14:7c: 3f:f9:b8:13:59:08:a3:1d:71:55:56:37:1b:20:bb:25:ab:f4: f8:a4:14:52:02:15:3d:3a:5e:99:7f:94:f9:0c:86:9b:24:89: 1b:bb:17:4e:23:76:96:34:e7:66:84:65:c2:28:90:09:4c:06: 40:68:3b:ca:0b:2c:37:92:94:59:c2:73:8b:99:8c:b7:15:11: bf:09:aa:3b:78:f6:b8:d4:38:cb:59:ad:b7:ac:f5:5c:bc:29: ec:f3:dd:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffzDhmElih5asAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MDNiYzkyZDktNDM0My00N2ZiLTliNzctN2VjZWQxNGMyZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEIFS5QoFfN1gAn2DE0ngukGMZfDdhLGrjUr TfCb3qtYB2JHIZ20TGf78K01Y4n4QkgOqPiMpk7sDfTw77rQpTlPytnIlezEmfBW zLlyt+wR+8lEkf+khuNOeoZI0+6ll7LAtfCWuo+nxhQRxemm69ROm03qv27tGlIe ojAQ//d34XOvIXSzWkyHt/xmSh5eTA2ClTzVvZwemNZRnDKXODDq8m+kpjPHY5kV 94l7MWiBgxu48HiNuzB+TEx361dpzsRTl00rCCGuyiJt7T02uED0Uc08j+NKMqJY XkOxzbfQjGn4OruftRcTWe3u/VaxNyohnYGIlmhwtYDk+xIrdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACfWx3jJb3IjpGttprPsBJLLrAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2RhMzljZmItNjNjNC0z M2I5LWJkZWUtY2VmY2E5OWYxYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMZLEKQM6LqJwLNppDO+Zyk2Z+7DWmBjvnR13b7aJhEuBVJxLSFo 0ehdxsl/tOoX7DwOtcOWLYjRiS3afTLg5+v1hPVpPk2UEeSVH5kyoJuaX61/l7JI C9xCBLzClSvoSeaoxRmFLociVRsm45IOkrX8Fg7mSRRkPPbMQH9+upzpEmcsBDl1 mWEi1qQKsfR97UWskSlXR1mjYJpe7ZIciigUfD/5uBNZCKMdcVVWNxsguyWr9Pik FFICFT06Xpl/lPkMhpskiRu7F04jdpY052aEZcIokAlMBkBoO8oLLDeSlFnCc4uZ jLcVEb8Jqjt49rjUOMtZrbes9Vy8Kezz3WY= -----END CERTIFICATE-----Generated at Mon Nov 2 22:47:05 2026 by rpki-client