$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/425081fa-56fb-3f20-9286-8fbec54ef527.roa File: 425081fa-56fb-3f20-9286-8fbec54ef527.roa (raw, json) Hash identifier: 6I3QENn+vRJTs1m6PriT5A9utYblMzRsRu1lYnMJrh4= Subject key identifier: 97:CC:12:BA:95:BE:9D:50:61:D8:FC:99:6C:85:A5:76:2F:06:D4:3B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F1467A820CB4799A6808E7180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/425081fa-56fb-3f20-9286-8fbec54ef527.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 399381 IP address blocks: 2001:470:33a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a8:20:cb:47:99:a6:80:8e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=1e327881-d110-4614-aef1-a72a5fd545b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:08:b8:1e:f6:3c:b4:46:83:34:fe:1e:0e: 57:ba:67:c1:12:f7:df:30:30:f9:ad:09:2b:5a:23: a8:13:2a:2a:2f:5d:4e:6d:c3:73:d1:db:38:c0:c6: 16:a4:0f:66:e2:2b:9c:8c:70:4e:55:60:85:14:8d: b1:b6:6a:e2:05:75:ae:c4:b9:72:f9:ab:4e:90:a3: 31:51:f9:ac:7c:bd:1b:07:54:a6:53:b9:02:d8:76: 73:f7:0f:4c:ee:c7:ca:6f:70:2a:9c:51:92:02:81: 1d:de:83:27:2d:fc:56:e7:0e:d8:0d:79:e4:6d:1d: 46:89:b8:b0:f0:20:6e:ce:57:93:a7:67:0f:c5:90: 53:cf:b1:48:05:ee:cc:f1:ea:7e:71:dd:7d:a9:95: 75:37:e3:4d:fb:02:94:02:39:9c:0e:4e:89:a1:a8: cb:32:d0:81:12:12:80:ce:e9:b8:b5:4b:50:b8:01: 70:a1:59:a6:92:88:93:23:85:1e:cf:cb:fa:f6:76: 09:68:d3:3b:9c:06:96:4b:1d:77:2c:19:55:a7:59: d6:02:9b:91:67:f2:41:33:69:c7:bb:b2:74:31:1a: 54:59:15:8d:92:e2:7e:cd:e7:cb:96:cd:41:b5:75: bb:3b:23:35:3c:9c:cd:e4:d4:7a:af:74:20:c0:81: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CC:12:BA:95:BE:9D:50:61:D8:FC:99:6C:85:A5:76:2F:06:D4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/425081fa-56fb-3f20-9286-8fbec54ef527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:e6:0b:85:0c:e3:e1:5a:ea:3d:cc:c7:f2:56:a8:c4:d9: 8b:ab:00:79:04:6e:dc:6c:85:c9:b8:0f:ef:56:8d:da:f8:e9: c4:41:09:8e:93:dd:37:c4:45:e0:38:37:bf:f0:f0:02:f8:3c: c4:a6:18:8b:36:1f:d8:5f:15:12:f1:e4:db:16:72:b1:56:dd: 96:d0:93:4a:45:75:03:b6:a5:40:38:33:a0:d3:4e:57:0d:a0: cd:14:9f:ca:0e:99:04:40:7f:70:2d:2b:8d:b3:89:62:0a:07: 48:19:da:c5:f0:7d:86:5b:26:ef:d7:67:ab:97:1e:da:54:f3: 7e:50:11:f0:42:05:89:bf:a2:9c:f4:fb:ae:26:52:1b:17:cb: de:24:2e:bc:7b:7c:68:18:bf:4b:a9:6d:10:8a:c9:f2:06:f4: fe:45:3c:ab:b1:5a:67:94:ef:43:e7:e7:b9:7d:86:c9:0a:55: 6a:73:b1:f3:d9:32:e9:3b:22:29:09:e1:2c:33:e2:fa:e2:4f: be:69:64:67:dd:3f:0b:c2:9c:f2:f7:8f:26:2a:a7:0d:74:13: 3f:7c:b5:3a:c5:43:96:11:4b:45:79:3f:6b:a3:29:0b:f3:66: 0c:72:f2:ea:09:0b:ee:d2:46:14:fa:71:7a:55:67:14:53:29: b0:c2:89:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6ggy0eZpoCOcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MWUzMjc4ODEtZDExMC00NjE0LWFlZjEtYTcyYTVmZDU0NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMIIuB72PLRGgzT+Hg5XumfBEvffMDD5rQkr WiOoEyoqL11ObcNz0ds4wMYWpA9m4iucjHBOVWCFFI2xtmriBXWuxLly+atOkKMx UfmsfL0bB1SmU7kC2HZz9w9M7sfKb3AqnFGSAoEd3oMnLfxW5w7YDXnkbR1Gibiw 8CBuzleTp2cPxZBTz7FIBe7M8ep+cd19qZV1N+NN+wKUAjmcDk6JoajLMtCBEhKA zum4tUtQuAFwoVmmkoiTI4Uez8v69nYJaNM7nAaWSx13LBlVp1nWApuRZ/JBM2nH u7J0MRpUWRWNkuJ+zefLls1BtXW7OyM1PJzN5NR6r3QgwIGpQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfMErqVvp1QYdj8mWyFpXYvBtQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDI1MDgxZmEtNTZmYi0z ZjIwLTkyODYtOGZiZWM1NGVmNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrU5guFDOPhWuo9zMfyVqjE2YurAHkEbtxshcm4D+9Wjdr46cRB CY6T3TfEReA4N7/w8AL4PMSmGIs2H9hfFRLx5NsWcrFW3ZbQk0pFdQO2pUA4M6DT TlcNoM0Un8oOmQRAf3AtK42ziWIKB0gZ2sXwfYZbJu/XZ6uXHtpU835QEfBCBYm/ opz0+64mUhsXy94kLrx7fGgYv0upbRCKyfIG9P5FPKuxWmeU70Pn57l9hskKVWpz sfPZMuk7IikJ4Swz4vriT75pZGfdPwvCnPL3jyYqpw10Ez98tTrFQ5YRS0V5P2uj KQvzZgxy8uoJC+7SRhT6cXpVZxRTKbDCiTw= -----END CERTIFICATE-----Generated at Fri Sep 25 16:23:14 2026 by rpki-client