$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa File: 43228dc2-fee6-3213-85b8-367652bd3ae7.roa (raw, json) Hash identifier: MvyjaQ0sCah3LTk3vQmqqVaKn7671lefIekd9sR6ZiI= Subject key identifier: E8:BA:32:64:BF:7D:18:38:18:7F:54:08:D4:A8:7B:8E:A7:7B:90:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE047355A6327A717EB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 217 IP address blocks: 2001:470:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e0:47:35:5a:63:27:a7:17:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=771f1bb9-0694-453b-b09b-cd96105f7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:0d:48:b7:74:4b:09:41:a6:eb:bd:7b:14: c9:5b:a7:b7:aa:9a:21:a2:fb:7a:70:47:21:93:2a: 9f:b7:0e:e3:30:e3:b2:e2:13:ef:2c:bd:6c:a8:7b: aa:db:42:03:ac:d9:bf:22:eb:d1:74:c5:d5:e8:ea: c2:90:a5:35:b6:eb:1c:32:7a:23:44:91:fb:6e:37: 71:f3:e3:fa:4c:70:89:8a:15:41:be:cd:58:ff:03: 1e:20:34:14:86:4e:ed:4f:48:3a:51:8a:0c:f3:0c: 27:22:5e:a6:d9:af:d8:c9:f1:48:fe:df:06:d7:9f: 86:f8:3d:ac:ff:11:a4:2f:67:28:3e:07:14:ca:53: 74:e1:a9:15:8f:f4:c4:90:83:09:3d:97:a6:64:61: c5:8c:5b:da:27:81:68:cd:83:0f:7e:5c:b0:42:f6: 0f:8c:ee:da:57:46:31:7e:16:fd:4e:78:fa:64:25: 61:f7:5e:77:98:81:1d:d7:ab:63:8e:55:54:02:df: e9:92:d8:67:5d:95:34:a1:4d:a2:71:12:67:b3:24: 4a:23:c5:4e:b8:fb:df:02:d2:69:b3:61:e6:ec:ef: ef:d3:47:d4:b2:b1:bc:5c:18:21:52:48:63:9e:6e: e7:17:73:94:7a:9b:aa:55:71:b6:1e:09:0c:51:d2: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BA:32:64:BF:7D:18:38:18:7F:54:08:D4:A8:7B:8E:A7:7B:90:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:47:ca:71:6b:5a:5f:4e:c5:c2:9e:11:37:b5:98:8f:3e:83: 62:21:36:df:13:3e:d6:4e:b6:21:fa:00:bc:a0:cd:1e:79:55: 30:13:2e:0b:3b:b2:d5:99:3d:d5:25:82:5d:54:90:36:4a:7a: 34:e1:eb:5a:61:6d:ac:e6:7c:a8:3f:09:b2:eb:74:d4:cb:f3: 65:be:78:02:db:a0:25:e8:04:67:30:17:42:39:eb:78:42:57: 8d:e3:bf:ac:df:97:e9:29:c5:1e:a0:f5:45:0a:55:9e:14:c2: ae:9e:b6:61:2e:08:9d:9d:fe:2d:c3:bd:4a:e2:40:13:39:49: b2:f8:68:77:a5:01:66:b1:ee:e7:1c:6e:d9:d3:11:83:8e:e8: 92:9f:b4:c7:08:2c:f1:90:ce:4f:b5:9e:e8:b2:fd:39:da:ed: b1:d5:f1:51:43:e6:00:7f:f2:d1:6f:0d:9b:71:18:87:88:ec: 4a:7c:7b:db:f8:5f:c6:eb:f2:e5:af:7f:5f:e1:ff:c4:72:20: 87:29:36:53:46:3f:07:02:f2:14:91:88:84:9c:32:f4:c2:1b: ab:bb:62:0b:1d:c1:9d:c7:8e:a7:8e:78:62:c5:ba:7d:b4:a2: 90:48:40:bf:c0:ec:9a:1e:40:d8:73:14:e9:62:88:9b:13:01: bf:03:e5:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feBHNVpjJ6cX6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NzcxZjFiYjktMDY5NC00NTNiLWIwOWItY2Q5NjEwNWY3MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB0NSLd0SwlBpuu9exTJW6e3qpohovt6cEch kyqftw7jMOOy4hPvLL1sqHuq20IDrNm/IuvRdMXV6OrCkKU1tuscMnojRJH7bjdx 8+P6THCJihVBvs1Y/wMeIDQUhk7tT0g6UYoM8wwnIl6m2a/YyfFI/t8G15+G+D2s /xGkL2coPgcUylN04akVj/TEkIMJPZemZGHFjFvaJ4FozYMPflywQvYPjO7aV0Yx fhb9Tnj6ZCVh9153mIEd16tjjlVUAt/pkthnXZU0oU2icRJnsyRKI8VOuPvfAtJp s2Hm7O/v00fUsrG8XBghUkhjnm7nF3OUepuqVXG2HgkMUdJI2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOi6MmS/fRg4GH9UCNSoe46ne5BkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMyMjhkYzItZmVlNi0z MjEzLTg1YjgtMzY3NjUyYmQzYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBHynFrWl9OxcKeETe1mI8+g2IhNt8TPtZOtiH6ALygzR55VTAT Lgs7stWZPdUlgl1UkDZKejTh61phbazmfKg/CbLrdNTL82W+eALboCXoBGcwF0I5 63hCV43jv6zfl+kpxR6g9UUKVZ4Uwq6etmEuCJ2d/i3DvUriQBM5SbL4aHelAWax 7uccbtnTEYOO6JKftMcILPGQzk+1nuiy/Tna7bHV8VFD5gB/8tFvDZtxGIeI7Ep8 e9v4X8br8uWvf1/h/8RyIIcpNlNGPwcC8hSRiIScMvTCG6u7YgsdwZ3HjqeOeGLF un20opBIQL/A7JoeQNhzFOliiJsTAb8D5Ro= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:12 2026 by rpki-client