$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa File: 433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa (raw, json) Hash identifier: m4DNTlKRWsJZg/7uR4DmQ56XeAPdm7OFmfoYCaRuS9g= Subject key identifier: 27:8D:C2:1B:39:C3:E3:78:93:C6:C7:07:21:22:47:C4:7B:D6:61:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE548B619BD9F97B9D340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 51765 IP address blocks: 2001:470:25f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e5:48:b6:19:bd:9f:97:b9:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=1dba17b7-630a-44dc-a9ae-4309bbb84a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:52:f5:30:bc:52:2a:a0:fa:fe:de:1d:46:1f: 2e:c7:78:84:b0:d6:c2:9c:63:eb:c4:61:53:78:83: 31:e1:60:c4:fc:b2:37:a4:76:e4:48:fc:a2:bb:f7: 9c:8f:12:a2:5d:67:24:ca:ef:a2:7f:a7:80:b6:4d: 57:51:02:81:fa:68:7b:e3:9e:18:77:7d:4d:1a:68: c5:fb:52:c4:07:72:65:6a:d6:9e:83:c9:0c:75:f2: 8c:64:bf:0b:ce:88:0a:e7:92:0b:4b:a7:95:81:c3: 18:a5:dd:b5:5a:f1:ee:e2:5c:09:da:f8:35:86:92: 6e:88:7b:80:4a:83:51:7f:b6:88:53:4a:15:5a:42: 53:8e:32:6e:2c:28:3d:c0:66:a4:b6:95:2c:2a:1a: 1b:db:89:e9:05:76:d0:97:10:6a:d6:59:48:e8:6c: cc:3e:69:2f:d0:85:22:e0:1c:c5:31:39:0e:75:0e: 26:54:5a:45:b1:d9:04:e3:e8:52:e2:6e:eb:95:b4: 92:19:46:84:b3:46:70:57:38:03:6a:52:be:49:2e: 8f:1a:ff:dc:8f:08:af:3a:be:51:d6:7c:94:08:12: e1:59:fa:fa:53:cd:26:9a:5c:df:20:20:e8:a1:a8: 55:19:1d:b2:fd:08:45:98:38:1b:44:4d:a5:72:a9: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:C2:1B:39:C3:E3:78:93:C6:C7:07:21:22:47:C4:7B:D6:61:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/433c90f6-79c2-325f-9f2f-8ea52eaa23b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:01:56:50:c5:41:c2:e6:28:16:63:ff:21:5b:a7:d8:91:79: 82:49:f2:b5:80:3f:95:4b:5e:d1:03:69:db:77:2d:88:4a:c8: ff:9d:a0:40:1f:bb:84:95:1d:63:6c:1a:b8:a6:f1:b2:59:85: ad:b8:24:1f:51:a5:ee:9d:73:13:ae:be:a1:37:56:e3:95:45: e8:66:74:2f:86:7b:54:f7:c7:37:cf:ee:ea:ee:fd:21:15:77: 73:89:c0:91:d1:99:75:f1:4a:1d:7b:30:71:ca:0d:74:bb:04: c2:65:e9:90:7a:4e:3e:72:f2:8e:69:a0:e2:8a:44:ba:44:b6: a4:50:41:97:af:0a:56:49:4f:1b:1e:c3:92:0b:90:a2:9d:0c: 27:93:e1:2d:4e:77:78:1a:38:bc:eb:d6:4f:72:00:55:7d:c0: e7:32:92:4a:1e:40:d9:ac:49:41:fd:f4:46:55:68:ad:64:ef: 21:af:57:6e:59:1a:3a:41:ab:9e:f3:49:ba:bc:66:07:4e:8e: 70:96:41:72:8e:a0:8d:ae:96:2a:51:0f:a3:73:fc:15:21:00: 2d:c5:9d:44:10:36:27:69:9f:72:d9:79:ed:79:7e:e4:72:65: 09:24:46:d8:50:5d:ca:14:c1:c9:43:e1:20:9d:d6:06:c7:8f: 7f:5f:53:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feVIthm9n5e500AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MWRiYTE3YjctNjMwYS00NGRjLWE5YWUtNDMwOWJiYjg0YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lL1MLxSKqD6/t4dRh8ux3iEsNbCnGPrxGFT eIMx4WDE/LI3pHbkSPyiu/ecjxKiXWckyu+if6eAtk1XUQKB+mh7454Yd31NGmjF +1LEB3Jlataeg8kMdfKMZL8LzogK55ILS6eVgcMYpd21WvHu4lwJ2vg1hpJuiHuA SoNRf7aIU0oVWkJTjjJuLCg9wGaktpUsKhob24npBXbQlxBq1llI6GzMPmkv0IUi 4BzFMTkOdQ4mVFpFsdkE4+hS4m7rlbSSGUaEs0ZwVzgDalK+SS6PGv/cjwivOr5R 1nyUCBLhWfr6U80mmlzfICDooahVGR2y/QhFmDgbRE2lcqlnqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCeNwhs5w+N4k8bHByEiR8R71mHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMzYzkwZjYtNzljMi0z MjVmLTlmMmYtOGVhNTJlYWEyM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkBVlDFQcLmKBZj/yFbp9iReYJJ8rWAP5VLXtEDadt3LYhKyP+d oEAfu4SVHWNsGrim8bJZha24JB9Rpe6dcxOuvqE3VuOVRehmdC+Ge1T3xzfP7uru /SEVd3OJwJHRmXXxSh17MHHKDXS7BMJl6ZB6Tj5y8o5poOKKRLpEtqRQQZevClZJ Txsew5ILkKKdDCeT4S1Od3gaOLzr1k9yAFV9wOcykkoeQNmsSUH99EZVaK1k7yGv V25ZGjpBq57zSbq8ZgdOjnCWQXKOoI2ulipRD6Nz/BUhAC3FnUQQNidpn3LZee15 fuRyZQkkRthQXcoUwclD4SCd1gbHj39fU7w= -----END CERTIFICATE-----Generated at Tue Oct 20 02:52:51 2026 by rpki-client