$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa File: 44fc710b-c76f-3e56-a52b-543174209f1d.roa (raw, json) Hash identifier: 392GQdPt8RAlkFFJ/McVD0El+OhXojpsueVs+ScgOY8= Subject key identifier: FE:1C:B1:FC:79:B9:4D:EC:38:30:F1:03:29:9B:48:20:D7:F1:C3:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE79007039C475ADDF180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 211156 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e7:90:07:03:9c:47:5a:dd:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=2d1d43f3-c124-4e86-9c82-412a18340e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:9e:e9:db:c1:98:c1:18:9e:6c:83:6f:d7: b2:e2:8e:b5:c7:d7:20:73:3b:53:fa:f1:17:13:c0: 59:8c:c8:68:bc:91:4c:74:44:4b:db:a0:ca:9d:5d: 33:51:44:dd:18:a5:cf:6f:53:5a:ca:82:e2:dc:cf: 48:b3:8a:81:6f:32:64:dd:c3:80:f8:18:1e:ef:73: 72:f1:5c:b7:e8:dd:8b:02:5b:00:25:ac:a9:e5:4b: 6b:68:c0:6f:52:25:32:c9:e3:5f:91:28:f9:20:df: 6e:09:b2:d3:53:0f:5f:6e:54:d8:70:2d:b2:07:5b: 7d:a7:91:09:a2:2b:6c:2b:e4:91:99:6a:7f:19:b0: fb:28:c9:0e:04:8e:9b:1f:e4:ab:71:ef:b8:34:96: 31:d8:fe:52:25:c2:56:16:ba:05:c7:fa:0d:f1:66: 47:02:9a:c2:ae:e4:92:8d:c3:96:91:fe:e5:a9:a3: 31:db:0e:c6:ea:f4:2e:f0:da:87:b2:15:26:59:fc: 13:a5:df:74:4a:63:66:df:ce:23:c8:64:6d:88:b8: 25:2e:b1:2c:62:7b:c9:24:3e:c0:66:6f:ad:54:e8: c4:63:c9:3c:66:4e:75:44:49:14:3d:76:75:25:4e: 68:a4:9d:b1:f4:12:cc:4b:27:62:c8:a9:68:34:1e: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1C:B1:FC:79:B9:4D:EC:38:30:F1:03:29:9B:48:20:D7:F1:C3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44fc710b-c76f-3e56-a52b-543174209f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:69:de:99:ee:d2:51:80:70:f3:c5:ad:16:94:5e:96:c5:e9: b3:46:f9:26:99:ea:22:e7:7e:dc:62:2c:30:83:55:1f:96:98: 78:04:e0:cf:d7:5e:17:73:de:c8:74:0a:0f:e0:ed:6c:41:5e: c8:96:e2:3c:38:22:0a:e8:ae:19:00:4b:42:14:fb:14:51:0d: 16:97:79:c3:6c:83:bd:14:07:e9:26:dd:8d:09:99:80:c8:9b: c9:f7:8c:f8:81:a2:e8:cf:4b:ff:fa:49:7f:a6:94:57:1c:27: f3:6e:9a:0f:1b:1b:2f:d8:17:40:03:ee:86:dc:d9:6f:55:6f: 9b:74:c4:3a:e5:0b:e9:69:85:3b:ad:d7:2a:bb:1f:2f:b4:70: 21:3a:21:89:83:e5:58:a5:90:db:23:49:69:6b:f1:59:d4:3b: 99:d9:09:57:55:b6:cd:41:25:71:fa:be:16:8b:0b:7e:38:6f: 95:ef:1f:81:9f:e5:00:5d:d7:e6:41:04:9e:54:e6:de:a2:95: 8e:8e:12:8a:fa:69:bf:a7:4c:24:f1:37:1a:15:db:6a:ae:26: 66:17:b3:ff:eb:84:21:79:a8:7f:84:f3:d1:ff:e1:e1:a8:99: 63:84:08:93:e3:e0:a6:56:27:72:f3:88:94:ce:2a:7d:19:d1: 1a:58:62:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feeQBwOcR1rd8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MmQxZDQzZjMtYzEyNC00ZTg2LTljODItNDEyYTE4MzQwZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Ke6dvBmMEYnmyDb9ey4o61x9cgcztT+vEX E8BZjMhovJFMdERL26DKnV0zUUTdGKXPb1NayoLi3M9Is4qBbzJk3cOA+Bge73Ny 8Vy36N2LAlsAJayp5UtraMBvUiUyyeNfkSj5IN9uCbLTUw9fblTYcC2yB1t9p5EJ oitsK+SRmWp/GbD7KMkOBI6bH+Srce+4NJYx2P5SJcJWFroFx/oN8WZHAprCruSS jcOWkf7lqaMx2w7G6vQu8NqHshUmWfwTpd90SmNm384jyGRtiLglLrEsYnvJJD7A Zm+tVOjEY8k8Zk51REkUPXZ1JU5opJ2x9BLMSydiyKloNB7R4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4csfx5uU3sODDxAymbSCDX8cNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDRmYzcxMGItYzc2Zi0z ZTU2LWE1MmItNTQzMTc0MjA5ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRp3pnu0lGAcPPFrRaUXpbF6bNG+SaZ6iLnftxiLDCDVR+WmHgE 4M/XXhdz3sh0Cg/g7WxBXsiW4jw4IgrorhkAS0IU+xRRDRaXecNsg70UB+km3Y0J mYDIm8n3jPiBoujPS//6SX+mlFccJ/Numg8bGy/YF0AD7obc2W9Vb5t0xDrlC+lp hTut1yq7Hy+0cCE6IYmD5VilkNsjSWlr8VnUO5nZCVdVts1BJXH6vhaLC344b5Xv H4Gf5QBd1+ZBBJ5U5t6ilY6OEor6ab+nTCTxNxoV22quJmYXs//rhCF5qH+E89H/ 4eGomWOECJPj4KZWJ3LziJTOKn0Z0RpYYqQ= -----END CERTIFICATE-----Generated at Sat Oct 24 10:44:57 2026 by rpki-client