$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa File: 4b517c43-ea97-343a-99fc-280d4c978941.roa (raw, json) Hash identifier: fzkyvZ+88iuIgWqKk3HNbGKXc/gHqlYG44uOu0NTo8c= Subject key identifier: 22:B2:95:E3:69:06:9F:46:B9:55:46:77:FB:B5:FA:5F:AC:95:98:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA015551D2B80F9F18ADB5E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 400535 IP address blocks: 2001:470:3ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:55:1d:2b:80:f9:f1:8a:db:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=a8a81414-6788-4ca5-8697-f6609819a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:af:89:90:bc:f7:48:59:95:9f:59:83:43: b4:9a:00:b8:57:60:de:12:0a:9f:47:be:94:50:03: aa:75:7f:9d:b1:4a:0b:7f:f0:9e:05:89:d7:15:e7: 67:70:24:93:11:a9:ae:7f:5d:07:b5:e6:60:40:f3: e1:65:5d:50:17:ed:77:8a:1b:f1:48:9f:05:6a:7e: 1c:d1:1a:d2:a6:37:17:52:13:af:b7:71:12:dd:e9: d2:80:5f:89:ca:e2:93:04:27:f3:1b:fd:63:60:cd: 85:ef:d9:7a:b5:0d:dc:d7:d4:66:25:1a:48:b9:b8: 1f:6c:53:cf:f3:f1:f4:49:a5:5d:b3:6d:fd:c0:3d: 79:d1:dd:26:fa:4e:8d:56:f8:0d:e5:f8:77:c9:36: dd:58:4e:7c:01:80:14:73:d7:32:25:34:18:77:44: 00:4b:42:c4:97:a5:74:f8:55:7b:87:16:72:e0:14: a6:56:4e:bb:fd:e4:1d:6f:73:1b:02:13:10:49:37: 6d:f0:04:4b:5e:59:92:82:6a:09:ce:35:90:80:93: b8:51:b9:bd:0d:3f:b0:43:2e:fa:78:63:cf:a8:fd: 70:c3:e6:ab:e0:9a:ea:f7:cf:ea:30:ae:f9:07:d1: 9d:4c:d6:da:2d:98:ac:62:3b:96:0a:d4:d9:d0:8f: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:95:E3:69:06:9F:46:B9:55:46:77:FB:B5:FA:5F:AC:95:98:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:30:50:b6:37:57:35:57:4b:c8:7a:3b:00:a8:1d:11:86:f0: 10:7c:50:6a:75:8d:d4:7e:6d:30:f6:77:b1:99:70:92:71:90: 23:76:3d:b2:e1:f5:6e:68:c6:a6:bf:e0:3a:1d:8f:31:77:67: 1f:88:1e:61:62:59:9e:0b:f3:c8:d5:88:e5:e2:a4:8b:a2:77: 56:5f:5a:61:be:f8:97:44:a2:e6:71:e3:3e:04:6f:3d:a7:e9: c6:6c:9f:4a:d4:96:4d:ef:2b:0e:0a:bf:4c:8e:75:a3:92:83: 23:ed:c5:16:8a:91:98:04:43:08:5e:93:aa:1c:d1:3e:4c:e3: f6:fc:ea:52:c5:78:3d:d7:9c:b3:e5:27:54:af:19:da:e8:60: 6a:fe:cd:5f:8d:c8:b0:73:c5:a9:93:43:2f:68:45:82:23:de: 5a:74:21:5e:58:dd:38:a7:cb:16:7e:60:bf:9d:32:26:1b:80: b5:62:0a:eb:7d:1f:9b:a8:60:fd:86:dd:78:9f:bf:0f:ca:a8: b0:cb:1e:e6:43:08:66:da:d6:3e:ef:51:a1:25:36:6f:16:43: 3a:f2:14:89:b4:4b:6e:bd:9a:ab:dc:07:e6:08:97:7e:90:1d: f2:0f:d6:a2:5f:c8:8a:89:7f:b4:ee:79:e6:47:34:69:fb:6d: 53:cf:15:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFVUdK4D58YrbXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YThhODE0MTQtNjc4OC00Y2E1LTg2OTctZjY2MDk4MTlhOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimviZC890hZlZ9Zg0O0mgC4V2DeEgqfR76U UAOqdX+dsUoLf/CeBYnXFedncCSTEamuf10HteZgQPPhZV1QF+13ihvxSJ8Fan4c 0RrSpjcXUhOvt3ES3enSgF+JyuKTBCfzG/1jYM2F79l6tQ3c19RmJRpIubgfbFPP 8/H0SaVds239wD150d0m+k6NVvgN5fh3yTbdWE58AYAUc9cyJTQYd0QAS0LEl6V0 +FV7hxZy4BSmVk67/eQdb3MbAhMQSTdt8ARLXlmSgmoJzjWQgJO4Ubm9DT+wQy76 eGPPqP1ww+ar4Jrq98/qMK75B9GdTNbaLZisYjuWCtTZ0I/HcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKyleNpBp9GuVVGd/u1+l+slZhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI1MTdjNDMtZWE5Ny0z NDNhLTk5ZmMtMjgwZDRjOTc4OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUwULY3VzVXS8h6OwCoHRGG8BB8UGp1jdR+bTD2d7GZcJJxkCN2 PbLh9W5oxqa/4DodjzF3Zx+IHmFiWZ4L88jViOXipIuid1ZfWmG++JdEouZx4z4E bz2n6cZsn0rUlk3vKw4Kv0yOdaOSgyPtxRaKkZgEQwhek6oc0T5M4/b86lLFeD3X nLPlJ1SvGdroYGr+zV+NyLBzxamTQy9oRYIj3lp0IV5Y3TinyxZ+YL+dMiYbgLVi Cut9H5uoYP2G3Xifvw/KqLDLHuZDCGba1j7vUaElNm8WQzryFIm0S269mqvcB+YI l36QHfIP1qJfyIqJf7TueeZHNGn7bVPPFRk= -----END CERTIFICATE-----Generated at Sat Sep 5 07:30:27 2026 by rpki-client