$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa File: 4d40b93d-acec-38dd-9713-18db9799f2d9.roa (raw, json) Hash identifier: v+ciAG9/VWDEoQAqUvTs/buJTtOgbuhzq/5pOcT3HwE= Subject key identifier: 29:20:13:26:1C:0B:2E:92:F4:13:40:48:B1:8A:E6:95:F1:14:1D:FD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE6E4B985567DAA09B280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 20432 IP address blocks: 2001:470:295::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e6:e4:b9:85:56:7d:aa:09:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=787e2022-7f71-4bfe-9f05-78ff4a6905fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:87:da:dc:a8:ef:cc:d3:52:ee:60:8b:bc: 92:b3:b3:6b:13:65:2c:e0:9e:a7:4f:21:7e:17:9d: 1b:ff:33:6b:3a:23:25:f1:2d:70:1b:9c:7e:df:0e: 3a:17:4a:38:46:40:46:d8:79:d4:0f:3d:cc:84:32: 67:da:43:81:e0:9a:fc:14:34:7d:b9:90:a3:fe:ef: 5a:d4:31:6b:2c:4a:f0:39:55:7a:33:9f:72:ea:07: ff:9e:26:55:78:59:a3:5d:12:c3:d6:03:74:22:c0: d4:80:fe:03:83:41:1d:d6:3f:f3:6e:4f:17:d2:2b: e7:d9:c6:03:ac:07:01:83:cc:df:b5:2b:c8:ee:24: 15:ef:e8:07:64:13:41:75:91:06:f4:aa:88:38:08: 4f:20:a0:05:c1:fb:5b:48:9b:62:bd:a4:85:83:bb: f7:47:c6:37:ea:5c:c6:ae:cf:39:6a:c8:20:1e:6e: 66:d0:9f:70:24:1f:a8:a1:9b:bf:b7:57:24:36:fd: b9:a8:cc:cc:91:2f:80:fe:1a:42:d6:6a:b4:af:00: cb:a9:91:da:b8:47:39:6f:a7:e1:57:30:ad:d4:4b: be:81:ed:39:65:00:bb:f2:cb:33:d7:8e:2f:e9:34: 86:fa:19:93:2c:a1:87:61:69:70:0d:db:f0:58:30: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:13:26:1C:0B:2E:92:F4:13:40:48:B1:8A:E6:95:F1:14:1D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d40b93d-acec-38dd-9713-18db9799f2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:295::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:71:a8:b0:cf:94:51:37:23:88:43:0e:06:1a:f4:1c:75:34: 76:99:b8:e1:b6:da:26:ae:b8:55:5c:e0:c5:0c:df:28:94:be: f3:e2:d5:4f:f5:12:c8:c4:58:27:9a:53:3f:e3:62:27:59:95: 5e:ad:10:1c:fc:f1:7f:43:15:52:06:5a:47:f8:d5:43:16:96: 37:bc:dc:bb:ea:7a:43:d6:eb:73:8e:27:5c:b9:eb:bf:8f:6f: 37:b2:29:65:b6:76:48:d3:d2:06:25:45:04:6e:5e:8d:b6:52: f8:4e:8a:24:c9:78:63:66:07:66:8e:be:e8:b4:0e:3b:13:05: 8e:d6:e5:f6:b1:c2:03:70:01:9a:59:33:46:c9:2f:7c:5e:80: 7e:cf:18:a0:01:13:64:87:a4:10:7a:57:00:bd:a4:87:44:c9: 42:df:86:10:a2:69:2e:54:8b:70:b8:5d:d6:88:d8:fd:aa:80: 1e:25:4e:7c:20:06:ba:14:ce:6c:09:43:d8:e1:8a:05:e3:56: d0:c9:b0:3c:8b:04:f8:0c:b8:be:85:0d:05:df:00:d4:20:3a: 0f:da:0e:c7:08:89:f6:67:f5:bb:9e:0c:19:8d:62:32:07:9a: 43:6d:a5:7d:ae:dd:b5:14:3a:32:6d:c1:9e:be:5e:ed:1b:c9: 4b:38:43:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+febkuYVWfaoJsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Nzg3ZTIwMjItN2Y3MS00YmZlLTlmMDUtNzhmZjRhNjkwNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojuH2tyo78zTUu5gi7ySs7NrE2Us4J6nTyF+ F50b/zNrOiMl8S1wG5x+3w46F0o4RkBG2HnUDz3MhDJn2kOB4Jr8FDR9uZCj/u9a 1DFrLErwOVV6M59y6gf/niZVeFmjXRLD1gN0IsDUgP4Dg0Ed1j/zbk8X0ivn2cYD rAcBg8zftSvI7iQV7+gHZBNBdZEG9KqIOAhPIKAFwftbSJtivaSFg7v3R8Y36lzG rs85asggHm5m0J9wJB+ooZu/t1ckNv25qMzMkS+A/hpC1mq0rwDLqZHauEc5b6fh VzCt1Eu+ge05ZQC78ssz144v6TSG+hmTLKGHYWlwDdvwWDDauQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkgEyYcCy6S9BNASLGK5pXxFB39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGQ0MGI5M2QtYWNlYy0z OGRkLTk3MTMtMThkYjk3OTlmMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALxxqLDPlFE3I4hDDgYa9Bx1NHaZuOG22iauuFVc4MUM3yiUvvPi 1U/1EsjEWCeaUz/jYidZlV6tEBz88X9DFVIGWkf41UMWlje83LvqekPW63OOJ1y5 67+PbzeyKWW2dkjT0gYlRQRuXo22UvhOiiTJeGNmB2aOvui0DjsTBY7W5faxwgNw AZpZM0bJL3xegH7PGKABE2SHpBB6VwC9pIdEyULfhhCiaS5Ui3C4XdaI2P2qgB4l TnwgBroUzmwJQ9jhigXjVtDJsDyLBPgMuL6FDQXfANQgOg/aDscIifZn9bueDBmN YjIHmkNtpX2u3bUUOjJtwZ6+Xu0byUs4Q0g= -----END CERTIFICATE-----Generated at Sun Nov 1 18:38:59 2026 by rpki-client