$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa File: 4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa (raw, json) Hash identifier: J0KmnPG41X7QmhkBTciuP7B7cU+lvEoJZtOPr+VAMEk= Subject key identifier: BA:2C:71:E2:02:84:4F:E0:40:5D:ED:04:39:8F:0E:4E:45:57:59:F8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC923CE3B74A1E6106ED1180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 41872 IP address blocks: 2001:470:227::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:3c:e3:b7:4a:1e:61:06:ed:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=4b1bea28-4a23-4b11-8e66-e798ba3a88e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:11:ec:f3:ee:b0:be:f1:ef:64:14:1e:a7: 9b:a8:99:d7:34:1e:6a:7a:c9:7e:cd:a7:fc:96:57: db:19:69:c1:b5:24:be:71:1d:7c:f5:53:b2:6e:72: ed:25:b1:b4:f8:6f:ad:98:52:4a:d8:01:01:97:d1: 5d:62:9b:02:fd:38:5c:a5:a5:80:fe:7e:0f:0a:56: 48:7a:b2:10:ce:4a:9d:4e:0c:c9:a1:45:95:5c:05: b5:36:d3:cc:0a:4e:ca:42:75:97:35:91:9d:02:6c: de:75:85:98:e9:a8:22:33:f6:69:3d:88:f5:3c:45: a9:92:1b:bb:af:a2:90:2d:13:2f:8c:7d:05:f7:cc: 47:ec:d6:5d:6a:0c:fd:cc:79:e2:3b:c7:f8:7a:c7: 6d:92:a6:93:69:58:c0:5a:4e:4a:27:82:ac:86:25: f5:10:80:7c:86:01:d6:46:d9:24:8c:8c:f3:a4:9d: 97:02:48:05:da:35:4b:78:90:f1:11:84:af:ac:c4: 00:52:2b:1d:81:1a:62:67:0e:74:41:a3:56:5d:00: 1a:d4:12:2d:14:7b:52:65:92:7c:8c:b6:ae:f5:1d: fb:af:a3:63:a2:46:e1:b1:0d:05:35:8e:8a:99:8d: 29:c8:da:67:4f:db:66:09:5b:6b:14:77:d1:91:0f: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:71:E2:02:84:4F:E0:40:5D:ED:04:39:8F:0E:4E:45:57:59:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e8cb6f9-f19e-3005-b9b9-e5b6280f5590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:227::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:db:33:3b:d9:d0:0d:f4:16:2e:83:5c:65:1c:fa:9a:3e:d8: 66:84:fc:4b:06:c8:8c:83:f5:97:fb:2a:f7:a3:a7:98:76:f5: d9:cf:0a:1c:38:ba:fe:de:92:4a:f8:83:7a:d4:1a:c6:09:4a: 71:ac:51:55:81:b3:b9:31:f7:14:7a:7d:01:ef:63:9a:99:c1: a4:71:7b:d1:88:3b:b8:c7:3c:4d:22:19:b0:06:4e:58:53:a7: 0a:67:3f:56:32:c3:6b:b6:06:58:01:8b:2d:54:e8:26:5e:16: 51:7a:36:56:3f:9a:2e:93:a0:64:fb:03:f7:42:63:f6:d5:37: 61:1f:fd:d1:31:a2:28:b1:90:3b:81:1a:9e:1a:20:0f:b9:e0: 9d:0b:99:a5:a0:b3:62:9c:43:6c:10:d3:9a:c5:d0:5b:b5:0e: 33:8e:6e:bc:6a:32:5b:03:3f:5c:df:90:f1:fd:c3:95:31:70: c9:a5:1a:c4:63:9f:6a:1a:99:5e:79:5e:c1:b8:49:80:68:72: ba:fa:d7:78:b9:2c:3b:3d:ac:4b:32:b0:a6:de:09:2a:5f:87: 57:ee:30:a3:0e:d3:3d:c6:42:5f:bc:7a:c2:2f:07:2a:0f:40: fc:71:6a:d4:21:ff:7a:06:74:49:6f:cc:ae:92:56:2a:2f:70: d2:6a:6d:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckjzjt0oeYQbtEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NGIxYmVhMjgtNGEyMy00YjExLThlNjYtZTc5OGJhM2E4OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqER7PPusL7x72QUHqebqJnXNB5qesl+zaf8 llfbGWnBtSS+cR189VOybnLtJbG0+G+tmFJK2AEBl9FdYpsC/ThcpaWA/n4PClZI erIQzkqdTgzJoUWVXAW1NtPMCk7KQnWXNZGdAmzedYWY6agiM/ZpPYj1PEWpkhu7 r6KQLRMvjH0F98xH7NZdagz9zHniO8f4esdtkqaTaVjAWk5KJ4KshiX1EIB8hgHW RtkkjIzzpJ2XAkgF2jVLeJDxEYSvrMQAUisdgRpiZw50QaNWXQAa1BItFHtSZZJ8 jLau9R37r6NjokbhsQ0FNY6KmY0pyNpnT9tmCVtrFHfRkQ/xZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLosceIChE/gQF3tBDmPDk5FV1n4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGU4Y2I2ZjktZjE5ZS0z MDA1LWI5YjktZTViNjI4MGY1NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKLbMzvZ0A30Fi6DXGUc+po+2GaE/EsGyIyD9Zf7Kvejp5h29dnP Chw4uv7ekkr4g3rUGsYJSnGsUVWBs7kx9xR6fQHvY5qZwaRxe9GIO7jHPE0iGbAG TlhTpwpnP1Yyw2u2BlgBiy1U6CZeFlF6NlY/mi6ToGT7A/dCY/bVN2Ef/dExoiix kDuBGp4aIA+54J0LmaWgs2KcQ2wQ05rF0Fu1DjOObrxqMlsDP1zfkPH9w5UxcMml GsRjn2oamV55XsG4SYBocrr613i5LDs9rEsysKbeCSpfh1fuMKMO0z3GQl+8esIv ByoPQPxxatQh/3oGdElvzK6SViovcNJqbUw= -----END CERTIFICATE-----Generated at Sat Sep 12 22:59:18 2026 by rpki-client