$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa File: 5139b17c-60f3-30dc-b04e-9e056ee507d1.roa (raw, json) Hash identifier: 2N40l81H4Wxi+oYu+eoZQ4rEzHCHXotR4NBTAG6fiKk= Subject key identifier: E3:23:FA:0B:D5:24:E3:10:BA:E1:C4:00:59:4D:4D:D1:38:B3:CC:10 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE1470E31872B1F6BA500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 395517 IP address blocks: 2001:470:164::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e1:47:0e:31:87:2b:1f:6b:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=9a31d00b-cc5b-40d8-99b4-ecaf9e21ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:df:69:28:08:09:93:3a:e0:7b:21:49:11: e7:62:e6:36:1e:80:ff:b1:e8:40:73:72:62:8e:40: 78:38:17:0d:67:69:57:bd:b3:35:5a:b1:22:b8:b5: b1:73:7b:28:83:9f:59:e5:2c:61:34:9d:81:90:ad: 08:4c:61:f6:3f:e6:eb:6c:25:e7:b9:73:d4:f6:5b: 4e:73:79:08:82:58:f4:fe:fc:8e:29:f2:fd:44:e2: f8:a2:b6:73:f7:3a:81:9c:c0:d6:83:36:35:de:a6: 1e:87:26:0a:b6:0f:b4:b7:ee:61:71:b4:5c:01:37: 89:7b:a6:87:03:8b:0a:01:2f:71:3f:a5:c3:74:1b: 65:8e:4a:54:ca:ad:b7:fb:10:dc:8a:61:d4:3c:56: 37:75:54:60:5f:2e:27:3b:92:36:46:ac:36:0f:c4: ce:d9:fb:e2:d8:bd:39:38:01:13:c1:b0:0f:46:6d: 21:dd:3e:a9:b2:6b:22:72:f8:cc:80:51:87:2c:88: d6:dd:35:cb:67:ab:90:1b:2f:91:46:a2:1d:98:cb: 6e:77:8d:92:ca:e5:f8:03:bb:0c:9f:90:58:5a:05: ca:ec:af:9e:65:86:59:c6:71:a7:71:c1:d8:1b:8d: ec:40:fb:f4:83:2c:f4:47:b0:02:69:9c:57:fb:dd: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:23:FA:0B:D5:24:E3:10:BA:E1:C4:00:59:4D:4D:D1:38:B3:CC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:164::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e2:48:48:0d:e9:e3:ed:fb:a5:bb:7d:db:5a:93:1d:57:54: a8:fc:cc:1c:fc:84:eb:8e:25:3a:0c:46:c6:c8:01:54:9e:80: 04:c9:dd:85:a5:33:45:fb:f6:92:b8:df:0f:2c:2a:e9:1c:b9: da:d2:9e:87:75:63:e5:e7:63:3b:34:ef:21:b1:7e:1a:48:e3: 4c:92:e4:9c:3f:12:66:ab:fe:e2:c2:9f:61:16:a6:d7:45:35: df:22:c0:f5:9d:a2:61:fe:9b:6c:c3:98:92:e4:f9:47:0f:a1: 4d:5a:20:1c:02:8d:34:20:a3:6d:dd:2e:cd:63:19:c9:84:71: af:0c:65:c5:11:fe:33:30:bd:47:93:c7:f5:7e:61:81:ff:03: ee:d1:17:90:c9:7d:0b:52:7a:74:ab:83:2c:17:1c:a3:58:61: 88:5a:4a:a6:18:12:56:94:3e:c9:61:ce:89:08:6c:91:61:9b: 24:83:cd:0e:30:95:0f:6c:a9:59:d0:18:9f:9b:ef:6b:58:1a: 9a:7d:03:92:a7:79:28:a1:1f:cd:88:aa:b8:a6:24:8d:c3:1b: 40:6e:48:9f:e6:1e:49:11:45:ec:1a:8c:3b:72:75:f4:d5:73: e6:a0:da:a2:b3:9b:b9:d7:b2:d1:1a:60:dc:34:32:66:8b:04: 78:01:2e:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feFHDjGHKx9rpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OWEzMWQwMGItY2M1Yi00MGQ4LTk5YjQtZWNhZjllMjFhYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSvfaSgICZM64HshSRHnYuY2HoD/sehAc3Ji jkB4OBcNZ2lXvbM1WrEiuLWxc3sog59Z5SxhNJ2BkK0ITGH2P+brbCXnuXPU9ltO c3kIglj0/vyOKfL9ROL4orZz9zqBnMDWgzY13qYehyYKtg+0t+5hcbRcATeJe6aH A4sKAS9xP6XDdBtljkpUyq23+xDcimHUPFY3dVRgXy4nO5I2Rqw2D8TO2fvi2L05 OAETwbAPRm0h3T6psmsicvjMgFGHLIjW3TXLZ6uQGy+RRqIdmMtud42SyuX4A7sM n5BYWgXK7K+eZYZZxnGnccHYG43sQPv0gyz0R7ACaZxX+90VYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOMj+gvVJOMQuuHEAFlNTdE4s8wQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTEzOWIxN2MtNjBmMy0z MGRjLWIwNGUtOWUwNTZlZTUwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHiSEgN6ePt+6W7fdtakx1XVKj8zBz8hOuOJToMRsbIAVSegATJ 3YWlM0X79pK43w8sKukcudrSnod1Y+XnYzs07yGxfhpI40yS5Jw/Emar/uLCn2EW ptdFNd8iwPWdomH+m2zDmJLk+UcPoU1aIBwCjTQgo23dLs1jGcmEca8MZcUR/jMw vUeTx/V+YYH/A+7RF5DJfQtSenSrgywXHKNYYYhaSqYYElaUPslhzokIbJFhmySD zQ4wlQ9sqVnQGJ+b72tYGpp9A5KneSihH82IqrimJI3DG0BuSJ/mHkkRRewajDty dfTVc+ag2qKzm7nXstEaYNw0MmaLBHgBLiA= -----END CERTIFICATE-----Generated at Sun Nov 1 14:50:49 2026 by rpki-client