$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56d98ff9-2246-3f81-a017-b3f5139d6197.roa File: 56d98ff9-2246-3f81-a017-b3f5139d6197.roa (raw, json) Hash identifier: ozPnRpOWVeAsAdv4fwOBsnQ8AGWN7BZZc4cWAqA6tNU= Subject key identifier: 1A:E2:EB:94:0A:3E:4D:C7:52:81:9E:37:B0:D1:7C:48:E8:CC:34:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F20F7A581DF4790FE9C74ABE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56d98ff9-2246-3f81-a017-b3f5139d6197.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 33621 IP address blocks: 2001:470:2bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:81:df:47:90:fe:9c:74:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=88adcff1-cbbb-400f-963a-11b41959893d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:e3:6a:b9:d8:b5:3b:7b:94:be:79:b0:de: ef:01:59:d9:42:19:08:d9:6f:26:59:5b:40:01:2e: 01:00:ce:58:62:99:4f:67:21:04:49:13:f4:c6:a0: 5b:87:09:cb:5c:bf:f9:ab:81:fe:5a:e5:f6:b3:ea: 5f:f6:ce:57:21:f9:b8:ce:81:33:0c:6a:e3:f5:06: 83:03:4f:34:f2:ec:87:2b:c9:3e:11:e1:da:f2:a6: 3c:1c:28:98:17:dc:3f:85:3e:9a:5d:af:82:c2:ea: 2f:49:6e:64:03:52:e4:14:72:1d:29:6a:3f:34:1d: 86:a5:d6:a8:21:fd:4e:70:19:3b:9b:92:e3:e3:f4: 02:7b:1a:04:d4:78:66:b7:a5:2d:1a:93:93:12:59: b4:7b:c0:ed:a2:92:06:23:28:11:0c:80:fe:39:d9: f5:3d:c4:7b:a0:31:e8:9c:e2:9e:18:8a:6a:48:24: 2a:f8:3a:92:6a:af:ab:f1:75:46:5f:27:21:56:ef: 09:be:2e:30:e3:d8:b7:5f:83:9c:b9:6e:47:22:38: 74:3e:b2:b3:42:9d:39:60:16:5a:3e:a8:d1:56:1a: a4:87:eb:4c:f7:a6:af:59:7f:50:aa:83:ab:4b:9c: 89:47:84:ec:d6:39:30:77:e5:77:e6:fa:13:34:06: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:EB:94:0A:3E:4D:C7:52:81:9E:37:B0:D1:7C:48:E8:CC:34:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56d98ff9-2246-3f81-a017-b3f5139d6197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:41:e5:ef:34:b6:e0:ae:42:11:d2:d2:5d:b6:de:ba:09:96: 15:7e:25:d0:e2:02:3b:25:36:e1:f4:46:7d:83:0c:e9:ae:f4: aa:cd:d4:c3:c9:40:ba:62:85:d2:09:f7:6c:84:0f:bc:33:fe: 5a:e5:88:f3:6e:b6:fa:84:6f:2f:35:f6:36:98:97:bf:54:1f: 59:25:6b:5e:bc:03:73:ca:9c:1a:2e:5f:c2:d3:6b:7d:54:63: d9:5e:a9:8d:fa:1a:d8:e3:ba:7c:d6:60:b2:28:2b:84:1c:86: fe:fa:ab:d0:a2:e9:e6:8e:c6:4d:13:fa:6d:a9:24:24:be:c6: 30:2c:80:38:28:37:e7:3b:6b:bc:de:5a:f9:4c:df:df:62:53: ef:9a:4a:49:58:0a:07:9b:b6:0b:99:34:29:cc:f0:7f:7b:c1: e2:88:96:58:5a:16:30:02:4e:00:58:cb:bb:28:9a:c3:9b:84: 71:42:46:a4:65:1f:70:a8:c0:52:59:e1:f1:dd:59:df:28:04: a9:cb:31:5d:91:1e:11:12:5b:01:ce:dd:a7:7d:8e:05:e6:98: e4:30:d9:ca:cd:8d:43:fe:f6:02:b6:39:f7:cb:14:c4:20:e8: 53:6b:7f:e4:27:5a:22:d3:4a:20:57:58:27:ec:0c:fd:f6:f0: 12:86:cd:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g96WB30eQ/px0q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODhhZGNmZjEtY2JiYi00MDBmLTk2M2EtMTFiNDE5NTk4OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4zjarnYtTt7lL55sN7vAVnZQhkI2W8mWVtA AS4BAM5YYplPZyEESRP0xqBbhwnLXL/5q4H+WuX2s+pf9s5XIfm4zoEzDGrj9QaD A0808uyHK8k+EeHa8qY8HCiYF9w/hT6aXa+CwuovSW5kA1LkFHIdKWo/NB2Gpdao If1OcBk7m5Lj4/QCexoE1Hhmt6UtGpOTElm0e8DtopIGIygRDID+Odn1PcR7oDHo nOKeGIpqSCQq+DqSaq+r8XVGXychVu8Jvi4w49i3X4OcuW5HIjh0PrKzQp05YBZa PqjRVhqkh+tM96avWX9QqoOrS5yJR4Ts1jkwd+V35voTNAZ0pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBri65QKPk3HUoGeN7DRfEjozDShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTZkOThmZjktMjI0Ni0z ZjgxLWEwMTctYjNmNTEzOWQ2MTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5B5e80tuCuQhHS0l223roJlhV+JdDiAjslNuH0Rn2DDOmu9KrN 1MPJQLpihdIJ92yED7wz/lrliPNutvqEby819jaYl79UH1kla168A3PKnBouX8LT a31UY9leqY36GtjjunzWYLIoK4Qchv76q9Ci6eaOxk0T+m2pJCS+xjAsgDgoN+c7 a7zeWvlM399iU++aSklYCgebtguZNCnM8H97weKIllhaFjACTgBYy7somsObhHFC RqRlH3CowFJZ4fHdWd8oBKnLMV2RHhESWwHO3ad9jgXmmOQw2crNjUP+9gK2OffL FMQg6FNrf+QnWiLTSiBXWCfsDP328BKGzdc= -----END CERTIFICATE-----Generated at Sat Sep 19 08:29:05 2026 by rpki-client