$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa File: 5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa (raw, json) Hash identifier: yDOUc7w8X6+AgA6hAeTZ5gOx1WokiCRqoVGAxZ5K6Rs= Subject key identifier: 77:63:DE:CD:AA:D4:F9:F9:AA:91:7E:21:7C:35:F1:2E:AB:14:85:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE197DC00B843DD646E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36728 IP address blocks: 2001:470:196::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e1:97:dc:00:b8:43:dd:64:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=a154b585-899b-408e-9c79-bec87e8684ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:bc:f4:81:30:3d:8a:1f:f1:0c:f9:63:b6: 04:ed:4b:0f:0d:d6:1f:3c:5d:77:e8:26:14:b7:6b: e6:cd:01:f7:16:0a:13:ce:9a:31:d7:6b:66:83:f6: 1b:88:ef:44:17:e7:63:5b:47:62:7e:2e:f4:8b:cf: a6:3b:6f:08:45:28:b5:b4:ca:ad:af:3f:2e:3a:07: 19:c0:c8:59:1f:09:69:c6:36:90:43:d3:dc:b6:c0: 3a:99:f1:37:cf:bc:42:70:ce:eb:a3:c4:be:10:34: 72:4f:90:b3:4d:13:8b:d2:85:07:9b:f7:be:3b:51: b6:19:71:1a:41:1d:62:6f:e9:c3:8b:d4:72:0e:68: f5:fd:9b:87:28:cc:c4:02:37:58:96:ed:84:e3:9d: be:8a:27:bd:9f:a2:9e:b8:e9:4c:45:23:57:2d:dc: 03:3a:c3:7b:1c:c9:27:56:45:dc:bb:33:02:ac:45: ae:b6:98:5c:62:77:0e:eb:00:61:5e:61:49:8e:d7: 72:ea:c7:14:24:04:46:a3:13:e4:ae:56:e1:e3:8f: b6:49:3c:2a:a8:ab:93:32:a5:2c:3f:e6:39:80:11: 62:23:61:1b:2e:03:db:7a:4c:31:85:3d:d2:dc:58: 1e:cd:f7:27:b7:49:1a:e2:ad:72:f2:37:eb:1a:89: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:DE:CD:AA:D4:F9:F9:AA:91:7E:21:7C:35:F1:2E:AB:14:85:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a61c6c6-cf64-3017-92e8-2b37a6aab5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:196::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2e:29:e7:f0:b2:c1:79:cb:19:c3:d8:e7:b5:66:e2:01:9b: 47:44:40:22:4b:84:51:52:ac:30:40:6f:63:79:23:12:a5:19: 00:e4:17:02:08:9e:ac:fd:53:a6:6f:db:05:68:ca:bd:a8:7d: a0:3a:f7:92:8d:cd:28:d0:a5:19:85:79:95:4a:dd:62:11:2d: 2a:75:ca:bb:b6:87:18:f1:bb:ac:fe:ae:bf:7e:c0:6c:1c:14: 80:76:1f:e0:f8:09:30:a2:2e:f2:3d:ae:f2:d0:88:4a:66:a6: ea:e8:b8:46:1a:5e:af:44:c7:e5:e0:18:78:e1:08:92:b9:dd: e1:5a:47:f4:4a:98:44:f2:78:b8:cb:de:3f:7f:b0:3d:a2:b5: 36:57:06:d0:8c:03:25:d7:4c:64:41:f4:ba:8b:3e:fc:7e:3d: b2:60:de:3d:71:e4:4c:77:d8:c5:c6:59:2a:50:56:30:0a:c6: 2d:f8:63:c2:90:83:7e:5c:5c:ad:5a:dd:a6:c8:85:5b:d0:59: 7a:9d:fa:ad:77:be:03:14:84:35:34:85:70:c9:2b:2f:36:13: 6a:18:c2:1b:60:95:cb:10:b2:cc:65:c6:cf:02:1b:87:5f:7d: 1e:59:a6:0a:3c:d3:0f:d6:3e:43:aa:e9:6a:80:8a:86:79:82: 74:31:78:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feGX3AC4Q91kboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTE1NGI1ODUtODk5Yi00MDhlLTljNzktYmVjODdlODY4NGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k+89IEwPYof8Qz5Y7YE7UsPDdYfPF136CYU t2vmzQH3FgoTzpox12tmg/YbiO9EF+djW0difi70i8+mO28IRSi1tMqtrz8uOgcZ wMhZHwlpxjaQQ9PctsA6mfE3z7xCcM7ro8S+EDRyT5CzTROL0oUHm/e+O1G2GXEa QR1ib+nDi9RyDmj1/ZuHKMzEAjdYlu2E452+iie9n6KeuOlMRSNXLdwDOsN7HMkn VkXcuzMCrEWutphcYncO6wBhXmFJjtdy6scUJARGoxPkrlbh44+2STwqqKuTMqUs P+Y5gBFiI2EbLgPbekwxhT3S3Fgezfcnt0ka4q1y8jfrGonb9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdj3s2q1Pn5qpF+IXw18S6rFIUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE2MWM2YzYtY2Y2NC0z MDE3LTkyZTgtMmIzN2E2YWFiNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8uKefwssF5yxnD2Oe1ZuIBm0dEQCJLhFFSrDBAb2N5IxKlGQDk FwIInqz9U6Zv2wVoyr2ofaA695KNzSjQpRmFeZVK3WIRLSp1yru2hxjxu6z+rr9+ wGwcFIB2H+D4CTCiLvI9rvLQiEpmpurouEYaXq9Ex+XgGHjhCJK53eFaR/RKmETy eLjL3j9/sD2itTZXBtCMAyXXTGRB9LqLPvx+PbJg3j1x5Ex32MXGWSpQVjAKxi34 Y8KQg35cXK1a3abIhVvQWXqd+q13vgMUhDU0hXDJKy82E2oYwhtglcsQssxlxs8C G4dffR5Zpgo80w/WPkOq6WqAioZ5gnQxeL0= -----END CERTIFICATE-----Generated at Sat Oct 24 00:23:44 2026 by rpki-client