$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa File: 5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa (raw, json) Hash identifier: pSRnHR+FknnCQJEMBCc36E7REv6l+6maSR/1YIs7hJM= Subject key identifier: 17:85:CE:4A:DF:B2:CD:B0:92:F9:D7:C8:93:EE:AB:5B:43:8D:CD:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE414CAF7CCEB7EF0BA00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 206186 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e4:14:ca:f7:cc:eb:7e:f0:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=86217b2a-acd2-4b95-b93a-42a18172c9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:ed:da:fa:e1:c9:fa:fb:b0:37:97:11:53: 95:11:03:0d:14:85:be:7e:2a:04:1e:b9:7d:27:c3: 33:93:20:90:6d:fb:55:6a:87:84:7d:17:ed:47:f2: 3d:3b:a2:48:82:82:ee:55:31:c6:e7:e5:77:91:00: 7c:bf:d2:87:ca:27:af:ca:0a:b7:f7:c0:6e:2e:a6: 2f:64:42:3d:91:3b:45:e7:30:60:fb:a0:30:ab:e2: 35:95:ef:6e:11:ab:33:bf:3c:db:e1:82:01:bd:dd: 8a:06:90:93:c2:8d:65:f6:44:4c:84:03:ff:fa:ad: a6:4d:86:25:50:51:ab:65:97:5f:f1:3b:38:99:55: 0e:11:74:91:78:db:92:cb:01:a5:34:43:9c:70:e6: ab:bb:11:4d:4c:86:05:03:54:72:ec:fe:d8:06:90: 11:70:17:5b:ef:be:3e:0a:13:c6:08:18:49:a9:07: 08:ac:f0:49:2a:bf:bb:32:f3:35:d0:ed:e9:fd:74: 96:dc:c2:dd:4c:66:73:e9:28:a4:5b:09:f2:e5:fc: fe:90:62:f6:87:c8:25:26:3c:45:ec:cc:23:fa:db: 6c:ba:2b:c2:d0:f9:a1:d6:d5:eb:60:07:d5:c3:b3: 00:d9:17:fe:3b:6c:0f:cc:0b:d1:23:92:ed:a4:9f: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:CE:4A:DF:B2:CD:B0:92:F9:D7:C8:93:EE:AB:5B:43:8D:CD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:71:5d:24:d3:32:21:bb:48:34:b9:47:02:c1:c6:99:84:6b: d0:23:db:52:e9:27:00:e4:3b:7d:fd:d4:0e:08:99:eb:25:00: 65:cf:c4:e2:a2:a0:d5:3a:a0:0e:a3:69:53:78:d3:61:54:51: aa:5a:2e:e2:03:97:77:75:4e:31:13:b7:93:d1:44:05:5b:4d: 8d:e3:44:6b:56:ef:4f:22:0d:a1:43:17:6a:a7:0d:7b:87:ca: d9:1a:08:ec:02:70:26:5b:40:a1:b0:2d:69:0d:08:f2:2a:68: a5:57:2c:50:a2:9b:1d:61:7f:c9:c5:29:22:73:c1:b9:d0:81: 93:4a:50:e7:e4:10:ef:a9:02:fe:86:89:50:33:6f:df:27:78: 10:08:8e:df:25:da:8b:22:76:f5:71:60:22:91:59:9c:9b:6c: 17:15:d2:e2:94:4c:82:89:62:e2:b3:cb:bb:3b:4c:f6:fd:32: 5e:1c:e4:bd:3e:bb:85:7e:6d:c5:5b:7a:28:34:7b:a5:de:2a: f9:e4:94:06:1a:c2:44:eb:43:dc:83:6a:c0:09:d8:fa:c0:4b: 5b:51:72:4c:14:e5:2f:cd:eb:43:16:d2:c9:78:08:c2:6b:4d: 13:bd:09:53:20:8d:89:79:d1:a5:64:44:f0:0d:b1:0a:67:75: 42:d5:75:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feQUyvfM637wugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODYyMTdiMmEtYWNkMi00Yjk1LWI5M2EtNDJhMTgxNzJjOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIrt2vrhyfr7sDeXEVOVEQMNFIW+fioEHrl9 J8MzkyCQbftVaoeEfRftR/I9O6JIgoLuVTHG5+V3kQB8v9KHyievygq398BuLqYv ZEI9kTtF5zBg+6Awq+I1le9uEaszvzzb4YIBvd2KBpCTwo1l9kRMhAP/+q2mTYYl UFGrZZdf8Ts4mVUOEXSReNuSywGlNEOccOaruxFNTIYFA1Ry7P7YBpARcBdb774+ ChPGCBhJqQcIrPBJKr+7MvM10O3p/XSW3MLdTGZz6SikWwny5fz+kGL2h8glJjxF 7Mwj+ttsuivC0Pmh1tXrYAfVw7MA2Rf+O2wPzAvRI5LtpJ/skwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBeFzkrfss2wkvnXyJPuq1tDjc2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE3YjE0OWItYTQxYS0z ZDU5LTk1MDEtNjQxYjdmOWNjNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK9xXSTTMiG7SDS5RwLBxpmEa9Aj21LpJwDkO3391A4ImeslAGXP xOKioNU6oA6jaVN402FUUapaLuIDl3d1TjETt5PRRAVbTY3jRGtW708iDaFDF2qn DXuHytkaCOwCcCZbQKGwLWkNCPIqaKVXLFCimx1hf8nFKSJzwbnQgZNKUOfkEO+p Av6GiVAzb98neBAIjt8l2osidvVxYCKRWZybbBcV0uKUTIKJYuKzy7s7TPb9Ml4c 5L0+u4V+bcVbeig0e6XeKvnklAYawkTrQ9yDasAJ2PrAS1tRckwU5S/N60MW0sl4 CMJrTRO9CVMgjYl50aVkRPANsQpndULVdQ4= -----END CERTIFICATE-----Generated at Wed Nov 4 20:38:35 2026 by rpki-client