$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6820337b-8f62-3ea3-bd02-8e6732818d9c.roa File: 6820337b-8f62-3ea3-bd02-8e6732818d9c.roa (raw, json) Hash identifier: wnJh4SeApTNIs6uaLJcsu+1EhJvdJgoHmuQwiaZNT1Q= Subject key identifier: 28:5A:FA:4E:B2:52:A4:D3:E2:81:A2:59:99:9A:9F:1D:8B:92:B8:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ED861D9E01345725FDE168080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6820337b-8f62-3ea3-bd02-8e6732818d9c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 40300 IP address blocks: 2001:470:3d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d9:e0:13:45:72:5f:de:16:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d1e6cf31-0fae-4ef0-b3c1-3b1ce3cc9375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:86:b1:98:a7:e4:f2:13:20:1c:87:a0:74: 71:6b:e7:77:98:89:13:1b:27:e9:50:c2:82:27:3d: af:02:ce:fc:a7:a9:b9:8d:6f:02:a6:a2:22:b4:e2: c5:15:2d:87:60:bd:cb:73:cb:c1:7b:e4:e3:89:c0: 42:3e:0e:f3:a4:70:7e:9c:5f:14:fe:55:98:1d:70: fb:12:27:7d:3b:7e:77:52:28:7b:74:82:b1:0e:b7: d2:bf:49:c3:dd:0a:1b:56:6f:01:64:80:b7:f2:0b: b8:cd:f7:49:7e:a3:7b:74:4f:36:c5:db:49:ed:89: e7:45:2e:7d:10:a9:40:6c:5c:cf:ce:b6:0a:c2:fe: 13:a9:64:53:35:a9:f8:d2:5f:d5:9e:93:8b:28:71: f6:38:95:93:61:cd:5d:c4:20:c5:e8:fb:3e:2f:d7: 30:78:91:de:d1:ad:35:77:c6:98:43:ff:1b:5d:d1: 81:b3:52:18:10:4f:29:79:97:7f:a2:97:7e:48:31: 00:1b:64:09:f6:95:bf:14:10:24:3a:1a:a5:14:6e: 52:e3:2b:8a:23:a0:3c:09:81:e8:7c:45:a6:1b:30: 47:bb:37:77:78:5c:dc:72:3d:64:72:0f:2d:40:ca: 65:82:c8:b7:54:73:a8:a6:17:0d:a7:5a:b5:29:13: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:FA:4E:B2:52:A4:D3:E2:81:A2:59:99:9A:9F:1D:8B:92:B8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6820337b-8f62-3ea3-bd02-8e6732818d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ca:41:c6:8c:12:98:0c:a2:29:72:cf:5a:2d:57:33:6a:78: 02:26:b7:b9:ed:7f:60:d8:8e:90:13:90:cb:c9:4d:84:c6:52: 2e:e4:af:d0:81:22:1a:d2:c0:44:33:fa:1e:e5:79:ce:6d:07: d7:32:c9:7f:70:5f:2c:99:9a:dd:57:60:1d:75:ca:02:d3:03: 6d:91:92:d0:65:dd:ee:52:9a:6c:f1:a2:16:eb:6b:72:ad:21: 9f:be:c1:16:88:64:50:18:0f:72:a6:63:4a:9f:95:6b:4d:58: 7d:c7:9a:8e:fd:37:7d:09:fc:43:e1:9a:07:b6:24:ee:0e:5b: 9d:39:49:9b:ab:8e:8e:26:3e:be:06:ad:78:4c:c0:02:0e:f9: 6d:7c:47:ad:8b:19:a9:fd:e1:cf:19:02:e8:8d:16:fa:e8:ff: ef:b1:31:0d:da:7c:e3:3d:1d:6d:16:39:66:aa:77:03:77:98: bf:c6:56:37:5d:40:cb:1e:e7:66:af:73:c9:38:05:2e:58:32: 9b:31:e4:0e:53:6f:a1:8a:37:ad:2a:c1:2d:60:32:54:7c:68: e3:0f:ed:02:4d:bf:e0:c8:aa:6e:c0:d9:00:1a:9d:e4:ca:87: 26:3d:f4:de:bd:3e:a3:5f:b1:92:55:bd:42:f8:4e:1b:d7:2c: 1c:2d:ef:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7YYdngE0VyX94WgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDFlNmNmMzEtMGZhZS00ZWYwLWIzYzEtM2IxY2UzY2M5Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD6GsZin5PITIByHoHRxa+d3mIkTGyfpUMKC Jz2vAs78p6m5jW8CpqIitOLFFS2HYL3Lc8vBe+TjicBCPg7zpHB+nF8U/lWYHXD7 Eid9O353Uih7dIKxDrfSv0nD3QobVm8BZIC38gu4zfdJfqN7dE82xdtJ7YnnRS59 EKlAbFzPzrYKwv4TqWRTNan40l/VnpOLKHH2OJWTYc1dxCDF6Ps+L9cweJHe0a01 d8aYQ/8bXdGBs1IYEE8peZd/opd+SDEAG2QJ9pW/FBAkOhqlFG5S4yuKI6A8CYHo fEWmGzBHuzd3eFzccj1kcg8tQMplgsi3VHOophcNp1q1KRNIOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCha+k6yUqTT4oGiWZmanx2LkrjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjgyMDMzN2ItOGY2Mi0z ZWEzLWJkMDItOGU2NzMyODE4ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDKQcaMEpgMoilyz1otVzNqeAImt7ntf2DYjpATkMvJTYTGUi7k r9CBIhrSwEQz+h7lec5tB9cyyX9wXyyZmt1XYB11ygLTA22RktBl3e5Smmzxohbr a3KtIZ++wRaIZFAYD3KmY0qflWtNWH3Hmo79N30J/EPhmge2JO4OW505SZurjo4m Pr4GrXhMwAIO+W18R62LGan94c8ZAuiNFvro/++xMQ3afOM9HW0WOWaqdwN3mL/G VjddQMse52avc8k4BS5YMpsx5A5Tb6GKN60qwS1gMlR8aOMP7QJNv+DIqm7A2QAa neTKhyY99N69PqNfsZJVvUL4ThvXLBwt72U= -----END CERTIFICATE-----Generated at Sat Sep 12 07:52:11 2026 by rpki-client