$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa File: 683edfc8-bb17-3380-bc14-247e49848b6e.roa (raw, json) Hash identifier: aK6lPBKLx+tqN1+zT4eq7ZjYBRltCtBPnmxYLEVAMxk= Subject key identifier: A2:96:BF:FB:08:DE:90:78:C3:25:2E:51:C5:F9:C4:34:B4:8B:08:D4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F698D8A66780E81B0BF63FF00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 401530 IP address blocks: 2001:470:3c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8a:66:78:0e:81:b0:bf:63:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=03d115c5-537d-4a71-872f-7ee720d61fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:2e:24:fa:ea:79:7a:61:72:ee:fa:90:e7: 7a:2e:3d:a8:11:15:bf:8e:9d:ed:28:40:5a:49:20: 79:ed:05:ba:7a:f3:b9:1b:16:fa:03:17:1b:ba:33: 99:a1:4f:f0:4a:6a:ac:03:f7:57:5a:f5:df:31:fc: 14:fd:03:2e:ef:1d:0c:ef:46:f0:30:78:53:1d:08: ba:59:a3:ba:3d:6e:87:51:8b:22:0f:70:cb:45:f7: f9:aa:3a:77:9a:f6:87:7e:8e:7d:a6:5d:3e:20:fe: 1b:d2:e7:40:72:b6:d0:8f:b3:97:22:e6:73:3c:74: b9:3d:6b:dc:7c:eb:d9:40:b5:d8:0d:dc:2d:1f:44: b4:b7:26:72:b0:57:fb:9b:04:07:4d:60:d6:25:3c: bd:50:3d:72:b4:73:28:a2:0b:42:ee:6a:3f:52:ae: d6:ed:da:6c:8a:75:a1:d2:bd:63:69:28:99:8f:b8: cf:e0:23:8c:65:1c:07:8b:d6:e7:56:8b:2f:47:97: 5f:06:78:b9:20:e3:1a:6f:54:aa:2b:25:6c:de:01: 09:a8:93:6f:21:c9:78:5d:26:47:9f:1d:cc:05:6a: 6d:85:4a:3b:ec:dd:06:6e:9f:39:d8:c9:3e:1a:ff: 52:d2:02:bd:cb:9a:4a:35:af:97:62:17:e2:a1:21: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:96:BF:FB:08:DE:90:78:C3:25:2E:51:C5:F9:C4:34:B4:8B:08:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/683edfc8-bb17-3380-bc14-247e49848b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:49:69:2f:1b:cd:4d:89:83:48:4b:50:89:17:e5:41:24:36: 52:90:e6:ed:e0:16:92:87:6c:2c:bd:b6:fd:8f:89:d5:73:4c: 9f:2c:af:b3:cd:42:2e:3d:18:d8:18:33:22:a4:1e:04:3a:74: bf:71:05:ec:eb:b1:15:c6:c7:3d:43:b2:59:c9:b0:c0:9a:a6: 10:a4:86:c0:8a:3a:b7:c9:97:1c:60:f5:26:af:47:47:97:0e: 14:97:bc:c6:37:fa:8f:d2:44:37:8c:8d:88:b5:9e:80:f6:8b: 11:64:91:2b:67:6f:bd:40:2c:cc:78:0b:94:55:49:12:b2:dc: 7b:51:50:3b:b9:61:3f:03:ac:1c:57:eb:91:a4:3c:84:7c:8a: 9c:2b:8d:0d:01:01:32:a5:23:08:8d:80:48:82:9e:2f:5d:7c: 2d:22:4c:b3:0d:cd:27:45:3d:29:4e:e3:73:e4:91:00:e0:5b: 95:c6:75:f4:d6:22:77:51:c6:19:03:08:35:17:d7:1b:d0:5d: 80:ca:9a:68:16:8c:51:44:37:58:a6:de:be:cc:98:20:e3:fe: 98:df:4c:ff:d0:d1:c7:13:1c:b1:7d:23:97:dd:61:61:40:82: d0:48:82:46:ae:fa:73:4e:f8:09:de:fc:8b:30:73:3d:21:79: 1a:05:a5:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9pjYpmeA6BsL9j/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MDNkMTE1YzUtNTM3ZC00YTcxLTg3MmYtN2VlNzIwZDYxZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5UuJPrqeXphcu76kOd6Lj2oERW/jp3tKEBa SSB57QW6evO5Gxb6AxcbujOZoU/wSmqsA/dXWvXfMfwU/QMu7x0M70bwMHhTHQi6 WaO6PW6HUYsiD3DLRff5qjp3mvaHfo59pl0+IP4b0udAcrbQj7OXIuZzPHS5PWvc fOvZQLXYDdwtH0S0tyZysFf7mwQHTWDWJTy9UD1ytHMoogtC7mo/Uq7W7dpsinWh 0r1jaSiZj7jP4COMZRwHi9bnVosvR5dfBni5IOMab1SqKyVs3gEJqJNvIcl4XSZH nx3MBWpthUo77N0Gbp852Mk+Gv9S0gK9y5pKNa+XYhfioSHCgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKWv/sI3pB4wyUuUcX5xDS0iwjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjgzZWRmYzgtYmIxNy0z MzgwLWJjMTQtMjQ3ZTQ5ODQ4YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVJaS8bzU2Jg0hLUIkX5UEkNlKQ5u3gFpKHbCy9tv2PidVzTJ8s r7PNQi49GNgYMyKkHgQ6dL9xBezrsRXGxz1DslnJsMCaphCkhsCKOrfJlxxg9Sav R0eXDhSXvMY3+o/SRDeMjYi1noD2ixFkkStnb71ALMx4C5RVSRKy3HtRUDu5YT8D rBxX65GkPIR8ipwrjQ0BATKlIwiNgEiCni9dfC0iTLMNzSdFPSlO43PkkQDgW5XG dfTWIndRxhkDCDUX1xvQXYDKmmgWjFFEN1im3r7MmCDj/pjfTP/Q0ccTHLF9I5fd YWFAgtBIgkau+nNO+Ane/Iswcz0heRoFpRk= -----END CERTIFICATE-----Generated at Sun Nov 1 18:39:06 2026 by rpki-client