$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/688c633f-b473-3778-825b-f8e1d56cfba7.roa File: 688c633f-b473-3778-825b-f8e1d56cfba7.roa (raw, json) Hash identifier: jZ8575AArJsD24fQ9m88bmFj1YAvMXcq8I5UC3zZTls= Subject key identifier: 76:3F:67:39:E4:25:9C:62:A8:A5:C1:23:9A:5B:54:02:57:4F:BB:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFC9573D0B11D160FABC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/688c633f-b473-3778-825b-f8e1d56cfba7.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 206793 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:fc:95:73:d0:b1:1d:16:0f:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=cfed8ad9-cc7c-4cb7-9665-c1c0f8cbef57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9f:fc:60:0f:a3:8f:47:19:4b:ee:3d:87:2e: a2:06:58:01:e2:cd:72:8a:27:24:86:6b:d3:6b:56: fd:92:f9:25:a9:ea:b1:9e:0d:43:e2:f8:98:ac:85: 42:91:c0:4e:23:0b:32:a6:8e:76:3e:46:db:0f:7f: cb:cf:6a:fd:83:4e:b0:5f:25:60:22:9d:d8:25:a5: f3:39:56:ad:e2:99:d9:38:74:a9:fe:30:a7:7c:a3: 85:f1:03:00:66:9b:95:2f:dc:68:c5:b7:99:d2:be: fc:3a:25:96:f0:4a:79:ff:32:73:8c:47:f5:72:37: 8f:c9:e3:95:98:45:3e:16:a1:ce:1a:97:df:98:85: ca:12:48:68:06:81:fa:32:b4:ed:21:d6:1c:0d:bf: cc:96:6c:dc:7d:b9:ec:fc:fc:bd:93:01:8a:a4:c9: a5:56:9d:19:74:24:af:9c:a0:4c:69:cb:74:93:f0: c8:b1:3c:e2:d4:28:d1:50:ee:df:77:6c:47:24:ae: aa:68:f6:cc:a2:f9:61:b9:ce:5e:1f:8d:70:e3:e5: 6a:f9:02:e1:c7:53:24:d5:90:39:d7:42:97:08:26: 11:1c:da:16:cc:e1:ea:3e:40:99:e3:b3:db:66:2a: dc:73:27:52:9c:0f:46:93:1c:a3:4a:6b:08:37:53: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:67:39:E4:25:9C:62:A8:A5:C1:23:9A:5B:54:02:57:4F:BB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/688c633f-b473-3778-825b-f8e1d56cfba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f8:a8:ad:b4:29:fa:db:f1:90:4a:c4:ec:25:d0:0d:df:bf: 8b:a4:1a:6b:88:a6:55:79:53:2d:2c:fb:fc:84:c1:01:e0:28: 48:74:6a:c6:42:cd:59:56:03:d5:1f:1e:7b:a5:1c:65:87:42: 44:14:83:fb:2f:59:6c:0b:27:10:58:fb:4e:5c:25:81:bc:4c: c9:e4:d2:15:b1:ad:1c:18:c0:6e:34:72:fb:31:4f:b4:90:6f: eb:c4:35:d3:6f:01:b8:c9:52:cc:52:d0:e2:76:e3:61:ad:75: 6f:a0:40:68:e0:b0:62:ff:61:1c:f0:bb:7d:60:e8:70:b7:d4: 57:af:1d:63:15:97:d8:7e:d0:b4:7c:d2:72:a2:45:86:f4:53: 27:6e:78:4b:a1:e7:56:a0:d0:d8:d4:82:79:48:0a:73:7c:71: ae:61:9c:bb:69:e7:2b:c9:6d:d9:5e:cc:6f:1c:ec:fd:9b:ea: 37:5f:3d:1a:72:d1:aa:18:a1:0c:e1:d3:5b:e1:e7:ef:b6:21: 49:7d:0b:df:bf:51:5c:27:9a:57:5c:10:35:9b:81:70:f4:3a: 5a:85:a7:c0:b1:e8:83:95:07:1c:58:9b:ff:8d:76:a8:1f:5b: 4f:81:87:39:a8:c3:dd:9a:3c:fa:8d:2f:9b:b5:a8:51:e8:97: d1:d9:ad:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffyVc9CxHRYPq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2ZlZDhhZDktY2M3Yy00Y2I3LTk2NjUtYzFjMGY4Y2JlZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp/8YA+jj0cZS+49hy6iBlgB4s1yiickhmvT a1b9kvklqeqxng1D4viYrIVCkcBOIwsypo52PkbbD3/Lz2r9g06wXyVgIp3YJaXz OVat4pnZOHSp/jCnfKOF8QMAZpuVL9xoxbeZ0r78OiWW8Ep5/zJzjEf1cjePyeOV mEU+FqHOGpffmIXKEkhoBoH6MrTtIdYcDb/Mlmzcfbns/Py9kwGKpMmlVp0ZdCSv nKBMact0k/DIsTzi1CjRUO7fd2xHJK6qaPbMovlhuc5eH41w4+Vq+QLhx1Mk1ZA5 10KXCCYRHNoWzOHqPkCZ47PbZirccydSnA9GkxyjSmsIN1P+8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHY/ZznkJZxiqKXBI5pbVAJXT7uOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg4YzYzM2YtYjQ3My0z Nzc4LTgyNWItZjhlMWQ1NmNmYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ34qK20Kfrb8ZBKxOwl0A3fv4ukGmuIplV5Uy0s+/yEwQHgKEh0 asZCzVlWA9UfHnulHGWHQkQUg/svWWwLJxBY+05cJYG8TMnk0hWxrRwYwG40cvsx T7SQb+vENdNvAbjJUsxS0OJ242GtdW+gQGjgsGL/YRzwu31g6HC31FevHWMVl9h+ 0LR80nKiRYb0UydueEuh51ag0NjUgnlICnN8ca5hnLtp5yvJbdlezG8c7P2b6jdf PRpy0aoYoQzh01vh5++2IUl9C9+/UVwnmldcEDWbgXD0OlqFp8Cx6IOVBxxYm/+N dqgfW0+Bhzmow92aPPqNL5u1qFHol9HZrWI= -----END CERTIFICATE-----Generated at Tue Nov 3 08:24:39 2026 by rpki-client