$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72a8d326-b732-3e28-aa2b-7897e476d257.roa File: 72a8d326-b732-3e28-aa2b-7897e476d257.roa (raw, json) Hash identifier: l50DxaTCs5vyXLI4hlsaRJ8JVPQ3n8ENnZEC8VEzH+E= Subject key identifier: 1F:C0:2B:CA:BB:DB:62:8D:1C:76:B0:1E:C9:80:AC:EE:40:37:5E:4D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F15CD06297BF6AFDB340C1800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72a8d326-b732-3e28-aa2b-7897e476d257.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 400790 IP address blocks: 2001:470:5a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:06:29:7b:f6:af:db:34:0c:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=a5f88e2b-cebb-479b-8667-3baaee9e40ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:34:0c:ba:f8:2e:79:20:b9:a6:8e:c8:96: ad:06:0d:f7:b3:8f:1d:e5:2b:95:8e:bd:be:61:1e: 7b:18:46:ae:23:88:75:29:4f:40:14:01:f9:7b:63: d2:33:a1:30:87:e2:1f:e8:c5:c1:75:65:a3:c4:ae: bf:32:e4:60:de:3b:4c:31:65:ed:dd:72:3b:e4:18: 3c:86:99:e2:8e:d0:1d:27:39:cf:24:0a:0f:ae:22: 0e:03:55:42:65:80:48:da:75:7e:c3:12:ad:d0:5f: f6:37:93:61:25:21:25:eb:80:fb:04:a8:71:03:b5: af:33:f5:eb:0b:ec:c9:0c:4e:0f:6e:5d:3d:c9:d9: 18:ea:ef:e9:17:5d:d3:7b:28:0f:f4:de:3c:9e:e8: 5f:33:1e:6e:ac:47:b0:75:91:2d:bb:06:5f:89:45: 6a:df:73:a8:17:14:59:b8:95:7a:40:9b:50:82:49: 4c:34:27:1b:f6:67:43:42:dd:f7:ef:bf:7d:64:fd: 59:8a:ce:04:71:64:a0:3b:32:fc:1e:03:f3:96:26: d8:00:c8:f0:7a:8e:bb:1d:70:e8:6d:34:e3:76:d1: 0a:a2:b9:a6:51:d3:6b:3d:00:f3:9d:0c:b8:95:e5: a8:9c:49:9e:89:96:9f:92:45:40:b0:b0:b2:bf:4e: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:2B:CA:BB:DB:62:8D:1C:76:B0:1E:C9:80:AC:EE:40:37:5E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72a8d326-b732-3e28-aa2b-7897e476d257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:5a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ad:81:d6:9c:b7:95:2c:d2:e8:3d:6e:4d:95:4e:28:5b:33: e3:9f:bb:d9:47:e2:4a:ba:98:29:72:f2:47:e8:7a:20:50:7f: c7:dd:cc:1f:89:e5:30:2e:7e:0a:a9:9b:e2:58:a2:cb:f0:ab: 53:ec:2c:65:0f:45:f0:fc:d9:82:ee:53:e3:d1:15:d7:70:b6: 44:e2:0a:28:bb:14:e5:0a:13:0a:e1:8b:09:a3:1b:a2:82:2b: 6b:70:98:ba:75:20:8c:4a:f3:f9:84:d4:67:84:67:3c:b0:a5: 63:2e:cc:da:25:dc:fb:68:52:ae:3a:f6:db:05:9e:f7:e7:bc: 99:b2:7f:64:73:c9:c1:41:b3:c5:24:3c:69:1e:07:c1:42:7f: fd:6f:31:35:8c:4a:83:12:f1:ec:b0:d0:dc:41:d9:3e:3e:79: e2:ab:ea:1a:58:33:1d:91:73:be:96:02:73:6c:6e:65:8f:9c: 02:69:3f:1c:da:9f:ca:ec:c6:0c:50:95:7a:85:ac:82:0e:bf: 01:2a:61:5d:f5:2e:86:57:56:a3:a2:43:6c:d0:9c:5c:f0:dd: 86:6a:90:50:e9:07:c1:6e:88:e6:b8:0b:81:76:96:dd:c6:53: 5c:29:b9:9e:7d:93:23:2e:20:3d:5d:a4:c0:7a:b8:ed:29:53: d3:bf:41:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8VzQYpe/av2zQMGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YTVmODhlMmItY2ViYi00NzliLTg2NjctM2JhYWVlOWU0MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ok0DLr4LnkguaaOyJatBg33s48d5SuVjr2+ YR57GEauI4h1KU9AFAH5e2PSM6Ewh+If6MXBdWWjxK6/MuRg3jtMMWXt3XI75Bg8 hpnijtAdJznPJAoPriIOA1VCZYBI2nV+wxKt0F/2N5NhJSEl64D7BKhxA7WvM/Xr C+zJDE4Pbl09ydkY6u/pF13TeygP9N48nuhfMx5urEewdZEtuwZfiUVq33OoFxRZ uJV6QJtQgklMNCcb9mdDQt337799ZP1Zis4EcWSgOzL8HgPzlibYAMjweo67HXDo bTTjdtEKormmUdNrPQDznQy4leWonEmeiZafkkVAsLCyv05vDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/AK8q722KNHHawHsmArO5AN15NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzJhOGQzMjYtYjczMi0z ZTI4LWFhMmItNzg5N2U0NzZkMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACutgdact5Us0ug9bk2VTihbM+Ofu9lH4kq6mCly8kfoeiBQf8fd zB+J5TAufgqpm+JYosvwq1PsLGUPRfD82YLuU+PRFddwtkTiCii7FOUKEwrhiwmj G6KCK2twmLp1IIxK8/mE1GeEZzywpWMuzNol3PtoUq469tsFnvfnvJmyf2RzycFB s8UkPGkeB8FCf/1vMTWMSoMS8eyw0NxB2T4+eeKr6hpYMx2Rc76WAnNsbmWPnAJp Pxzan8rsxgxQlXqFrIIOvwEqYV31LoZXVqOiQ2zQnFzw3YZqkFDpB8FuiOa4C4F2 lt3GU1wpuZ59kyMuID1dpMB6uO0pU9O/QdI= -----END CERTIFICATE-----Generated at Sat Sep 19 08:27:56 2026 by rpki-client