$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa File: 7976e54e-670a-3597-9ccd-88ccc4997071.roa (raw, json) Hash identifier: lrQJ46+yoCfFKx3ReALd5PHtY98P9kDuBeNQ7NL4uok= Subject key identifier: 02:59:65:44:54:25:40:70:21:88:B7:D5:10:DE:85:E3:C6:F8:BC:05 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF90F6BE2769D2A00A280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 198690 IP address blocks: 2001:470:17c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f9:0f:6b:e2:76:9d:2a:00:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=91667e05-11cc-4be8-b960-122d328679ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:56:14:2d:3d:18:f2:0e:d3:88:05:89:1b: d6:6d:a9:a8:1d:0d:a9:0f:4b:3e:f4:b7:e0:a3:49: 40:66:00:ff:e6:56:9f:7e:5a:5a:33:38:3d:4d:cf: 7c:84:7c:b4:9b:d8:3e:8e:05:a7:1d:ed:37:62:ee: c6:5f:7b:2d:86:fa:c7:c6:69:08:09:47:2c:79:2b: d0:d3:fb:78:15:84:d0:68:37:49:aa:07:8a:55:9b: ee:f1:f8:5d:84:e9:e5:ed:59:fd:5f:0c:2f:aa:a0: 5b:63:bb:3b:02:1d:20:a1:87:da:d7:94:80:5f:51: fa:3a:28:50:23:d2:a6:23:b9:01:f6:f4:43:83:ca: 7b:43:66:5e:27:25:13:c4:fa:3c:e6:d9:9f:ba:ad: d0:28:ef:71:f8:9b:58:0c:e0:d6:28:9b:28:b1:9e: fa:4d:36:02:62:26:9a:de:39:02:43:1a:65:4d:38: 02:47:d0:66:8d:4c:ce:90:f2:b3:7b:e6:8c:63:04: 93:a0:83:8c:03:2f:0b:04:56:90:4f:15:0b:61:ea: d3:64:9f:09:27:fb:ac:c9:3e:7b:e3:2d:ba:44:7e: 52:ab:00:8a:fd:1c:b4:c6:7a:77:4e:a0:5a:b6:5f: c7:bd:70:e9:00:7b:4c:3f:82:00:1b:28:ad:37:3d: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:65:44:54:25:40:70:21:88:B7:D5:10:DE:85:E3:C6:F8:BC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:17c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:be:a9:a2:22:8f:6e:1f:b3:6f:03:a9:f6:ba:97:fd:d2:af: 53:4a:6d:f0:0c:da:7a:57:e7:44:e5:4c:e3:88:22:04:c3:4c: 81:db:a5:59:07:a9:e3:0d:99:63:93:63:30:7d:5f:69:8c:45: c1:ee:9f:02:68:e2:06:6b:85:27:93:27:bb:3e:35:09:15:45: 0d:24:c9:78:92:96:78:87:ec:26:78:da:b0:44:81:39:2d:96: 42:7d:6c:75:39:78:a6:52:2d:bd:fb:bf:af:56:6d:96:b9:b4: b1:a6:af:6e:b6:f6:fc:e9:9b:ee:6f:58:02:3e:9b:38:19:5d: b8:05:13:30:cc:86:3e:62:96:7b:08:b0:89:70:c7:54:19:5b: 2c:17:24:96:5b:c5:67:2c:81:8d:67:50:05:42:22:3f:7d:71: 38:a7:99:92:5c:bc:8a:d3:f2:d3:5f:46:87:25:e6:3e:ed:65: cf:74:8f:bc:dd:71:f0:94:dc:b3:9f:d0:69:4f:18:0e:71:16: f4:62:42:62:63:4c:be:87:0f:a7:c0:c4:10:2b:20:34:75:20: ac:41:57:e0:59:2a:40:b2:9f:aa:80:7d:67:c3:6a:09:93:8e: 57:f7:4c:e4:02:f7:fc:5b:3f:6c:95:b2:db:02:13:ec:fa:60: df:ae:c0:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffkPa+J2nSoAooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTE2NjdlMDUtMTFjYy00YmU4LWI5NjAtMTIyZDMyODY3OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwelWFC09GPIO04gFiRvWbamoHQ2pD0s+9Lfg o0lAZgD/5lafflpaMzg9Tc98hHy0m9g+jgWnHe03Yu7GX3sthvrHxmkICUcseSvQ 0/t4FYTQaDdJqgeKVZvu8fhdhOnl7Vn9XwwvqqBbY7s7Ah0goYfa15SAX1H6OihQ I9KmI7kB9vRDg8p7Q2ZeJyUTxPo85tmfuq3QKO9x+JtYDODWKJsosZ76TTYCYiaa 3jkCQxplTTgCR9BmjUzOkPKze+aMYwSToIOMAy8LBFaQTxULYerTZJ8JJ/usyT57 4y26RH5SqwCK/Ry0xnp3TqBatl/HvXDpAHtMP4IAGyitNz0oAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJZZURUJUBwIYi31RDehePG+LwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzk3NmU1NGUtNjcwYS0z NTk3LTljY2QtODhjY2M0OTk3MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADS+qaIij24fs28Dqfa6l/3Sr1NKbfAM2npX50TlTOOIIgTDTIHb pVkHqeMNmWOTYzB9X2mMRcHunwJo4gZrhSeTJ7s+NQkVRQ0kyXiSlniH7CZ42rBE gTktlkJ9bHU5eKZSLb37v69WbZa5tLGmr2629vzpm+5vWAI+mzgZXbgFEzDMhj5i lnsIsIlwx1QZWywXJJZbxWcsgY1nUAVCIj99cTinmZJcvIrT8tNfRocl5j7tZc90 j7zdcfCU3LOf0GlPGA5xFvRiQmJjTL6HD6fAxBArIDR1IKxBV+BZKkCyn6qAfWfD agmTjlf3TOQC9/xbP2yVstsCE+z6YN+uwP4= -----END CERTIFICATE-----Generated at Mon Oct 26 14:47:48 2026 by rpki-client