$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d401c62-d6ca-3900-a6b1-8f358d8e467c.roa File: 7d401c62-d6ca-3900-a6b1-8f358d8e467c.roa (raw, json) Hash identifier: QeqJe2XiRioEZMrjkb42lo7s589zrC7FBeNl0efQ4OM= Subject key identifier: A8:5F:91:EB:04:9E:41:8A:25:75:D7:FC:05:90:30:BE:EC:ED:F5:51 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F8F3DE947F6E5A55941708580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d401c62-d6ca-3900-a6b1-8f358d8e467c.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 395859 IP address blocks: 2001:470:41f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:e9:47:f6:e5:a5:59:41:70:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d1dcd602-e6ea-4a5f-9704-5ac7b73c29be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:85:4c:aa:77:17:46:26:0b:cc:bc:b1:93: ee:2b:b9:d1:cc:20:01:1f:33:83:e6:f3:f4:f0:36: 79:99:cc:f5:aa:cc:08:6e:cf:6d:b3:e8:f7:bd:c9: cb:c5:ec:92:07:3a:f1:e8:e5:05:75:58:96:4f:3a: e4:8f:f6:0c:94:12:65:e3:75:02:cb:d6:a4:a2:ca: 00:84:bb:52:0d:72:4f:be:2d:3f:3a:b4:fc:86:29: 87:45:8f:1f:1e:a2:63:e4:58:63:25:e0:cc:3f:43: b4:36:36:6d:b0:aa:27:54:47:44:29:99:e9:fc:c8: 1f:5a:bc:cb:9d:1d:e1:72:82:a7:09:2d:4a:e1:34: 36:ed:99:5d:d0:89:b0:92:5f:cb:a7:68:1d:c9:d5: d6:94:23:40:05:71:c8:eb:66:b6:18:9c:f7:c5:e2: d6:d5:d5:62:13:19:ea:84:b2:95:9e:42:98:e6:46: 0b:83:d8:dc:a4:b4:b1:d1:65:7a:bb:10:50:0d:08: 6f:92:12:6b:91:a2:d6:f6:e5:c1:a6:99:dc:e0:c5: 5a:32:a3:51:50:71:6e:bb:f3:39:95:c3:ff:b3:2e: b9:97:0b:8d:54:f0:cc:34:c1:94:d3:98:03:44:73: 6c:8f:0e:cb:dc:50:95:27:c5:ff:03:51:0d:b9:ba: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:91:EB:04:9E:41:8A:25:75:D7:FC:05:90:30:BE:EC:ED:F5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d401c62-d6ca-3900-a6b1-8f358d8e467c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:41f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:60:8f:50:e4:41:29:a3:8f:58:4a:d5:17:bc:0b:91:51:af: 98:a1:e3:a9:e3:4e:c0:13:73:60:6a:98:76:2e:7d:3e:f7:7e: 5c:aa:75:db:ae:ac:82:d3:c6:19:44:14:c1:84:14:72:62:95: 77:90:6d:71:03:d6:fc:36:d9:7b:f8:95:b6:ec:f3:a6:b6:c6: 08:35:a1:e4:33:03:21:60:c1:47:cd:6b:01:b5:33:51:c5:0a: e2:39:1c:76:70:c7:1d:c9:13:44:2c:c6:ee:e1:b7:1a:a0:fe: 82:e0:02:35:3a:b9:49:2d:16:f2:0d:e7:2f:53:0b:6d:be:c5: d7:89:cd:b3:91:49:e6:32:95:88:24:ed:8d:b8:2e:9a:90:08: b2:ff:d5:49:ad:2d:dd:a1:52:6e:62:02:25:2f:c2:97:56:0a: b6:f3:73:f7:27:d1:74:f8:52:f9:e1:43:9c:d9:c5:30:85:ed: 0c:c1:f9:39:a4:8f:89:bd:e1:07:5c:53:8d:7f:8a:2b:65:42: 5e:19:fc:38:ff:6f:57:d7:92:01:2f:8f:c3:dd:bc:a7:54:a7: f2:5d:5b:3d:e1:b0:35:3f:7f:93:47:73:9d:d1:3c:cd:66:b9: 0b:15:da:be:50:94:16:a6:eb:0a:a9:3c:b9:99:05:52:3a:5d: 49:e8:37:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+PPelH9uWlWUFwhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDFkY2Q2MDItZTZlYS00YTVmLTk3MDQtNWFjN2I3M2MyOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh46FTKp3F0YmC8y8sZPuK7nRzCABHzOD5vP0 8DZ5mcz1qswIbs9ts+j3vcnLxeySBzrx6OUFdViWTzrkj/YMlBJl43UCy9akosoA hLtSDXJPvi0/OrT8himHRY8fHqJj5FhjJeDMP0O0NjZtsKonVEdEKZnp/MgfWrzL nR3hcoKnCS1K4TQ27Zld0Imwkl/Lp2gdydXWlCNABXHI62a2GJz3xeLW1dViExnq hLKVnkKY5kYLg9jcpLSx0WV6uxBQDQhvkhJrkaLW9uXBppnc4MVaMqNRUHFuu/M5 lcP/sy65lwuNVPDMNMGU05gDRHNsjw7L3FCVJ8X/A1ENubpJEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKhfkesEnkGKJXXX/AWQML7s7fVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2Q0MDFjNjItZDZjYS0z OTAwLWE2YjEtOGYzNThkOGU0NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5gj1DkQSmjj1hK1Re8C5FRr5ih46njTsATc2BqmHYufT73flyq dduurILTxhlEFMGEFHJilXeQbXED1vw22Xv4lbbs86a2xgg1oeQzAyFgwUfNawG1 M1HFCuI5HHZwxx3JE0Qsxu7htxqg/oLgAjU6uUktFvIN5y9TC22+xdeJzbORSeYy lYgk7Y24LpqQCLL/1UmtLd2hUm5iAiUvwpdWCrbzc/cn0XT4UvnhQ5zZxTCF7QzB +Tmkj4m94QdcU41/iitlQl4Z/Dj/b1fXkgEvj8PdvKdUp/JdWz3hsDU/f5NHc53R PM1muQsV2r5QlBam6wqpPLmZBVI6XUnoNwM= -----END CERTIFICATE-----Generated at Mon Nov 2 21:57:49 2026 by rpki-client