$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa File: 81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa (raw, json) Hash identifier: rFOdKxcd5ueaEln21XAmJ8RP6dxnE0+YX96ORQOiJh8= Subject key identifier: F8:B8:31:8E:1E:46:EF:5D:BB:ED:06:54:46:78:7F:BE:1C:9E:2C:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC924163ADBB0330AA623200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 2901 IP address blocks: 2001:470:298::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:41:63:ad:bb:03:30:aa:62:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=8e69ad7b-6d4b-4ced-be4e-8dbab3d22305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1c:53:dd:db:e0:c7:88:2c:bc:b5:9d:f0:96: b9:59:a4:bb:17:8f:3e:31:bb:9a:52:e3:4e:de:79: d0:9b:e5:91:48:40:64:3f:3e:82:13:33:82:b1:65: f9:a5:d4:e8:a8:c7:14:eb:94:de:cb:5e:9b:87:99: 6f:e8:a8:8c:21:96:cb:09:e5:6c:3d:94:ea:d3:13: 0c:9f:c7:d4:dc:45:51:06:b3:d4:49:9d:4d:39:e7: 53:45:d2:5b:04:93:4c:d5:83:3f:bc:ef:59:ce:8c: 6e:48:de:11:89:db:cc:97:2e:c2:2d:79:e4:3d:fc: 8c:fc:4b:5c:94:9a:96:5a:32:40:cd:bf:cc:04:00: 60:50:19:5a:b3:c0:aa:44:7d:e0:94:e2:60:f0:92: 72:38:fa:61:8c:90:85:91:32:8a:25:b9:05:6c:d0: 07:e8:72:17:0f:4b:fc:45:b2:79:1e:28:78:e5:23: 75:18:82:f2:75:45:f0:06:c8:2e:d1:b5:38:06:db: 31:6c:66:c1:32:f1:67:a2:b0:c4:bf:9a:9a:55:94: cf:5b:26:63:27:e3:c5:c8:81:4c:ef:9f:70:84:55: a7:d5:7d:c1:99:d5:dd:56:da:6d:59:c6:d8:92:9a: 93:2c:b2:68:be:e8:ac:d2:9a:22:ed:36:f9:bc:76: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:31:8E:1E:46:EF:5D:BB:ED:06:54:46:78:7F:BE:1C:9E:2C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:298::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:97:d0:6d:31:96:ae:db:47:f6:ae:0f:f0:94:89:30:56:7e: 98:b3:7d:d4:77:dc:d2:0e:44:0b:5b:7f:cf:a1:d8:14:2e:45: 28:13:36:cb:5e:34:b2:51:55:43:7f:ee:b3:10:6d:c6:b2:b4: 20:e3:8f:3f:b4:89:0f:dd:f7:64:18:de:e9:8b:5b:21:fb:7a: a5:08:59:e1:c9:fb:97:57:ea:18:e9:2e:ec:6d:4b:9b:f6:04: 28:be:1e:17:36:ed:00:09:2c:91:8c:15:95:93:8a:dc:e4:66: 40:86:83:83:e9:13:8b:a1:26:c8:11:ac:89:88:25:44:35:97: 3f:40:c6:05:48:a5:77:cf:18:68:87:be:4c:47:c3:cb:ba:c7: 58:f4:55:c5:e1:83:a9:f1:c9:43:ba:d8:fb:44:cd:2f:6a:7b: 73:60:d7:c6:d9:37:71:60:cc:64:f9:06:73:c0:dc:ef:5b:b6: 12:bf:d0:5e:ae:16:cf:b8:52:25:c3:64:82:da:42:72:5b:49: e3:70:98:06:3e:e9:e8:54:f4:d2:71:cf:68:1b:e7:33:0a:36: e6:dc:56:27:5c:be:57:fa:05:fb:57:43:69:ba:01:93:18:70: 95:a7:a4:dc:d3:22:ba:21:16:a8:8d:de:fb:2f:46:85:09:0d: df:5d:8e:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckkFjrbsDMKpiMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk OGU2OWFkN2ItNmQ0Yi00Y2VkLWJlNGUtOGRiYWIzZDIyMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hxT3dvgx4gsvLWd8Ja5WaS7F48+MbuaUuNO 3nnQm+WRSEBkPz6CEzOCsWX5pdToqMcU65Tey16bh5lv6KiMIZbLCeVsPZTq0xMM n8fU3EVRBrPUSZ1NOedTRdJbBJNM1YM/vO9ZzoxuSN4RidvMly7CLXnkPfyM/Etc lJqWWjJAzb/MBABgUBlas8CqRH3glOJg8JJyOPphjJCFkTKKJbkFbNAH6HIXD0v8 RbJ5Hih45SN1GILydUXwBsgu0bU4BtsxbGbBMvFnorDEv5qaVZTPWyZjJ+PFyIFM 759whFWn1X3BmdXdVtptWcbYkpqTLLJovuis0poi7Tb5vHZvJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPi4MY4eRu9du+0GVEZ4f74cniyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODFiOWM0YTQtY2U3NC0z YTcyLTg2MjktZDJhYTYwM2I0MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeX0G0xlq7bR/auD/CUiTBWfpizfdR33NIORAtbf8+h2BQuRSgT NsteNLJRVUN/7rMQbcaytCDjjz+0iQ/d92QY3umLWyH7eqUIWeHJ+5dX6hjpLuxt S5v2BCi+Hhc27QAJLJGMFZWTitzkZkCGg4PpE4uhJsgRrImIJUQ1lz9AxgVIpXfP GGiHvkxHw8u6x1j0VcXhg6nxyUO62PtEzS9qe3Ng18bZN3FgzGT5BnPA3O9bthK/ 0F6uFs+4UiXDZILaQnJbSeNwmAY+6ehU9NJxz2gb5zMKNubcVidcvlf6BftXQ2m6 AZMYcJWnpNzTIrohFqiN3vsvRoUJDd9djqo= -----END CERTIFICATE-----Generated at Sat Sep 26 23:26:50 2026 by rpki-client