$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa File: 85521fc9-726a-3f50-9e0b-e9325c1b475a.roa (raw, json) Hash identifier: GpACbYOIMS7jaqSVKea1ugbc5qmMp4yfMgHe6aj8W8k= Subject key identifier: FC:DB:DF:99:F0:BA:AE:0A:67:4F:9C:B7:BD:F8:8B:52:15:CD:57:69 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE84A800ECFF3F685C840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 19523 IP address blocks: 2001:470:2a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e8:4a:80:0e:cf:f3:f6:85:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=32dd3ebe-ac10-4481-99ef-a4f26cfde4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:46:db:80:6f:9e:ba:fe:21:81:bc:59:af: f7:32:11:b2:29:3e:09:d1:3b:f7:98:cb:96:8e:07: 4e:93:cf:db:c6:7a:22:f3:de:52:fe:0b:e4:28:b5: 29:2a:95:24:91:d1:c6:e9:a9:3b:01:1e:17:53:a2: d8:bf:26:d1:38:05:c2:50:6a:db:a0:70:43:4b:11: d5:da:6f:33:3b:b2:3d:de:03:4d:7b:fb:81:06:8a: 50:57:5c:de:8b:da:6e:fc:45:d3:40:dc:1f:70:ef: c8:57:46:f7:dd:ae:ea:65:db:c7:fe:a3:54:8b:db: 4b:db:fd:df:fd:23:75:58:83:e4:ae:12:a4:78:cd: 15:23:4e:64:7c:ad:ee:00:12:e1:ac:d9:10:cd:25: 43:58:bf:f8:54:f5:39:bd:bb:89:81:0b:9c:7d:31: 58:da:d5:de:2e:60:1a:e3:42:6d:c6:5d:c1:32:76: 47:8c:4f:60:95:d9:70:f1:f0:27:b0:c9:79:b9:f8: 7e:5c:61:8a:68:0e:56:b4:5c:b2:66:d2:d2:9a:3e: ba:ba:a5:88:56:09:5b:72:85:2e:5d:d5:9c:2f:87: 37:1e:f9:37:17:1c:69:d2:5d:7a:2b:9c:50:ea:58: c7:ba:97:d4:a7:67:e5:9c:2e:f1:5f:b7:c8:1e:da: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DB:DF:99:F0:BA:AE:0A:67:4F:9C:B7:BD:F8:8B:52:15:CD:57:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d6:18:7a:90:90:20:65:de:ea:e7:9a:5f:99:1d:2f:6e:92: a9:13:aa:eb:80:33:f1:cd:16:7c:43:be:fe:a8:35:c2:a8:53: 93:cb:6c:bc:eb:ce:fb:54:73:aa:e0:0a:9d:48:3f:08:ab:16: 4d:d1:21:60:37:12:b9:29:67:2f:e9:bc:22:ae:e2:83:86:b0: bc:9e:a9:f4:7c:a5:ca:9f:22:bb:67:e0:0f:9c:c0:a7:fe:b3: 5c:62:bd:42:87:06:91:c0:3d:d8:5d:30:e5:79:f4:66:9c:6b: fa:a6:e2:5a:de:5c:16:92:a2:ce:97:4e:64:cf:25:fd:9d:39: 17:e1:ad:39:d8:40:ae:cc:3c:e8:a6:fd:ac:95:f9:e7:27:5e: 54:19:bf:f0:29:14:49:2f:23:63:26:6a:dd:3a:c5:1a:5c:d8: 1a:a5:2f:04:e0:c2:2c:61:d9:0d:93:a3:5c:d2:e2:52:fe:3b: bc:45:08:d5:49:8b:bd:15:88:73:a5:f1:52:48:ba:a3:48:64: e9:33:06:d5:35:80:07:15:2f:01:c0:c0:1b:0c:32:74:bd:6d: a8:68:c1:fc:11:cf:6e:df:99:5e:65:84:17:b7:7a:eb:f0:93: b7:eb:30:81:d0:e6:e0:05:f9:0c:e6:8e:41:4d:d3:02:44:3c: d3:0c:b4:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fehKgA7P8/aFyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzJkZDNlYmUtYWMxMC00NDgxLTk5ZWYtYTRmMjZjZmRlNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGlG24Bvnrr+IYG8Wa/3MhGyKT4J0Tv3mMuW jgdOk8/bxnoi895S/gvkKLUpKpUkkdHG6ak7AR4XU6LYvybROAXCUGrboHBDSxHV 2m8zO7I93gNNe/uBBopQV1zei9pu/EXTQNwfcO/IV0b33a7qZdvH/qNUi9tL2/3f /SN1WIPkrhKkeM0VI05kfK3uABLhrNkQzSVDWL/4VPU5vbuJgQucfTFY2tXeLmAa 40Jtxl3BMnZHjE9gldlw8fAnsMl5ufh+XGGKaA5WtFyyZtLSmj66uqWIVglbcoUu XdWcL4c3Hvk3Fxxp0l16K5xQ6ljHupfUp2flnC7xX7fIHtr/SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPzb35nwuq4KZ0+ct734i1IVzVdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU1MjFmYzktNzI2YS0z ZjUwLTllMGItZTkzMjVjMWI0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/WGHqQkCBl3urnml+ZHS9ukqkTquuAM/HNFnxDvv6oNcKoU5PL bLzrzvtUc6rgCp1IPwirFk3RIWA3ErkpZy/pvCKu4oOGsLyeqfR8pcqfIrtn4A+c wKf+s1xivUKHBpHAPdhdMOV59Gaca/qm4lreXBaSos6XTmTPJf2dORfhrTnYQK7M POim/ayV+ecnXlQZv/ApFEkvI2Mmat06xRpc2BqlLwTgwixh2Q2To1zS4lL+O7xF CNVJi70ViHOl8VJIuqNIZOkzBtU1gAcVLwHAwBsMMnS9bahowfwRz27fmV5lhBe3 euvwk7frMIHQ5uAF+QzmjkFN0wJEPNMMtNE= -----END CERTIFICATE-----Generated at Mon Oct 19 01:46:23 2026 by rpki-client