$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa File: 890c808c-c003-388e-a54a-7300604313f5.roa (raw, json) Hash identifier: nwxsQM4MXyCdrIWKOiNdUrg7H4m8+3Ak1J8r3IxWSj0= Subject key identifier: 88:E9:43:4B:1B:07:8D:AA:1C:3A:A9:52:A6:4D:CC:42:AA:7A:32:05 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFFA9A71996607AA1C320 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 13335 IP address blocks: 2001:470:2a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ff:a9:a7:19:96:60:7a:a1:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=3d103a88-7dae-4cf1-bc8a-cab2c7bc9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:03:be:ea:9d:e1:76:4e:43:ca:69:3f:03: 90:fa:aa:a4:0f:97:41:5b:e5:c8:4c:9b:f8:f3:ac: cc:36:97:08:20:07:1f:8c:01:3b:cc:a6:5a:43:f2: 8d:41:ad:c3:84:18:71:c3:62:35:42:02:da:17:71: 5b:03:e1:6e:70:37:c6:da:d9:77:2d:de:43:29:30: d9:a7:66:25:c7:31:ef:ac:20:50:e1:c7:12:fa:f6: c6:b5:84:a3:a6:95:35:82:bf:cd:f2:b8:77:e1:3d: e6:8c:6e:d9:7b:11:a6:d0:31:fb:b6:06:1d:23:4e: e4:19:04:80:d4:83:17:fe:b5:3e:37:2c:d4:45:06: 69:f4:d0:84:4e:7c:b3:5f:43:2b:b3:79:43:9d:c3: 6a:07:f1:ec:9b:44:e6:90:91:07:07:b0:78:37:bd: 8e:d9:eb:0a:bd:3c:c0:4a:93:04:33:0f:95:29:ed: fc:2f:28:16:7f:eb:31:f9:69:16:74:b0:3d:dc:31: 2e:27:b7:22:db:7c:94:6c:e6:3c:46:0c:36:05:22: c1:f8:71:0b:d1:e8:1d:ae:b0:9c:57:4a:33:8b:e1: 69:47:b4:6b:4b:6c:32:48:55:3e:40:36:02:32:fa: b6:45:11:41:60:b2:0b:f6:f2:3a:82:50:63:75:27: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:43:4B:1B:07:8D:AA:1C:3A:A9:52:A6:4D:CC:42:AA:7A:32:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890c808c-c003-388e-a54a-7300604313f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a5:90:3f:2e:e9:81:b1:db:13:34:c8:0e:45:31:dc:20:08: f0:c2:40:35:59:f3:48:99:ac:27:7d:91:aa:e0:29:77:16:94: 1c:75:e0:76:53:4d:1e:bb:9e:3d:c0:0e:0c:e4:d8:16:80:9b: 1f:46:04:70:c4:fa:80:8b:04:94:f0:8d:8f:14:c9:39:27:3b: 89:1d:da:45:46:0a:49:04:21:fc:77:d6:f9:bd:60:70:f6:0e: be:f5:6d:2f:c9:fa:61:a1:fd:bc:08:7f:b0:cf:c5:59:0b:66: b3:a3:31:98:08:f4:b9:a7:56:72:6b:bf:15:73:b6:df:23:20: 84:db:57:20:dd:ec:71:68:3c:39:49:50:aa:b8:f2:0c:0d:bc: 3d:cf:40:2d:74:40:68:12:12:dc:c8:69:69:3b:b6:9c:90:15: 0d:cf:79:5f:dc:02:fd:cc:eb:91:cd:18:3a:5e:50:db:ee:87: 28:c5:de:9d:b9:20:8d:94:1a:35:ef:44:c8:48:ea:52:b2:88: 82:bb:16:b0:8e:bb:99:64:b3:c0:67:74:42:6d:74:52:57:5f: 7c:cd:b8:4c:09:9d:16:3f:d1:d9:04:8f:d7:fe:40:e3:18:09: fe:b8:b7:27:d9:1f:ce:8e:27:9d:3a:d0:18:83:b4:f2:4e:07: 62:43:57:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ff+ppxmWYHqhwyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2QxMDNhODgtN2RhZS00Y2YxLWJjOGEtY2FiMmM3YmM5YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCEDvuqd4XZOQ8ppPwOQ+qqkD5dBW+XITJv4 86zMNpcIIAcfjAE7zKZaQ/KNQa3DhBhxw2I1QgLaF3FbA+FucDfG2tl3Ld5DKTDZ p2YlxzHvrCBQ4ccS+vbGtYSjppU1gr/N8rh34T3mjG7ZexGm0DH7tgYdI07kGQSA 1IMX/rU+NyzURQZp9NCETnyzX0Mrs3lDncNqB/Hsm0TmkJEHB7B4N72O2esKvTzA SpMEMw+VKe38LygWf+sx+WkWdLA93DEuJ7ci23yUbOY8Rgw2BSLB+HEL0egdrrCc V0ozi+FpR7RrS2wySFU+QDYCMvq2RRFBYLIL9vI6glBjdSesIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjpQ0sbB42qHDqpUqZNzEKqejIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODkwYzgwOGMtYzAwMy0z ODhlLWE1NGEtNzMwMDYwNDMxM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOlkD8u6YGx2xM0yA5FMdwgCPDCQDVZ80iZrCd9kargKXcWlBx1 4HZTTR67nj3ADgzk2BaAmx9GBHDE+oCLBJTwjY8UyTknO4kd2kVGCkkEIfx31vm9 YHD2Dr71bS/J+mGh/bwIf7DPxVkLZrOjMZgI9LmnVnJrvxVztt8jIITbVyDd7HFo PDlJUKq48gwNvD3PQC10QGgSEtzIaWk7tpyQFQ3PeV/cAv3M65HNGDpeUNvuhyjF 3p25II2UGjXvRMhI6lKyiIK7FrCOu5lks8BndEJtdFJXX3zNuEwJnRY/0dkEj9f+ QOMYCf64tyfZH86OJ5060BiDtPJOB2JDVyQ= -----END CERTIFICATE-----Generated at Sun Oct 18 13:33:44 2026 by rpki-client