$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa File: 89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa (raw, json) Hash identifier: ze5i2+s1SVjQmPY0zpmaW1DSaMICx5lF+Dwoo16t5fo= Subject key identifier: 31:E6:92:58:94:5E:C0:60:C5:6D:6D:94:F4:4A:F3:9E:23:33:46:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDF7D80AA9C8FA4EC4740 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 63370 IP address blocks: 2001:470:8d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:df:7d:80:aa:9c:8f:a4:ec:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=27a9f6c5-7d2e-49e8-b621-0db42bf26373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:55:03:c4:05:70:13:78:2f:01:76:19:de: bb:c6:6e:aa:ea:b7:b3:30:22:96:41:7f:93:96:78: f8:66:84:30:12:f9:0e:77:e8:23:05:55:ea:5a:72: 5a:a7:dc:be:93:24:4e:8d:3b:ae:54:43:be:34:2f: c8:0f:2e:67:ba:ae:26:cd:4d:85:1b:c1:80:56:3b: e2:b8:ab:62:24:10:9b:ff:18:bd:f2:76:e8:d5:c3: 7c:eb:9a:74:06:2a:05:b1:51:8b:79:53:f0:90:2d: b3:13:de:d0:3f:22:d0:24:19:8c:72:a2:01:91:7f: 18:47:f0:36:5c:0a:07:4f:91:71:53:d0:90:5b:48: f4:c0:63:b5:08:2f:35:31:88:b4:10:f9:eb:1c:cd: 17:7b:0c:99:f8:0c:13:c9:f2:a0:dc:20:07:de:51: 59:36:e2:2f:2b:02:a2:bb:31:68:70:77:f6:d7:54: d2:7e:a9:bc:23:2c:cc:f4:94:24:08:9d:d3:3b:02: a1:8f:1d:7a:39:0e:d8:7f:01:38:d0:7c:92:b4:47: af:9a:76:44:94:6a:fc:df:8c:9a:7e:f4:ac:a6:90: da:f2:5e:44:ed:fa:db:16:3e:af:30:0a:eb:bb:d7: 9d:68:70:94:d9:6d:83:bd:02:e1:7b:11:04:be:53: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E6:92:58:94:5E:C0:60:C5:6D:6D:94:F4:4A:F3:9E:23:33:46:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9c:e0:79:20:b9:73:b2:2a:f0:73:8d:bc:5e:76:44:9e:46: 73:ac:f3:f5:41:f1:7e:4d:2b:46:8b:3b:d2:32:9c:10:38:89: ca:41:88:2c:1a:5b:b5:b1:dd:1a:c6:30:71:97:79:13:0e:a9: bf:1c:3a:b3:91:d8:66:5c:b9:1a:73:89:fa:ad:4a:ac:77:98: 70:e8:7e:eb:8c:33:47:28:d6:33:ab:60:06:ec:af:d4:6c:82: d3:d8:87:53:8e:77:c5:f6:1b:09:da:84:58:38:c5:67:d8:ce: 74:b5:14:7e:05:a7:f0:93:96:e1:a8:33:49:c5:2d:f9:59:3d: 2a:46:ae:2a:d7:e7:a3:be:6d:44:76:ce:8b:01:44:2f:66:5c: da:9e:f2:cc:07:23:29:05:ef:c3:01:0d:8d:76:bb:c5:ef:27: 2b:04:7c:c4:15:9e:48:e7:83:d3:fc:8d:48:33:71:94:3a:35: 25:ae:1c:d6:44:d8:f4:71:cf:59:b3:3a:30:a3:ae:d3:74:8f: 0c:d5:ef:c5:d1:bc:a2:a2:85:b6:08:cb:d3:97:06:97:33:da: 8f:85:4a:85:16:da:0e:df:95:83:82:48:76:45:48:23:25:7a: 82:0c:55:07:23:40:b2:4e:06:bf:76:be:a8:5f:ee:d1:78:47: 19:77:f1:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fd99gKqcj6TsR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjdhOWY2YzUtN2QyZS00OWU4LWI2MjEtMGRiNDJiZjI2MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxdVA8QFcBN4LwF2Gd67xm6q6rezMCKWQX+T lnj4ZoQwEvkOd+gjBVXqWnJap9y+kyROjTuuVEO+NC/IDy5nuq4mzU2FG8GAVjvi uKtiJBCb/xi98nbo1cN865p0BioFsVGLeVPwkC2zE97QPyLQJBmMcqIBkX8YR/A2 XAoHT5FxU9CQW0j0wGO1CC81MYi0EPnrHM0XewyZ+AwTyfKg3CAH3lFZNuIvKwKi uzFocHf211TSfqm8IyzM9JQkCJ3TOwKhjx16OQ7YfwE40HyStEevmnZElGr834ya fvSsppDa8l5E7frbFj6vMArru9edaHCU2W2DvQLhexEEvlPJ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHmkliUXsBgxW1tlPRK854jM0bQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODliNTRiN2UtN2ZjNi0z Y2EyLTk3ZjctNDMzNWY3OGRlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFic4HkguXOyKvBzjbxedkSeRnOs8/VB8X5NK0aLO9IynBA4icpB iCwaW7Wx3RrGMHGXeRMOqb8cOrOR2GZcuRpzifqtSqx3mHDofuuMM0co1jOrYAbs r9RsgtPYh1OOd8X2GwnahFg4xWfYznS1FH4Fp/CTluGoM0nFLflZPSpGrirX56O+ bUR2zosBRC9mXNqe8swHIykF78MBDY12u8XvJysEfMQVnkjng9P8jUgzcZQ6NSWu HNZE2PRxz1mzOjCjrtN0jwzV78XRvKKihbYIy9OXBpcz2o+FSoUW2g7flYOCSHZF SCMleoIMVQcjQLJOBr92vqhf7tF4Rxl38WA= -----END CERTIFICATE-----Generated at Mon Nov 2 11:52:37 2026 by rpki-client