$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5cf960-8708-3a74-82f5-84e02ef906df.roa File: 8f5cf960-8708-3a74-82f5-84e02ef906df.roa (raw, json) Hash identifier: jXK36qLmD+0sdqKvZTjbLzfQNamVwfalcjSuNo+EOMA= Subject key identifier: EF:1A:85:E6:79:58:3D:41:5E:8A:CA:9B:3A:CA:88:7C:A3:8B:4D:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DD93B97609791367DB05A Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5cf960-8708-3a74-82f5-84e02ef906df.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 26110 IP address blocks: 2001:470:83::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d9:3b:97:60:97:91:36:7d:b0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=22666493-e3e7-4f02-8c86-6cd388cdd79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5e:06:a2:a4:8c:49:8c:c6:3e:27:88:84:98: ae:81:61:2e:72:68:d1:c6:0a:40:2d:56:a6:3e:f5: 79:80:54:06:2b:01:b8:11:bc:8e:d6:ff:1b:97:a6: 86:e8:d8:9a:34:fe:3e:64:8e:9c:0c:71:95:00:fa: 30:27:f2:a8:57:8d:b3:87:5e:b3:69:4c:82:fe:56: 61:52:f9:9d:84:54:e1:b8:16:32:7f:c1:cb:1c:bd: b0:cc:86:df:56:a3:43:07:7b:9c:67:bc:df:fb:65: 3a:11:9a:0c:da:24:0f:5e:02:4f:8b:53:63:18:b8: 89:67:1c:27:55:87:10:a2:db:e0:10:58:2a:65:b5: 35:a1:a1:ce:6a:8c:f9:f4:a3:4c:5d:bc:d9:15:91: 06:80:07:be:db:93:f5:36:d0:1f:70:ae:62:87:ca: 90:97:a8:af:f1:c7:72:69:8e:79:00:db:fc:f2:8d: 33:7c:9b:9b:b3:51:01:cd:f1:cc:0d:a1:1f:01:f0: b6:47:d5:88:7f:57:c6:dc:a6:20:f6:11:ae:70:46: 02:7d:a3:0d:4b:aa:e1:89:2b:c0:f9:38:b4:66:00: 40:4b:3c:39:8d:c2:af:dd:49:81:b2:c5:17:5e:cb: a2:1c:ee:f1:9e:e6:25:96:3e:76:e5:44:f3:71:41: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1A:85:E6:79:58:3D:41:5E:8A:CA:9B:3A:CA:88:7C:A3:8B:4D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5cf960-8708-3a74-82f5-84e02ef906df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:83::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0e:f2:0c:96:b5:be:be:eb:23:f3:b8:04:a4:11:5d:29:0d: 15:8b:26:fc:17:bd:26:94:10:c0:70:83:5b:e2:14:72:6e:b5: 28:1f:4d:81:12:71:e4:f8:b5:1a:9b:83:ad:65:85:f3:2a:02: 1d:bd:32:d1:f5:28:67:36:72:8b:2a:c6:ba:2c:7d:59:69:91: 41:2c:c2:38:26:7f:6f:a4:b4:b5:92:40:ad:58:f7:d8:cf:93: 15:ef:74:f0:6a:9e:65:7a:41:bb:3c:b7:c6:56:58:f6:b8:20: 5a:40:a2:33:7b:5f:e0:69:be:7a:9a:0b:74:fa:c6:f6:41:b7: 73:7d:fa:d5:d7:da:35:14:fe:8b:bf:03:8c:20:f0:dc:ec:09: 13:f8:aa:03:50:a3:48:d4:ce:7f:85:08:19:8a:4e:0f:ad:40: f1:6f:16:29:aa:84:c6:d5:61:a8:e3:3a:2c:0a:9c:4e:4c:f3: 31:6c:6e:95:b8:55:1f:6f:05:98:62:81:f1:a8:c0:e0:4e:57: a3:f8:a9:5a:96:61:05:2e:1c:ce:42:db:ba:0b:cf:d4:ce:67: 96:77:e5:90:ea:a6:40:7f:2a:72:84:62:e6:8e:da:76:37:d6: 2c:d1:cc:86:dc:f6:fe:68:94:80:ba:23:59:1c:c4:33:89:d3: 6b:04:af:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fdk7l2CXkTZ9sFowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjI2NjY0OTMtZTNlNy00ZjAyLThjODYtNmNkMzg4Y2RkNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV4GoqSMSYzGPieIhJiugWEucmjRxgpALVam PvV5gFQGKwG4EbyO1v8bl6aG6NiaNP4+ZI6cDHGVAPowJ/KoV42zh16zaUyC/lZh UvmdhFThuBYyf8HLHL2wzIbfVqNDB3ucZ7zf+2U6EZoM2iQPXgJPi1NjGLiJZxwn VYcQotvgEFgqZbU1oaHOaoz59KNMXbzZFZEGgAe+25P1NtAfcK5ih8qQl6iv8cdy aY55ANv88o0zfJubs1EBzfHMDaEfAfC2R9WIf1fG3KYg9hGucEYCfaMNS6rhiSvA +Ti0ZgBASzw5jcKv3UmBssUXXsuiHO7xnuYllj525UTzcUFnbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO8aheZ5WD1BXorKmzrKiHyji01DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGY1Y2Y5NjAtODcwOC0z YTc0LTgyZjUtODRlMDJlZjkwNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsO8gyWtb6+6yPzuASkEV0pDRWLJvwXvSaUEMBwg1viFHJutSgf TYESceT4tRqbg61lhfMqAh29MtH1KGc2cosqxrosfVlpkUEswjgmf2+ktLWSQK1Y 99jPkxXvdPBqnmV6Qbs8t8ZWWPa4IFpAojN7X+BpvnqaC3T6xvZBt3N9+tXX2jUU /ou/A4wg8NzsCRP4qgNQo0jUzn+FCBmKTg+tQPFvFimqhMbVYajjOiwKnE5M8zFs bpW4VR9vBZhigfGowOBOV6P4qVqWYQUuHM5C27oLz9TOZ5Z35ZDqpkB/KnKEYuaO 2nY31izRzIbc9v5olIC6I1kcxDOJ02sEr6A= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:49 2026 by rpki-client