$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa File: 96c6728c-3213-3d87-9667-997e02b87ce4.roa (raw, json) Hash identifier: Nr+pT7A6m6uuLQMp29ZTS1wQu9vmiJM6jGZjBeQ6tek= Subject key identifier: F5:82:79:AC:EB:47:3F:51:A1:4A:DA:71:96:20:F1:63:63:9E:49:B2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9BCDDD903262025FA39B4A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 30712 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:dd:90:32:62:02:5f:a3:9b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=3bd8fb47-079c-4a51-9b6c-6fc0d83d3ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:0c:f6:72:4c:51:f2:f3:ee:f9:42:1b:b6: f5:37:23:df:85:3a:46:4c:85:83:82:f5:c3:45:9f: d2:13:32:85:58:ec:88:6e:92:8e:91:70:44:d6:8d: e1:e0:a2:d0:3e:0a:93:94:9c:5f:61:93:d9:59:fe: 86:64:ac:4f:d5:e0:2d:ec:c6:3f:52:72:d4:39:85: bb:28:2b:6a:35:a0:57:64:a0:3b:67:c0:ea:61:38: 61:67:22:e0:dd:a7:ce:fd:26:bd:20:54:6e:0a:70: 55:d1:a7:7d:be:ff:ea:8f:d3:dd:93:4d:06:16:b6: 8b:09:76:56:62:c6:9c:7f:57:da:50:3a:53:f2:06: 12:0a:3d:95:ef:0d:b0:33:fc:d1:e9:db:30:18:1b: c0:00:2d:b2:5c:60:da:76:80:25:22:d2:79:20:99: 21:4d:5d:49:fd:1a:fb:88:05:dd:e6:f8:21:c4:65: 3c:ce:a2:12:d0:a0:98:96:8e:c1:e3:ce:9a:2f:f8: 67:75:bf:72:5f:79:d8:d8:87:e5:32:fc:d7:22:37: ea:5f:70:48:95:eb:94:80:77:e8:0d:86:0b:0a:1f: 94:68:96:39:8b:65:86:a9:cd:ea:11:cb:32:a7:14: c7:89:01:71:9d:45:9c:fd:bd:b1:57:d7:6f:a1:a5: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:82:79:AC:EB:47:3F:51:A1:4A:DA:71:96:20:F1:63:63:9E:49:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8a:b6:07:b2:d5:b0:da:60:3d:11:be:a8:a1:00:b3:f9:90: 3c:1b:70:80:14:5f:70:36:33:21:e7:05:25:43:d7:45:d7:18: 38:63:10:40:f4:08:ee:ea:3d:19:5c:e8:01:a7:59:e3:58:ca: d2:4b:7e:a3:6c:41:df:40:40:60:e3:78:b8:de:21:10:17:fe: 69:57:85:89:4e:69:13:a8:79:35:d0:5c:6b:74:bf:4b:f7:97: 42:92:2a:74:12:c3:0c:f1:c1:2b:95:32:9c:47:90:26:59:09: 36:37:60:f3:6a:e1:a9:42:0e:67:e3:4f:58:79:d7:c1:8d:22: af:37:c7:ad:ac:0d:4c:e5:99:d3:0f:79:fb:2c:92:21:8a:d8: ab:62:f9:cd:d1:fc:e0:f7:bb:c8:96:46:ae:a6:5f:80:e4:63: 27:b9:da:89:84:3b:3f:80:4b:54:14:d5:f3:41:83:75:8f:f0: e9:5b:76:c9:46:1a:4c:d9:27:a9:8b:2f:60:de:5f:d3:59:cb: c6:5e:1e:df:3d:8f:d3:a0:b9:68:b4:be:e9:43:57:9a:33:65: 31:b4:b2:a0:e2:33:8b:35:23:40:6d:2c:aa:e1:27:3d:d6:b2: 7b:3c:b6:b5:a8:3b:2a:9b:64:68:3a:f6:50:2c:aa:34:99:a0: 4d:79:67:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzd2QMmICX6ObSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk M2JkOGZiNDctMDc5Yy00YTUxLTliNmMtNmZjMGQ4M2QzZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdwM9nJMUfLz7vlCG7b1NyPfhTpGTIWDgvXD RZ/SEzKFWOyIbpKOkXBE1o3h4KLQPgqTlJxfYZPZWf6GZKxP1eAt7MY/UnLUOYW7 KCtqNaBXZKA7Z8DqYThhZyLg3afO/Sa9IFRuCnBV0ad9vv/qj9Pdk00GFraLCXZW Ysacf1faUDpT8gYSCj2V7w2wM/zR6dswGBvAAC2yXGDadoAlItJ5IJkhTV1J/Rr7 iAXd5vghxGU8zqIS0KCYlo7B486aL/hndb9yX3nY2IflMvzXIjfqX3BIleuUgHfo DYYLCh+UaJY5i2WGqc3qEcsypxTHiQFxnUWc/b2xV9dvoaUMbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWCeazrRz9RoUracZYg8WNjnkmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTZjNjcyOGMtMzIxMy0z ZDg3LTk2NjctOTk3ZTAyYjg3Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGKtgey1bDaYD0RvqihALP5kDwbcIAUX3A2MyHnBSVD10XXGDhj EED0CO7qPRlc6AGnWeNYytJLfqNsQd9AQGDjeLjeIRAX/mlXhYlOaROoeTXQXGt0 v0v3l0KSKnQSwwzxwSuVMpxHkCZZCTY3YPNq4alCDmfjT1h518GNIq83x62sDUzl mdMPefsskiGK2Kti+c3R/OD3u8iWRq6mX4DkYye52omEOz+AS1QU1fNBg3WP8Olb dslGGkzZJ6mLL2DeX9NZy8ZeHt89j9OguWi0vulDV5ozZTG0sqDiM4s1I0BtLKrh Jz3Wsns8trWoOyqbZGg69lAsqjSZoE15ZzA= -----END CERTIFICATE-----Generated at Tue Oct 27 15:15:22 2026 by rpki-client