$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09456e9-dd15-3976-89a6-211c6bba01a2.roa File: a09456e9-dd15-3976-89a6-211c6bba01a2.roa (raw, json) Hash identifier: QEFuVSk1LLu7dIi/pwoEgGQGR3krc/rtg9k7eElwWN4= Subject key identifier: D7:61:AD:D0:BB:57:02:D7:E9:92:39:7E:EA:54:92:63:1F:84:48:5D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ECA6C899ACF72287D120AA980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09456e9-dd15-3976-89a6-211c6bba01a2.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 22871 IP address blocks: 2001:470:414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:89:9a:cf:72:28:7d:12:0a:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=7ef71973-99d9-412f-9b4c-b37e6a529725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:f9:3f:5f:a5:0c:6d:2f:66:ca:a0:d6:5a: f4:32:4f:b0:a8:80:fd:e4:af:2e:d5:a9:fa:d2:18: d9:af:1f:3c:54:7b:7b:1c:61:4f:3d:20:2d:2c:ae: 30:be:1c:07:c4:5b:b3:be:7f:a9:95:92:74:7d:5b: fd:16:1d:ea:b4:bc:ef:c2:a2:0e:5e:3c:e1:c1:19: c8:cb:e8:83:87:55:6c:c3:d7:bb:0b:2a:8f:7d:27: 0a:78:5f:6b:20:c4:0b:08:43:8f:57:b7:21:a4:77: 9a:b8:75:20:cd:63:95:0e:37:67:6e:17:60:b9:6f: 03:27:08:8c:ed:72:06:5e:08:2b:4d:7a:ce:f1:95: 91:5d:b0:c9:c3:ec:19:6f:43:a9:cc:7d:35:92:65: 06:f7:52:f6:f3:fd:23:62:5e:45:30:3f:64:fd:40: f0:36:8c:77:59:65:02:bd:4a:1c:66:6b:13:f9:d5: a5:d5:99:01:40:3f:ce:24:ea:98:ed:07:6b:0f:7d: ea:6b:87:40:f1:48:81:1e:13:9e:92:c9:8d:6a:71: 14:9e:20:fb:c4:ee:7d:87:24:70:7b:b7:3e:77:d5: 0c:4d:fb:9d:59:8e:62:b1:98:e9:58:e5:8c:9c:a2: d3:fb:78:d8:af:10:cf:b5:19:a8:1a:ae:8a:56:c5: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:61:AD:D0:BB:57:02:D7:E9:92:39:7E:EA:54:92:63:1F:84:48:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09456e9-dd15-3976-89a6-211c6bba01a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4f:a7:15:3d:1a:b7:6a:a7:a7:e1:f9:62:af:e0:95:17:53: eb:92:cc:c5:43:a9:50:bb:79:77:b2:4d:7a:76:53:45:ad:98: cf:91:46:78:20:43:f3:f6:c4:51:e9:e1:45:7b:62:d2:ee:ce: 34:f2:18:c1:25:d2:e0:4b:43:57:ba:1c:e2:67:5e:08:ed:3c: 07:e3:f5:65:09:11:13:ba:f6:9c:39:25:7a:32:3e:22:77:94: 28:a4:f4:41:2c:02:92:e6:43:de:85:ad:1c:12:02:67:c6:26: 71:b3:83:45:c1:9f:aa:f8:81:07:a4:15:c9:19:33:e9:7c:7b: ed:6c:68:d0:1f:29:50:47:c4:35:b7:a1:3c:aa:69:27:ca:d5: 36:a6:6b:92:93:17:ff:1b:e7:98:bf:d8:2b:40:ca:ef:88:32: 51:c4:b1:24:55:e6:8f:cd:26:d1:94:19:fe:92:33:47:79:95: 9b:06:ae:03:d9:1e:ee:8d:52:80:68:da:83:7c:47:9c:09:df: db:b3:5a:7f:bc:f0:16:37:24:92:a7:76:0d:eb:2d:b8:55:64: 38:e8:96:c8:e7:bf:a0:d3:be:ce:db:84:fc:5a:6c:9d:f4:89: 15:ad:0a:cc:31:95:a3:ae:b4:5a:57:52:73:e6:37:a3:82:c7: 2f:f1:43:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7KbImaz3IofRIKqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk N2VmNzE5NzMtOTlkOS00MTJmLTliNGMtYjM3ZTZhNTI5NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEL5P1+lDG0vZsqg1lr0Mk+wqID95K8u1an6 0hjZrx88VHt7HGFPPSAtLK4wvhwHxFuzvn+plZJ0fVv9Fh3qtLzvwqIOXjzhwRnI y+iDh1Vsw9e7CyqPfScKeF9rIMQLCEOPV7chpHeauHUgzWOVDjdnbhdguW8DJwiM 7XIGXggrTXrO8ZWRXbDJw+wZb0OpzH01kmUG91L28/0jYl5FMD9k/UDwNox3WWUC vUocZmsT+dWl1ZkBQD/OJOqY7QdrD33qa4dA8UiBHhOeksmNanEUniD7xO59hyRw e7c+d9UMTfudWY5isZjpWOWMnKLT+3jYrxDPtRmoGq6KVsWIjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNdhrdC7VwLX6ZI5fupUkmMfhEhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTA5NDU2ZTktZGQxNS0z OTc2LTg5YTYtMjExYzZiYmEwMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVPpxU9Grdqp6fh+WKv4JUXU+uSzMVDqVC7eXeyTXp2U0WtmM+R RnggQ/P2xFHp4UV7YtLuzjTyGMEl0uBLQ1e6HOJnXgjtPAfj9WUJERO69pw5JXoy PiJ3lCik9EEsApLmQ96FrRwSAmfGJnGzg0XBn6r4gQekFckZM+l8e+1saNAfKVBH xDW3oTyqaSfK1Tama5KTF/8b55i/2CtAyu+IMlHEsSRV5o/NJtGUGf6SM0d5lZsG rgPZHu6NUoBo2oN8R5wJ39uzWn+88BY3JJKndg3rLbhVZDjolsjnv6DTvs7bhPxa bJ30iRWtCswxlaOutFpXUnPmN6OCxy/xQ28= -----END CERTIFICATE-----Generated at Sat Sep 12 09:05:58 2026 by rpki-client