$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa File: a0a5fafb-9602-388d-b21b-0ba4f6937692.roa (raw, json) Hash identifier: wKPqf91WjIVuVdTpxUB4/WPm4m+3wVf06ml34PnjDOs= Subject key identifier: 76:CD:55:2B:C6:C8:26:53:40:EE:8D:83:09:CC:BC:5E:B9:1C:EC:62 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F963881B1FF514A90E76423A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 18821 IP address blocks: 2001:470:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:81:b1:ff:51:4a:90:e7:64:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=d7a125f8-c45e-4458-b7fd-30aa05291e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:14:4b:a2:77:ff:1b:f0:b4:38:4d:f1:cf: b2:c7:27:de:8c:f5:12:a4:6e:40:20:23:47:2e:06: 79:12:45:e3:50:57:10:06:47:f9:f1:25:dd:1d:87: 9f:4a:e5:8b:b7:ef:27:b5:e3:b7:1b:c8:05:f6:3c: f0:08:ed:b7:9c:65:ec:37:3b:79:b2:78:ad:f8:48: b5:ab:55:2b:df:f8:18:d5:d3:e5:e0:09:2e:ae:d0: bf:71:a4:10:66:c8:fc:00:aa:d1:fb:0e:49:61:af: 1c:b4:79:49:5f:11:c8:a6:15:d8:04:8b:f3:3d:0d: 3f:f7:16:87:30:34:8d:bb:34:bb:45:2d:c3:68:bf: 80:54:82:fc:4f:0e:a1:fb:fd:2f:96:6e:c2:f5:22: 87:ef:fa:3d:c0:f9:70:75:24:0a:79:c4:3a:2c:f7: ed:e3:f8:35:8b:27:ec:0c:8b:e4:7f:48:83:da:f1: f3:08:19:79:78:8b:4b:ea:96:d3:a9:92:1d:49:16: f4:a7:41:f4:7c:3e:4a:d7:56:23:ce:4b:c8:b6:8f: 28:23:b7:d9:4c:7b:cd:b4:aa:cc:64:08:26:52:63: b4:b7:7b:49:4e:7b:7d:b5:ad:20:b7:73:4b:09:d2: 98:cd:ba:ca:f5:4c:39:17:49:a5:72:fc:14:44:93: 01:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:55:2B:C6:C8:26:53:40:EE:8D:83:09:CC:BC:5E:B9:1C:EC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d4:23:28:17:20:83:45:96:d9:3a:fa:c2:64:cd:b5:bb:2a: a9:09:f5:4c:02:5e:52:1e:28:72:d5:91:3d:73:90:e9:f1:99: 1e:14:6b:11:a5:8a:8c:78:16:9a:5f:7c:93:11:f3:31:14:9f: 57:e6:9b:3f:f5:16:42:51:13:82:5a:69:68:0f:7f:a2:ba:cc: a9:5b:0f:47:91:d8:87:ce:ba:2a:87:a1:2c:eb:7b:6e:61:9e: df:9e:01:6e:9d:f2:4e:99:da:cd:1b:e2:aa:45:4d:5c:4a:51: f7:ec:9f:b5:78:01:c0:08:65:e6:a4:e9:f5:65:da:51:84:41: eb:db:28:6e:1d:30:9c:2c:69:51:1f:9d:83:9d:f3:cf:58:93: b6:5c:14:7d:26:9e:3d:a8:4c:10:5a:2d:47:9b:f0:31:37:aa: b8:89:2d:ff:0f:98:a5:af:64:97:7f:75:85:9e:b3:24:3a:a0: 18:c2:09:a6:b2:64:15:80:1b:ed:ed:c2:a7:2d:5c:96:18:08: 4b:ed:39:f2:22:fd:90:d7:f1:68:a8:38:57:19:40:b2:a9:c0: e2:73:67:e1:4f:a6:1b:45:ce:da:6c:66:29:b7:9c:71:3d:c3: 7a:d3:7c:08:06:5d:99:d4:49:82:a9:f6:59:7a:37:e9:ab:83: 6d:67:f8:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+WOIGx/1FKkOdkI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ZDdhMTI1ZjgtYzQ1ZS00NDU4LWI3ZmQtMzBhYTA1MjkxZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscUS6J3/xvwtDhN8c+yxyfejPUSpG5AICNH LgZ5EkXjUFcQBkf58SXdHYefSuWLt+8nteO3G8gF9jzwCO23nGXsNzt5snit+Ei1 q1Ur3/gY1dPl4AkurtC/caQQZsj8AKrR+w5JYa8ctHlJXxHIphXYBIvzPQ0/9xaH MDSNuzS7RS3DaL+AVIL8Tw6h+/0vlm7C9SKH7/o9wPlwdSQKecQ6LPft4/g1iyfs DIvkf0iD2vHzCBl5eItL6pbTqZIdSRb0p0H0fD5K11YjzkvIto8oI7fZTHvNtKrM ZAgmUmO0t3tJTnt9ta0gt3NLCdKYzbrK9Uw5F0mlcvwURJMB+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHbNVSvGyCZTQO6NgwnMvF65HOxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBhNWZhZmItOTYwMi0z ODhkLWIyMWItMGJhNGY2OTM3NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrUIygXIINFltk6+sJkzbW7KqkJ9UwCXlIeKHLVkT1zkOnxmR4U axGliox4FppffJMR8zEUn1fmmz/1FkJRE4JaaWgPf6K6zKlbD0eR2IfOuiqHoSzr e25hnt+eAW6d8k6Z2s0b4qpFTVxKUffsn7V4AcAIZeak6fVl2lGEQevbKG4dMJws aVEfnYOd889Yk7ZcFH0mnj2oTBBaLUeb8DE3qriJLf8PmKWvZJd/dYWesyQ6oBjC CaayZBWAG+3twqctXJYYCEvtOfIi/ZDX8WioOFcZQLKpwOJzZ+FPphtFztpsZim3 nHE9w3rTfAgGXZnUSYKp9ll6N+mrg21n+LU= -----END CERTIFICATE-----Generated at Sun Nov 1 14:52:03 2026 by rpki-client