$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa File: a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa (raw, json) Hash identifier: +aBvU3bX3Zg1GgSICsDQSJrwLvQwnHtlOfL6BSELg6s= Subject key identifier: FF:15:BB:BE:9E:54:63:1B:01:29:DD:88:9A:A8:66:54:DD:79:E0:27 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFEFEE590ABF8D0F61FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 3255 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:fe:fe:e5:90:ab:f8:d0:f6:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=0e885f49-82e5-4f8c-a59b-9ddf55059f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:37:53:c9:3b:9a:45:a6:5c:ce:53:cd:91: 36:63:3b:9d:26:96:93:7e:b0:7b:6b:6c:e5:65:b0: 01:23:a6:6c:2b:5b:7a:ae:1c:40:b1:04:9b:dd:7a: 77:a0:58:dd:b9:c3:90:86:97:2d:b5:fe:b6:c0:83: 1d:25:0d:b1:14:96:6a:91:e1:c3:10:bb:db:a0:91: 06:c4:e5:91:f6:b8:68:47:55:07:87:e6:63:c0:a5: 6a:3d:98:dd:7d:85:aa:92:27:8d:06:b3:a9:33:e2: ee:36:fb:3f:51:75:e2:18:38:3d:7d:e6:90:43:07: e3:b7:47:a5:52:00:c1:60:28:cc:92:ec:a9:0d:db: 6f:f2:06:a8:bb:ae:eb:ca:5d:68:6c:b3:d2:1a:d9: a7:a1:1a:98:ca:21:1e:13:56:79:5d:3b:c5:0a:45: c2:30:b4:c8:a2:0d:0e:a6:63:23:42:0a:b7:ee:d9: 15:b3:d3:4c:6b:aa:3b:9c:98:26:10:73:8e:83:62: bb:a4:cc:e8:0d:a8:15:f7:46:d6:e9:6f:8b:a2:76: 79:fa:9a:23:b1:1d:4e:ff:45:b2:95:41:0f:17:fc: 88:59:54:ce:84:43:a3:3d:df:21:6e:1a:28:bc:cc: dd:ef:95:e1:35:26:d5:bf:45:e0:46:e0:45:69:dd: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:15:BB:BE:9E:54:63:1B:01:29:DD:88:9A:A8:66:54:DD:79:E0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:44:e2:b5:b8:92:23:d9:5c:78:cd:eb:7f:80:7d:89:e9:15: 39:73:14:8b:37:77:35:fe:cc:14:ad:67:88:5c:e7:be:5c:ed: 43:04:32:d7:5d:ac:f4:a9:2d:57:78:8f:c8:ee:db:9f:e4:fe: 65:71:02:9b:7c:80:ad:bc:f9:a4:43:dd:ef:04:c6:b2:81:89: 0e:cf:57:34:f2:f2:c5:7c:6e:8f:75:c4:64:2f:db:e2:ec:f8: 7f:97:b7:b6:11:65:c8:91:04:61:b8:ed:2c:50:46:36:db:b4: e5:a9:ab:49:13:d1:43:da:44:e8:0d:f8:15:06:4c:04:e7:d2: 8e:98:0d:44:96:87:11:79:1a:4b:f1:ad:53:14:e8:36:fe:ad: c4:70:1f:49:74:20:3e:fc:7c:24:0c:f0:7e:8a:5e:ec:7b:19: 0a:44:8d:5d:81:71:bf:d8:09:c7:82:6e:bc:e3:dd:de:79:33: 1b:e8:34:45:40:bc:7d:5e:d0:79:46:b5:82:49:2c:13:1c:e8: b8:32:8e:22:88:fd:12:9f:af:09:07:92:47:5c:e7:8d:86:7e: d8:1c:94:fc:fd:be:8b:69:5e:7e:ba:cd:dd:01:35:f0:d8:bb: db:b0:7b:d7:1a:3a:d8:c1:a2:6a:25:cc:13:24:71:b9:43:08: bd:ef:77:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ff7+5ZCr+ND2H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MGU4ODVmNDktODJlNS00ZjhjLWE1OWItOWRkZjU1MDU5ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v03U8k7mkWmXM5TzZE2YzudJpaTfrB7a2zl ZbABI6ZsK1t6rhxAsQSb3Xp3oFjducOQhpcttf62wIMdJQ2xFJZqkeHDELvboJEG xOWR9rhoR1UHh+ZjwKVqPZjdfYWqkieNBrOpM+LuNvs/UXXiGDg9feaQQwfjt0el UgDBYCjMkuypDdtv8gaou67ryl1obLPSGtmnoRqYyiEeE1Z5XTvFCkXCMLTIog0O pmMjQgq37tkVs9NMa6o7nJgmEHOOg2K7pMzoDagV90bW6W+LonZ5+pojsR1O/0Wy lUEPF/yIWVTOhEOjPd8hbhoovMzd75XhNSbVv0XgRuBFad3LpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8Vu76eVGMbASndiJqoZlTdeeAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBmN2JlNjgtNjhkMy0z YmQxLWEyYWMtODdiOTY5NGVjNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG9E4rW4kiPZXHjN63+AfYnpFTlzFIs3dzX+zBStZ4hc575c7UME MtddrPSpLVd4j8ju25/k/mVxApt8gK28+aRD3e8ExrKBiQ7PVzTy8sV8bo91xGQv 2+Ls+H+Xt7YRZciRBGG47SxQRjbbtOWpq0kT0UPaROgN+BUGTATn0o6YDUSWhxF5 GkvxrVMU6Db+rcRwH0l0ID78fCQM8H6KXux7GQpEjV2Bcb/YCceCbrzj3d55Mxvo NEVAvH1e0HlGtYJJLBMc6LgyjiKI/RKfrwkHkkdc542GftgclPz9votpXn66zd0B NfDYu9uwe9caOtjBomolzBMkcblDCL3vd1U= -----END CERTIFICATE-----Generated at Sun Nov 1 14:48:21 2026 by rpki-client