$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12bfb25-e6d7-371d-a176-14291c3685f6.roa File: a12bfb25-e6d7-371d-a176-14291c3685f6.roa (raw, json) Hash identifier: q2CmSyrh2OPZtQU5h83GO+T6PnC5v4Av/IuYo+MBwvE= Subject key identifier: 8B:A0:30:9C:F0:F8:77:FE:36:4A:CA:80:D6:37:87:CA:B2:77:94:E5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE2572DD94DED044268C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12bfb25-e6d7-371d-a176-14291c3685f6.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 14277 IP address blocks: 2001:470:1af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e2:57:2d:d9:4d:ed:04:42:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=124ee6ad-4add-40b2-9003-672396865c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:f8:73:51:5f:62:78:a3:8d:49:3c:d2:e7: 2f:10:43:8a:91:fa:4d:df:6b:8f:48:20:64:eb:fd: 73:20:c4:22:33:80:45:1a:ce:f4:6f:da:cf:46:e5: 01:61:54:84:6a:bd:89:57:0f:a3:8b:98:e1:43:24: 93:f3:02:97:a0:d3:7e:f1:b4:1c:0f:0b:38:f9:27: dd:08:dc:eb:c9:fd:79:6f:bb:8d:cf:32:7c:0a:f1: 25:d3:8f:79:66:51:4f:dc:84:a1:a0:11:23:6e:89: 9c:15:68:eb:10:8c:9e:f7:7d:27:d1:2e:91:43:d3: f2:2f:db:f0:af:62:43:31:0f:0a:08:c7:e0:9f:48: 63:31:3e:1c:f6:36:a4:6f:9a:2b:f7:21:a7:5f:a0: 36:bb:cb:75:bb:9b:1b:f6:9b:02:fa:4d:13:a9:20: cb:af:4d:11:6e:53:e1:28:1b:40:3f:54:24:fe:2f: c6:49:a8:c4:39:57:4c:45:dd:ce:24:8d:bf:63:b9: 4c:e7:e5:50:59:de:15:9c:c3:c8:6a:af:ea:0b:37: a0:0e:dc:1a:79:e3:2c:cc:66:34:f9:de:5f:a8:33: fd:3c:9e:36:e1:93:4c:80:3c:c2:c5:f3:d4:23:16: 59:7f:a3:25:1a:d2:c3:c2:76:19:6a:fd:ca:9c:11: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A0:30:9C:F0:F8:77:FE:36:4A:CA:80:D6:37:87:CA:B2:77:94:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a12bfb25-e6d7-371d-a176-14291c3685f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1af::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:af:88:28:ef:15:da:56:56:5f:63:61:fb:2c:f2:ff:d9:9b: ac:db:c9:20:0a:91:fb:5b:2c:9b:64:08:32:db:81:0e:3c:f8: bb:0f:4c:a5:5b:65:3f:e8:83:ab:c0:43:a4:eb:73:75:c3:2d: b4:e0:a0:66:98:3c:20:2d:c1:84:5f:c1:21:34:5f:1c:da:25: 18:24:08:41:37:c1:e8:77:54:71:fb:47:c3:49:67:49:89:e0: 4e:4e:d1:46:3f:b9:d2:11:2e:23:3d:17:ab:b9:e7:7f:9f:55: 8b:e0:e1:22:e5:ff:81:57:96:7c:28:ed:6b:58:b8:a4:69:cf: 29:4e:1c:d6:1f:99:22:73:db:78:80:51:66:d8:34:3a:19:69: 63:95:39:b1:ad:38:83:ce:a4:ef:46:8d:5c:4e:06:da:1a:4f: 17:7f:75:d2:e8:53:d6:73:e4:dc:f6:be:b6:46:6b:af:aa:c4: fc:81:fe:fc:45:72:68:7d:02:04:93:ea:a2:4c:c2:e2:2e:7d: 29:71:da:3e:f3:97:b4:86:16:7d:a9:f7:63:13:14:d0:63:1f: 7b:ad:8c:1c:53:d7:a3:07:55:b8:cc:4b:4e:aa:16:f1:79:cc: a3:4a:ea:68:8c:b7:fd:ae:be:b7:2b:d3:3e:a9:1b:29:2b:2d: 8f:19:a3:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feJXLdlN7QRCaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MTI0ZWU2YWQtNGFkZC00MGIyLTkwMDMtNjcyMzk2ODY1YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPP4c1FfYnijjUk80ucvEEOKkfpN32uPSCBk 6/1zIMQiM4BFGs70b9rPRuUBYVSEar2JVw+ji5jhQyST8wKXoNN+8bQcDws4+Sfd CNzryf15b7uNzzJ8CvEl0495ZlFP3IShoBEjbomcFWjrEIye930n0S6RQ9PyL9vw r2JDMQ8KCMfgn0hjMT4c9jakb5or9yGnX6A2u8t1u5sb9psC+k0TqSDLr00RblPh KBtAP1Qk/i/GSajEOVdMRd3OJI2/Y7lM5+VQWd4VnMPIaq/qCzegDtwaeeMszGY0 +d5fqDP9PJ424ZNMgDzCxfPUIxZZf6MlGtLDwnYZav3KnBGXYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIugMJzw+Hf+NkrKgNY3h8qyd5TlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTEyYmZiMjUtZTZkNy0z NzFkLWExNzYtMTQyOTFjMzY4NWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGKviCjvFdpWVl9jYfss8v/Zm6zbySAKkftbLJtkCDLbgQ48+LsP TKVbZT/og6vAQ6Trc3XDLbTgoGaYPCAtwYRfwSE0XxzaJRgkCEE3weh3VHH7R8NJ Z0mJ4E5O0UY/udIRLiM9F6u553+fVYvg4SLl/4FXlnwo7WtYuKRpzylOHNYfmSJz 23iAUWbYNDoZaWOVObGtOIPOpO9GjVxOBtoaTxd/ddLoU9Zz5Nz2vrZGa6+qxPyB /vxFcmh9AgST6qJMwuIufSlx2j7zl7SGFn2p92MTFNBjH3utjBxT16MHVbjMS06q FvF5zKNK6miMt/2uvrcr0z6pGykrLY8Zo+E= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:45 2026 by rpki-client