$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa File: a21137f7-60b5-3d86-af67-0355739a000a.roa (raw, json) Hash identifier: JccZFFHXo5e8G+IWnTaGvXJm1LmqYSEMonWf+V16iqc= Subject key identifier: 2E:7B:EB:E1:81:8F:B6:C4:09:2B:60:8A:AC:FE:A3:39:35:0F:7E:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC9222F5A978B48AD3FA4B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 41155 IP address blocks: 2001:470:1b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:22:f5:a9:78:b4:8a:d3:fa:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=c68a8007-fa90-4bee-aa56-91c1e71943f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:c1:ef:d4:1c:72:a3:79:f3:6f:c1:e0:0f: 0b:7c:75:d2:a6:ca:0a:a2:8f:9e:5f:30:d3:5c:d8: 54:48:84:c9:0f:07:82:84:a6:33:39:fe:4f:7c:42: 8b:2c:97:b9:8d:03:e5:10:fc:52:b9:b1:3f:ec:af: 03:03:85:72:c1:61:d8:ee:da:c5:4c:fc:15:d3:d4: 10:2e:b6:36:67:5e:7e:5d:68:a8:af:08:0d:71:2e: 4b:c5:b3:be:51:62:ea:fb:0f:e5:4a:6e:d1:da:be: 9f:2e:46:8f:b6:00:b2:b1:22:d7:50:a6:00:08:e3: 1e:46:22:52:33:9e:ca:8c:a3:fd:e0:1b:53:bf:67: 3c:e3:68:67:97:d1:7b:19:57:54:f5:c6:cd:43:3a: 3e:d1:c5:84:a2:6f:dc:f4:7e:15:72:38:a0:b2:9b: 28:b2:68:e7:52:11:ec:d6:8b:5c:34:90:bd:c1:a2: 04:f6:bc:7c:24:4f:5d:2d:53:7c:0e:7d:00:e9:92: 36:dc:55:9d:f4:e0:79:21:85:c2:06:88:60:3f:e9: 31:a8:f6:40:a1:de:cc:c2:b4:e7:6c:28:f2:27:95: 75:ae:c7:95:9f:a9:9c:16:6d:08:a6:6b:1e:3b:31: b6:bf:f1:f0:36:83:15:81:33:d4:4e:66:11:b0:ce: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7B:EB:E1:81:8F:B6:C4:09:2B:60:8A:AC:FE:A3:39:35:0F:7E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:30:1d:53:ad:e3:5e:d0:8f:c3:45:25:2d:91:3b:47:3f:dd: ec:ba:64:02:97:c1:81:09:ba:9c:0b:37:a1:16:1a:c2:2c:3a: fd:cc:79:76:b7:1d:b5:e1:e1:33:36:d0:43:8c:02:0b:75:27: e6:c6:c1:09:e0:49:9c:83:42:72:e4:c0:42:b8:09:14:16:0f: 96:26:8b:aa:67:9a:ce:94:d9:1d:d9:6b:dd:4c:8e:c4:d5:6a: 2e:11:a4:b5:cf:ff:9e:35:48:b8:e5:66:2a:0a:9a:1d:f3:1b: b5:be:3a:ff:94:37:8d:70:88:78:2e:14:a8:b7:21:d2:f7:64: 31:dc:af:40:57:ea:e5:73:58:d5:06:65:47:01:a0:76:bf:4e: de:6b:5e:48:5f:9e:5e:f1:73:78:b3:83:eb:a4:b7:a2:71:db: b2:08:7c:3d:c8:2d:9d:a3:09:b7:9f:17:f2:5f:5f:80:17:e0: d9:2d:0a:40:14:28:e1:72:ac:74:46:8b:9b:f9:dc:71:fd:69: 49:6b:66:c5:94:1c:de:3c:87:08:34:38:f7:e5:52:e1:b5:f3: 48:ed:cb:52:ca:96:5f:87:6a:63:db:e0:c2:ee:eb:00:59:62: 3f:dd:60:c9:96:e2:62:b8:b6:86:f4:98:2c:e5:6d:f4:1e:7d: a9:98:e3:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiL1qXi0itP6S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YzY4YTgwMDctZmE5MC00YmVlLWFhNTYtOTFjMWU3MTk0M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6vB79QccqN582/B4A8LfHXSpsoKoo+eXzDT XNhUSITJDweChKYzOf5PfEKLLJe5jQPlEPxSubE/7K8DA4VywWHY7trFTPwV09QQ LrY2Z15+XWiorwgNcS5LxbO+UWLq+w/lSm7R2r6fLkaPtgCysSLXUKYACOMeRiJS M57KjKP94BtTv2c842hnl9F7GVdU9cbNQzo+0cWEom/c9H4VcjigspsosmjnUhHs 1otcNJC9waIE9rx8JE9dLVN8Dn0A6ZI23FWd9OB5IYXCBohgP+kxqPZAod7MwrTn bCjyJ5V1rseVn6mcFm0IpmseOzG2v/HwNoMVgTPUTmYRsM6gGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC576+GBj7bECStgiqz+ozk1D37FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTIxMTM3ZjctNjBiNS0z ZDg2LWFmNjctMDM1NTczOWEwMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACowHVOt417Qj8NFJS2RO0c/3ey6ZAKXwYEJupwLN6EWGsIsOv3M eXa3HbXh4TM20EOMAgt1J+bGwQngSZyDQnLkwEK4CRQWD5Ymi6pnms6U2R3Za91M jsTVai4RpLXP/541SLjlZioKmh3zG7W+Ov+UN41wiHguFKi3IdL3ZDHcr0BX6uVz WNUGZUcBoHa/Tt5rXkhfnl7xc3izg+ukt6Jx27IIfD3ILZ2jCbefF/JfX4AX4Nkt CkAUKOFyrHRGi5v53HH9aUlrZsWUHN48hwg0OPflUuG180jty1LKll+HamPb4MLu 6wBZYj/dYMmW4mK4tob0mCzlbfQefamY4+Q= -----END CERTIFICATE-----Generated at Sat Aug 22 04:35:26 2026 by rpki-client