$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa File: a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa (raw, json) Hash identifier: I71f13spRWtHtxqy/BoeBeQStoPYDLALttk6JkkChJE= Subject key identifier: EE:C1:4E:3E:72:99:AE:AC:DB:47:76:1B:BA:E7:69:70:54:7A:21:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EED51FD4A89E6B390DBCF1680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 401712 IP address blocks: 2001:470:45d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fd:4a:89:e6:b3:90:db:cf:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=60001ffe-cb58-4a95-9306-1d5351b9e0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:1b:f2:9c:fa:75:75:8f:ab:e8:ae:72:24: 90:e8:1d:fe:d5:8d:b4:d2:72:73:ad:94:4c:82:38: 84:b3:83:69:86:9a:5d:7b:be:f6:b5:ca:f2:89:77: 52:02:be:28:6b:90:70:4b:1e:f3:cd:1f:68:f1:55: cf:01:a4:2a:09:a0:21:92:0d:98:dc:4f:ca:9e:21: f2:52:c6:00:52:ca:b7:03:b6:c4:e7:97:0e:65:87: ce:79:ff:bf:e4:86:e0:cc:da:67:df:e3:ff:4e:d8: 05:8e:e5:73:ff:49:86:e3:fb:c9:20:77:5a:aa:db: fa:68:ac:7f:79:f6:f5:94:16:18:03:da:ff:f8:6c: db:b4:09:8e:4e:5f:73:e3:ff:cf:23:8d:a8:fa:98: 79:85:45:a4:ba:f3:12:e4:ab:51:8f:54:35:60:39: ab:29:7c:0f:b5:bc:aa:74:40:c7:f1:0b:53:2b:3d: 48:a3:7b:47:a7:f8:c6:90:9c:41:ba:e6:1f:a1:8c: 59:3c:2c:d4:77:5f:36:87:1c:b6:b5:89:68:76:22: 08:b5:3a:81:94:47:bf:94:ee:a4:88:00:15:07:7c: 13:52:fe:4d:98:c5:bd:79:f0:33:c8:bc:46:87:48: ed:12:be:54:b7:6b:89:e2:98:01:6f:96:3e:56:47: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:4E:3E:72:99:AE:AC:DB:47:76:1B:BA:E7:69:70:54:7A:21:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:45d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f4:ce:d5:6d:f7:ce:12:f8:00:b2:98:ef:2b:43:6c:fe:ec: a3:cf:fb:1d:d3:61:cb:a2:44:85:d8:23:60:de:08:26:61:15: e1:e3:74:f2:fb:ab:8e:96:14:ad:12:a8:d2:67:c3:65:c1:31: 67:18:11:8a:86:cc:5e:0e:d7:c2:a1:cf:56:0d:2e:ef:92:b0: 41:7e:e8:38:21:2b:3a:b7:a0:a5:68:50:d8:59:c3:03:17:67: 63:11:bd:63:11:58:2e:54:f4:dd:03:fd:21:88:f1:db:d6:d3: e7:86:00:06:77:10:63:08:ea:17:82:c1:82:b7:5f:35:18:ec: e4:2c:87:49:a5:61:ee:5d:8f:1f:8f:cd:26:b9:7d:9f:f2:4b: 25:5e:63:80:40:6c:fe:65:fc:d4:8a:e9:66:29:40:a0:52:28: 7b:de:94:3b:28:57:ed:18:19:7f:9d:29:e5:ed:df:25:7e:74: ca:11:f6:9b:fd:7c:11:b2:c2:f7:65:39:6a:32:00:dd:37:0e: cf:af:bd:2e:a5:e5:e5:bd:d4:36:d2:8f:03:65:e7:4d:52:f4: 84:dd:34:33:d9:c2:41:1c:53:a1:f7:a2:51:20:67:c0:fb:41: 0d:da:f8:d3:be:3e:0a:f8:af:cf:d6:71:d4:c9:c9:55:83:4d: 82:eb:ce:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUf1KieazkNvPFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjAwMDFmZmUtY2I1OC00YTk1LTkzMDYtMWQ1MzUxYjllMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwob8pz6dXWPq+iuciSQ6B3+1Y200nJzrZRM gjiEs4Nphppde772tcryiXdSAr4oa5BwSx7zzR9o8VXPAaQqCaAhkg2Y3E/KniHy UsYAUsq3A7bE55cOZYfOef+/5IbgzNpn3+P/TtgFjuVz/0mG4/vJIHdaqtv6aKx/ efb1lBYYA9r/+GzbtAmOTl9z4//PI42o+ph5hUWkuvMS5KtRj1Q1YDmrKXwPtbyq dEDH8QtTKz1Io3tHp/jGkJxBuuYfoYxZPCzUd182hxy2tYlodiIItTqBlEe/lO6k iAAVB3wTUv5NmMW9efAzyLxGh0jtEr5Ut2uJ4pgBb5Y+VkeXPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7BTj5yma6s20d2G7rnaXBUeiFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTNiOTVkNDktMTQyMi0z Y2NiLWFjMzgtOTRhZTIzY2M2YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE70ztVt984S+ACymO8rQ2z+7KPP+x3TYcuiRIXYI2DeCCZhFeHj dPL7q46WFK0SqNJnw2XBMWcYEYqGzF4O18Khz1YNLu+SsEF+6DghKzq3oKVoUNhZ wwMXZ2MRvWMRWC5U9N0D/SGI8dvW0+eGAAZ3EGMI6heCwYK3XzUY7OQsh0mlYe5d jx+PzSa5fZ/ySyVeY4BAbP5l/NSK6WYpQKBSKHvelDsoV+0YGX+dKeXt3yV+dMoR 9pv9fBGywvdlOWoyAN03Ds+vvS6l5eW91DbSjwNl501S9ITdNDPZwkEcU6H3olEg Z8D7QQ3a+NO+Pgr4r8/WcdTJyVWDTYLrzkc= -----END CERTIFICATE-----Generated at Sat Sep 12 09:05:31 2026 by rpki-client