$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa File: a3e2044e-3da4-36bb-a5aa-699242e3071d.roa (raw, json) Hash identifier: JkCVyDnc5tkA1hOGlh8dJQzFIk40+nt/rQtr5L3+Rek= Subject key identifier: 29:F5:FF:2E:7E:DC:BA:AF:72:93:80:39:91:CA:4B:4A:E4:B9:36:84 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA795FAD424B55AEB15A97800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11096 IP address blocks: 2001:470:4c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:fa:d4:24:b5:5a:eb:15:a9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=67644ee3-5750-4c2b-b20f-8ad9e8876439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:63:3c:88:46:e5:c8:39:0b:7e:87:09:1e: 60:e0:f4:1f:54:7f:7c:20:d3:6d:93:d2:de:a9:f5: 1b:d8:ae:c4:b4:07:0c:0c:9f:11:63:76:1b:c2:24: 41:aa:c8:53:31:4e:2e:77:64:38:27:65:82:ee:f0: cf:20:0a:94:5e:a1:85:8b:8c:a2:d9:6f:3c:08:ab: f0:9c:e9:36:96:40:50:c7:4a:cd:00:3c:dc:4b:46: 07:4e:25:a1:af:a1:a8:46:4c:0b:8f:cd:08:19:9c: ef:3a:d0:3d:7e:98:85:9b:23:f6:a8:d6:8d:dc:9f: 7a:63:93:34:85:1c:f3:a9:29:54:c0:ba:01:c5:4e: 41:1b:18:d2:13:9c:dd:dd:c2:13:88:63:43:e1:c8: 4b:01:13:1b:50:c0:b4:c1:18:5f:9a:ce:7b:ac:4a: 0a:79:7f:e6:af:c6:9d:56:d8:33:e9:04:2d:30:81: 72:ac:8e:0b:cd:78:7f:e2:b5:09:e5:42:07:bf:00: 59:1e:75:b2:8a:55:0c:af:ec:e6:1c:fa:03:b3:9d: 9e:be:93:f7:0a:2c:97:c3:ae:da:c5:c8:b9:91:81: 74:bd:e9:d8:0b:a5:24:a6:80:67:69:24:e0:6f:2d: 62:40:3f:a6:6d:b4:25:f1:73:0b:87:ba:90:c5:cd: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:FF:2E:7E:DC:BA:AF:72:93:80:39:91:CA:4B:4A:E4:B9:36:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7a:eb:60:70:b7:a5:ab:56:4c:1e:e7:1a:53:a7:15:78:8f: 94:91:21:51:3a:5f:8c:db:98:7a:00:d6:5b:a7:79:bb:c3:55: 48:94:5c:9d:b3:ca:98:ca:ce:46:9a:65:d2:ea:8b:e7:fb:f2: 31:2a:41:d9:e6:fc:5d:89:11:58:8d:5b:29:f6:06:d0:3e:31: a6:5b:b5:3e:b6:42:84:c9:35:7e:17:03:21:e4:01:0d:35:22: 11:9d:e6:75:47:79:4d:c3:7b:b0:af:8b:03:8b:a1:4d:08:64: fb:be:5e:53:2e:6d:64:9d:69:25:40:27:ac:ee:0d:0c:98:2d: 99:61:04:ee:2c:e7:39:10:a6:ce:ed:69:1a:46:13:ea:b6:f0: 2b:44:52:88:1c:b4:84:94:9d:22:54:78:42:84:d6:47:f1:84: 69:fe:2b:78:35:d2:08:f5:24:3c:3a:bd:26:a5:82:59:ac:1f: f5:5d:6a:7f:9e:ee:16:de:51:4e:14:36:01:02:4f:dc:28:53: df:c6:bb:36:e7:1c:3e:33:0b:ec:64:83:78:58:1d:e7:9e:5f: 0b:95:50:65:cb:93:78:a5:a7:4f:5d:33:54:eb:bb:0f:b1:6c: 09:d0:a7:9d:8f:44:1d:e9:83:38:8b:fd:17:8a:22:16:a9:70: 04:cb:fd:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlfrUJLVa6xWpeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njc2NDRlZTMtNTc1MC00YzJiLWIyMGYtOGFkOWU4ODc2NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFRjPIhG5cg5C36HCR5g4PQfVH98INNtk9Le qfUb2K7EtAcMDJ8RY3YbwiRBqshTMU4ud2Q4J2WC7vDPIAqUXqGFi4yi2W88CKvw nOk2lkBQx0rNADzcS0YHTiWhr6GoRkwLj80IGZzvOtA9fpiFmyP2qNaN3J96Y5M0 hRzzqSlUwLoBxU5BGxjSE5zd3cITiGND4chLARMbUMC0wRhfms57rEoKeX/mr8ad Vtgz6QQtMIFyrI4LzXh/4rUJ5UIHvwBZHnWyilUMr+zmHPoDs52evpP3CiyXw67a xci5kYF0venYC6UkpoBnaSTgby1iQD+mbbQl8XMLh7qQxc2nbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCn1/y5+3LqvcpOAOZHKS0rkuTaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTNlMjA0NGUtM2RhNC0z NmJiLWE1YWEtNjk5MjQyZTMwNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADt662Bwt6WrVkwe5xpTpxV4j5SRIVE6X4zbmHoA1lunebvDVUiU XJ2zypjKzkaaZdLqi+f78jEqQdnm/F2JEViNWyn2BtA+MaZbtT62QoTJNX4XAyHk AQ01IhGd5nVHeU3De7CviwOLoU0IZPu+XlMubWSdaSVAJ6zuDQyYLZlhBO4s5zkQ ps7taRpGE+q28CtEUogctISUnSJUeEKE1kfxhGn+K3g10gj1JDw6vSalglmsH/Vd an+e7hbeUU4UNgECT9woU9/GuzbnHD4zC+xkg3hYHeeeXwuVUGXLk3ilp09dM1Tr uw+xbAnQp52PRB3pgziL/ReKIhapcATL/dE= -----END CERTIFICATE-----Generated at Sat Sep 12 09:00:54 2026 by rpki-client