$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa File: a8086cc8-fcbe-3427-b170-7540edab1ef1.roa (raw, json) Hash identifier: Cd8K3rqtQ2e8hD96I6lOpGyqhC6ecr+avrvP3uKRQJk= Subject key identifier: F2:EE:7A:55:D2:54:FF:2C:6C:5B:E9:4A:99:C5:E3:66:2F:F0:4D:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F498AE20482241EB948004840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 52129 IP address blocks: 2001:470:3fe::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e2:04:82:24:1e:b9:48:00:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=371ba2ac-1d56-4cf1-a579-087b2d6f6ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:be:97:f2:91:05:31:6f:c3:bf:2c:42:92: b0:6e:c2:4d:ed:27:d2:15:8f:bd:7a:e1:65:52:dd: d6:a7:c1:6a:9e:a8:e8:57:a4:a5:8c:29:50:bc:cc: e1:98:0e:68:8d:f0:e9:52:70:49:75:7b:20:f5:59: af:1c:70:ab:9f:4a:21:bf:1b:e6:57:24:fe:ff:ce: dc:d0:fd:f7:70:3c:f9:f9:7f:ad:8b:85:67:1e:d9: 3a:4f:b9:45:3d:d1:31:3a:d0:e5:d6:98:d6:d4:59: a0:fa:12:5a:97:2f:06:81:1c:da:9a:e3:05:ee:a9: 90:9f:d4:c8:4f:2d:cd:51:11:98:00:33:43:d6:e8: 0c:de:ac:28:fd:76:b0:9d:e2:06:9d:47:86:2d:ca: d2:1a:ff:6e:0e:fe:d9:9c:eb:70:40:47:43:b7:bf: f4:f5:49:ae:f6:c9:e7:95:d6:f8:bc:03:73:82:40: 53:5e:4c:54:d7:35:fa:32:05:dd:e5:91:31:e8:1b: bc:ae:cf:21:ec:8b:38:6b:48:85:4d:d4:ab:0a:7f: 6d:63:88:9d:88:00:fa:71:be:b8:a8:46:93:74:9e: 87:de:d8:62:2e:b0:e6:99:96:2e:9f:4d:46:27:35: 58:03:d7:6c:38:02:0a:95:f7:d6:32:b0:5e:b0:0f: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EE:7A:55:D2:54:FF:2C:6C:5B:E9:4A:99:C5:E3:66:2F:F0:4D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8086cc8-fcbe-3427-b170-7540edab1ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fe::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:9c:c0:20:82:12:57:3b:5e:76:65:4e:08:8f:ff:7f:cb:2d: b5:69:f9:d0:3b:69:e6:8e:b6:35:79:02:30:3f:98:79:38:76: 56:08:e9:f1:60:b4:ba:c3:2a:ca:97:8e:76:19:00:05:bd:ff: b0:b4:a3:b5:45:d6:91:58:83:59:fb:fa:35:fb:e7:9d:25:10: fc:5b:03:8f:04:9a:e0:35:e7:51:ef:ad:ba:59:33:5f:10:c3: 06:6e:27:b1:f5:d4:45:77:fd:88:6e:b6:3d:5d:04:8b:57:75: e3:3f:1b:ac:1b:8a:b4:6d:71:c9:22:ab:f7:98:83:e4:4f:cc: bc:7e:de:78:89:34:01:d0:d5:46:2d:ac:e9:b8:85:bb:b1:af: 43:7b:8a:be:f4:09:b0:d9:ba:34:a3:ce:57:a3:b7:0b:e1:0c: 50:8b:01:d1:e6:81:aa:bb:a0:3e:5b:25:31:b7:19:c2:a1:d4: ea:6f:1f:04:26:9a:44:d3:04:20:8c:2c:19:36:4d:28:b6:e9: 45:c9:6b:59:92:3d:03:3b:78:f9:1d:28:f1:e2:e2:13:03:87: 39:7f:8e:7b:a0:99:d4:f5:f8:05:86:d4:55:13:5d:9f:e6:36: 72:0b:29:42:df:37:2b:84:2f:c8:f0:93:ad:8f:82:4d:43:b2: 1f:43:fd:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiuIEgiQeuUgASEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzcxYmEyYWMtMWQ1Ni00Y2YxLWE1NzktMDg3YjJkNmY2ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzli+l/KRBTFvw78sQpKwbsJN7SfSFY+9euFl Ut3Wp8FqnqjoV6SljClQvMzhmA5ojfDpUnBJdXsg9VmvHHCrn0ohvxvmVyT+/87c 0P33cDz5+X+ti4VnHtk6T7lFPdExOtDl1pjW1Fmg+hJaly8GgRzamuMF7qmQn9TI Ty3NURGYADND1ugM3qwo/XawneIGnUeGLcrSGv9uDv7ZnOtwQEdDt7/09Umu9snn ldb4vANzgkBTXkxU1zX6MgXd5ZEx6Bu8rs8h7Is4a0iFTdSrCn9tY4idiAD6cb64 qEaTdJ6H3thiLrDmmZYun01GJzVYA9dsOAIKlffWMrBesA8Y1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLuelXSVP8sbFvpSpnF42Yv8E1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTgwODZjYzgtZmNiZS0z NDI3LWIxNzAtNzU0MGVkYWIxZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAP+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL6cwCCCElc7XnZlTgiP/3/LLbVp+dA7aeaOtjV5AjA/mHk4dlYI 6fFgtLrDKsqXjnYZAAW9/7C0o7VF1pFYg1n7+jX7550lEPxbA48EmuA151HvrbpZ M18QwwZuJ7H11EV3/Yhutj1dBItXdeM/G6wbirRtcckiq/eYg+RPzLx+3niJNAHQ 1UYtrOm4hbuxr0N7ir70CbDZujSjzlejtwvhDFCLAdHmgaq7oD5bJTG3GcKh1Opv HwQmmkTTBCCMLBk2TSi26UXJa1mSPQM7ePkdKPHi4hMDhzl/jnugmdT1+AWG1FUT XZ/mNnILKULfNyuEL8jwk62Pgk1Dsh9D/Ss= -----END CERTIFICATE-----Generated at Sun Oct 4 23:15:36 2026 by rpki-client