$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa File: ae8b4cde-5136-3123-adcf-b51f1392d563.roa (raw, json) Hash identifier: Qg70opRVRu/B+DQw9R/fLFLPfId7JX24c4QiKV6ELGA= Subject key identifier: 64:C9:24:50:F1:59:7E:DE:95:7D:DB:E5:91:F2:5C:3C:A2:A1:00:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE46F5B1F5103069E9780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 61356 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e4:6f:5b:1f:51:03:06:9e:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=ca6f0e4e-80a4-405e-8591-8bf157d73c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:17:a2:9d:1b:30:f1:cd:a4:f5:6a:47:fd: 54:2f:d8:ea:6b:f7:f6:ab:85:b9:ce:f5:9a:26:58: b5:52:8d:46:72:29:e1:31:38:e5:5c:f1:fa:af:d2: e3:94:8a:f0:03:f1:07:c4:56:0e:43:db:0f:81:4f: 4e:93:ec:64:06:5a:62:ac:01:54:ca:f2:d9:8d:05: 99:36:19:08:83:1c:e1:40:ef:27:02:da:b7:b8:44: 6a:e2:8f:fd:ff:0d:74:fe:4a:fa:a8:04:32:fc:74: 39:8d:be:dd:8d:84:46:3f:e0:f0:d0:5d:dd:42:bc: 0c:42:5d:bf:a8:14:ad:cd:f9:20:3f:9d:a9:93:c1: 80:93:3e:c8:b6:07:e3:82:2c:67:a6:e9:f2:52:e4: 70:8a:f7:87:de:65:52:40:13:12:71:b5:d0:3d:4e: d2:e9:c6:75:12:69:35:6c:2d:77:f3:d1:2e:e2:c6: 0b:c9:4e:5c:78:e3:80:66:4a:45:bf:d6:73:82:b2: 58:7e:39:cc:26:0a:86:a7:7a:05:64:15:6a:0e:d5: f9:44:14:61:20:62:88:0f:f0:2c:ab:20:81:e2:fc: 45:0f:6e:7f:e5:6e:7b:6e:c2:a0:d4:e6:aa:7d:57: 3f:d4:22:0c:e2:a2:cb:68:62:c0:ff:a9:74:0a:0f: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C9:24:50:F1:59:7E:DE:95:7D:DB:E5:91:F2:5C:3C:A2:A1:00:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae8b4cde-5136-3123-adcf-b51f1392d563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e8:71:1e:bd:89:e5:7a:ae:84:86:ba:0f:1d:79:ca:50:ef: d5:97:56:b5:92:f9:00:85:13:7d:9c:22:7e:f2:86:8a:53:99: a0:16:a2:7d:fd:c0:45:00:cb:27:da:14:84:4a:0f:7e:b9:cc: c7:47:e4:34:1c:9f:8c:19:e8:2e:86:10:75:de:2c:17:d5:ac: 23:53:1f:c7:4d:4b:05:72:91:a0:c6:80:fc:04:e3:d3:13:99: 8b:b1:45:a8:69:0b:05:ec:fe:49:b3:14:d9:48:ff:40:4a:1c: a9:58:0d:cc:a7:22:e3:a1:75:4c:1f:c1:2e:9a:f2:87:b8:84: 5d:11:07:a4:64:e0:2f:1a:75:be:84:6e:9d:2e:67:0a:af:ce: 86:c8:9a:5d:79:44:20:b8:ca:e9:57:34:0e:44:95:39:c2:b0: 38:1b:b2:a4:04:b0:8a:6d:7c:13:eb:ce:75:2b:65:17:cb:15: a0:9a:9a:52:12:6d:b8:3f:6a:e9:88:41:fc:25:ac:cb:75:5b: 35:55:c4:8c:dd:a6:ca:6d:6a:8c:46:80:99:61:89:f4:9e:83: e6:5b:c2:81:d6:e0:58:37:71:38:e4:55:41:84:7c:e2:97:13: 74:0a:90:55:af:83:b7:00:da:9a:a5:83:3c:15:0d:14:69:67: 11:64:03:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feRvWx9RAwael4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2E2ZjBlNGUtODBhNC00MDVlLTg1OTEtOGJmMTU3ZDczYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY4Xop0bMPHNpPVqR/1UL9jqa/f2q4W5zvWa Jli1Uo1GcinhMTjlXPH6r9LjlIrwA/EHxFYOQ9sPgU9Ok+xkBlpirAFUyvLZjQWZ NhkIgxzhQO8nAtq3uERq4o/9/w10/kr6qAQy/HQ5jb7djYRGP+Dw0F3dQrwMQl2/ qBStzfkgP52pk8GAkz7ItgfjgixnpunyUuRwiveH3mVSQBMScbXQPU7S6cZ1Emk1 bC1389Eu4sYLyU5ceOOAZkpFv9ZzgrJYfjnMJgqGp3oFZBVqDtX5RBRhIGKID/As qyCB4vxFD25/5W57bsKg1OaqfVc/1CIM4qLLaGLA/6l0Cg9TTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTJJFDxWX7elX3b5ZHyXDyioQAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWU4YjRjZGUtNTEzNi0z MTIzLWFkY2YtYjUxZjEzOTJkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrocR69ieV6roSGug8decpQ79WXVrWS+QCFE32cIn7yhopTmaAW on39wEUAyyfaFIRKD365zMdH5DQcn4wZ6C6GEHXeLBfVrCNTH8dNSwVykaDGgPwE 49MTmYuxRahpCwXs/kmzFNlI/0BKHKlYDcynIuOhdUwfwS6a8oe4hF0RB6Rk4C8a db6Ebp0uZwqvzobIml15RCC4yulXNA5ElTnCsDgbsqQEsIptfBPrznUrZRfLFaCa mlISbbg/aumIQfwlrMt1WzVVxIzdpsptaoxGgJlhifSeg+ZbwoHW4Fg3cTjkVUGE fOKXE3QKkFWvg7cA2pqlgzwVDRRpZxFkA1g= -----END CERTIFICATE-----Generated at Tue Nov 3 12:56:25 2026 by rpki-client