$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa File: b7083891-90ca-3ebd-85a3-c2668606c9c8.roa (raw, json) Hash identifier: 3kiVh+F5hTd4svoGizlen4b+I43KS+vd29z3PXR7SeI= Subject key identifier: 3D:2B:B5:BF:9D:E1:28:31:2C:4E:52:D8:2B:02:CA:F8:6E:D7:42:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F857875D33A78EADF52677920 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 62537 IP address blocks: 2001:470:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:75:d3:3a:78:ea:df:52:67:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=489e3cc9-cbfe-4a38-a7ce-168467e48037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:02:f9:7a:62:02:1f:9e:df:8e:a1:1a:0c: 4b:39:41:0d:a2:8a:70:61:39:69:29:92:ce:51:08: b7:0b:75:77:8e:51:69:81:5d:e6:e8:c7:4b:03:14: 63:b0:7d:69:d2:3a:12:95:c1:25:68:d7:7a:26:2a: f3:2f:28:c8:46:94:38:d8:cc:df:48:f8:35:29:87: f5:2c:61:01:23:18:1e:80:82:b1:57:de:df:d7:d2: 02:ff:fb:5d:e7:9c:fb:82:05:2d:fa:95:ae:2a:62: 1a:df:b8:31:9a:25:ba:3f:2c:c8:c4:88:d2:20:78: e7:38:b2:b1:bd:ea:17:54:de:e2:60:38:1b:f0:a1: bd:6e:9e:ad:52:22:5a:9a:7a:9d:8e:65:28:e9:e7: 98:fa:fb:42:7b:98:09:9e:eb:0d:e0:57:0c:81:fb: 92:7b:96:f8:dd:6d:ef:40:b4:38:78:ff:87:5c:73: 97:de:6f:ae:28:8f:cd:2a:dc:f8:a3:b6:63:37:6e: bb:a5:0c:0f:c9:42:88:6e:c7:db:fb:14:c0:a5:aa: 4b:6f:ca:17:4d:da:17:18:c3:e6:b8:35:b1:66:b9: cf:fe:e5:4d:96:cd:d9:18:f7:49:bc:e7:7f:be:24: a4:58:9d:ce:ea:77:c4:27:17:d2:fd:bb:e5:3e:78: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:B5:BF:9D:E1:28:31:2C:4E:52:D8:2B:02:CA:F8:6E:D7:42:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:04:c3:b9:57:a2:8d:cf:8f:09:cf:c9:16:9b:57:c7:98:37: 1c:b8:62:15:d8:43:28:cb:f8:14:a1:60:96:9d:de:1c:23:2f: d1:56:bc:18:2c:fc:c2:40:75:50:d6:c2:6d:08:dc:a5:df:11: 42:05:8f:1d:50:b1:86:b6:b1:0d:8f:25:93:83:78:1b:b3:06: 66:6b:83:b1:82:69:34:54:6a:af:96:5a:87:eb:de:be:b2:f3: 33:f7:c0:5b:4b:0d:45:a2:b7:bf:9a:5b:6e:3f:56:ba:15:e0: 09:aa:83:0a:15:cf:a2:c4:42:5e:44:1b:8c:c7:f6:ef:52:fc: 4d:63:ce:2b:6d:18:0d:10:df:bf:79:87:14:c6:f9:7e:69:e3: 12:7b:84:72:86:be:6a:fd:ab:29:04:43:8f:4c:88:77:d8:11: f5:c8:7d:fd:b2:be:13:f2:f4:1a:ed:4d:48:70:14:85:50:be: 77:64:b7:6b:24:8f:09:a6:47:73:59:7b:f7:c4:10:ee:ed:14: b3:89:73:f1:ae:5f:13:50:12:90:7d:31:68:c3:36:32:a5:b3: a6:22:23:9b:f6:61:8f:e8:f6:ce:5d:66:ce:8d:d2:86:84:26: 94:25:0d:d9:dd:8a:40:d1:c1:73:fd:d4:38:4e:fd:0f:9a:3e: a9:6a:ff:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeHXTOnjq31JneSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NDg5ZTNjYzktY2JmZS00YTM4LWE3Y2UtMTY4NDY3ZTQ4MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQC+XpiAh+e346hGgxLOUENoopwYTlpKZLO UQi3C3V3jlFpgV3m6MdLAxRjsH1p0joSlcElaNd6JirzLyjIRpQ42MzfSPg1KYf1 LGEBIxgegIKxV97f19IC//td55z7ggUt+pWuKmIa37gxmiW6PyzIxIjSIHjnOLKx veoXVN7iYDgb8KG9bp6tUiJamnqdjmUo6eeY+vtCe5gJnusN4FcMgfuSe5b43W3v QLQ4eP+HXHOX3m+uKI/NKtz4o7ZjN267pQwPyUKIbsfb+xTApapLb8oXTdoXGMPm uDWxZrnP/uVNls3ZGPdJvOd/viSkWJ3O6nfEJxfS/bvlPniDowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0rtb+d4SgxLE5S2CsCyvhu10KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjcwODM4OTEtOTBjYS0z ZWJkLTg1YTMtYzI2Njg2MDZjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA4Ew7lXoo3PjwnPyRabV8eYNxy4YhXYQyjL+BShYJad3hwjL9FW vBgs/MJAdVDWwm0I3KXfEUIFjx1QsYa2sQ2PJZODeBuzBmZrg7GCaTRUaq+WWofr 3r6y8zP3wFtLDUWit7+aW24/VroV4AmqgwoVz6LEQl5EG4zH9u9S/E1jzittGA0Q 3795hxTG+X5p4xJ7hHKGvmr9qykEQ49MiHfYEfXIff2yvhPy9BrtTUhwFIVQvndk t2skjwmmR3NZe/fEEO7tFLOJc/GuXxNQEpB9MWjDNjKls6YiI5v2YY/o9s5dZs6N 0oaEJpQlDdndikDRwXP91DhO/Q+aPqlq/zE= -----END CERTIFICATE-----Generated at Sun Nov 1 14:48:13 2026 by rpki-client