$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa File: b916f5f4-57c2-391a-992e-822e129a5b84.roa (raw, json) Hash identifier: vki+0fnBOcuIkg3249cHiH5kSNRWVobL2rorJNHfVeA= Subject key identifier: 9E:52:14:38:42:E8:ED:23:56:8F:B0:67:9F:1F:57:1B:C5:59:75:67 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9BCDE104E2DEB5442E1A1620 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 11970 IP address blocks: 2001:470:393::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e1:04:e2:de:b5:44:2e:1a:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=c29a9fe5-3306-4991-95aa-d9af7a14eac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:49:83:e2:a8:bb:0c:78:9d:6c:1c:1f:f1: 02:83:d3:dd:b4:78:33:de:f4:15:06:45:79:2f:f0: 41:6a:f8:bd:fc:c6:74:c9:ba:38:7c:26:d3:3c:79: be:a6:19:10:1e:fe:d2:18:4a:c3:e7:0a:84:8d:8e: fe:5d:46:8e:c9:0a:d0:f1:89:82:d2:02:e8:31:42: 5b:9c:56:08:ec:b6:3c:97:74:52:40:89:ca:ec:53: 30:ad:ad:ec:43:50:43:0f:89:88:fb:10:68:99:7a: b7:1a:16:ae:35:9a:58:91:75:51:02:65:68:b6:bd: 0b:4f:46:eb:2f:a0:ce:b4:e5:2c:04:70:f8:d3:90: c3:01:69:4d:06:4c:4c:de:0d:f3:09:16:52:20:dd: 07:8f:11:2b:0d:1c:99:f2:7b:23:49:a4:e4:57:0f: ad:70:37:48:bf:f0:31:87:54:c5:5c:cc:9b:51:b5: a8:fe:73:00:eb:51:14:32:da:ba:71:b7:b7:0a:6c: 4b:5d:39:ad:99:0b:b0:aa:a8:26:a0:5f:fc:95:66: 3d:1f:99:78:27:b6:da:a2:38:02:64:52:13:25:4c: ba:c3:5e:2a:51:5e:cb:67:1e:13:46:4d:c1:d2:74: 7b:32:6e:9a:0e:6f:fd:81:c8:9b:a6:ee:f2:ce:02: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:14:38:42:E8:ED:23:56:8F:B0:67:9F:1F:57:1B:C5:59:75:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b916f5f4-57c2-391a-992e-822e129a5b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:393::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3a:65:bc:ce:22:bf:bc:67:c9:0b:f8:ca:48:db:16:14:3c: 13:86:88:71:80:b0:f9:30:27:03:50:7e:97:d7:fe:26:20:0d: 1e:8f:e5:07:3e:9f:0a:8f:a9:27:5d:b4:b4:a0:aa:dd:bc:68: 9d:0d:97:3d:cc:ac:d0:b2:bd:f9:7c:0b:16:b9:e0:90:2c:cc: 07:69:45:8f:0b:7a:d6:ce:89:6a:03:3a:ba:63:8f:52:5c:64: cc:61:26:71:de:57:26:8f:db:04:78:dc:27:bb:ca:de:1b:9b: a5:88:8a:d5:8e:bc:e5:39:dd:7d:61:b3:f6:77:a8:3d:af:d2: 58:5d:9d:13:5a:1d:ba:f6:59:3b:d9:6a:50:fe:7b:ce:10:95: 3b:8a:b2:fe:45:bc:5a:82:de:72:a9:77:ef:4b:e4:35:06:cb: af:05:43:c3:76:35:eb:69:5b:6b:3e:17:95:97:0c:d6:20:e4: c1:0e:d1:cb:cd:0d:e6:b0:ae:dc:a7:fd:26:67:c2:9a:48:aa: bb:f9:f6:41:55:be:88:7d:11:6e:a3:57:51:2e:08:ea:b4:0b: d5:6f:21:63:ae:e1:02:58:e2:2e:80:0d:93:a8:cb:a7:f0:15: de:6c:a0:58:18:78:87:a4:1b:2d:4c:62:2c:63:d9:db:70:2d: 86:59:b5:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzeEE4t61RC4aFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YzI5YTlmZTUtMzMwNi00OTkxLTk1YWEtZDlhZjdhMTRlYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSFJg+Kouwx4nWwcH/ECg9PdtHgz3vQVBkV5 L/BBavi9/MZ0ybo4fCbTPHm+phkQHv7SGErD5wqEjY7+XUaOyQrQ8YmC0gLoMUJb nFYI7LY8l3RSQInK7FMwra3sQ1BDD4mI+xBomXq3GhauNZpYkXVRAmVotr0LT0br L6DOtOUsBHD405DDAWlNBkxM3g3zCRZSIN0HjxErDRyZ8nsjSaTkVw+tcDdIv/Ax h1TFXMybUbWo/nMA61EUMtq6cbe3CmxLXTmtmQuwqqgmoF/8lWY9H5l4J7baojgC ZFITJUy6w14qUV7LZx4TRk3B0nR7Mm6aDm/9gcibpu7yzgI9rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ5SFDhC6O0jVo+wZ58fVxvFWXVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjkxNmY1ZjQtNTdjMi0z OTFhLTk5MmUtODIyZTEyOWE1Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFg6ZbzOIr+8Z8kL+MpI2xYUPBOGiHGAsPkwJwNQfpfX/iYgDR6P 5Qc+nwqPqSddtLSgqt28aJ0Nlz3MrNCyvfl8Cxa54JAszAdpRY8LetbOiWoDOrpj j1JcZMxhJnHeVyaP2wR43Ce7yt4bm6WIitWOvOU53X1hs/Z3qD2v0lhdnRNaHbr2 WTvZalD+e84QlTuKsv5FvFqC3nKpd+9L5DUGy68FQ8N2NetpW2s+F5WXDNYg5MEO 0cvNDeawrtyn/SZnwppIqrv59kFVvoh9EW6jV1EuCOq0C9VvIWOu4QJY4i6ADZOo y6fwFd5soFgYeIekGy1MYixj2dtwLYZZtWY= -----END CERTIFICATE-----Generated at Mon Nov 2 14:15:06 2026 by rpki-client