$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b97450ab-d7db-3cf9-9bcb-e640fde6501e.roa File: b97450ab-d7db-3cf9-9bcb-e640fde6501e.roa (raw, json) Hash identifier: RcZ1KLN5E/6pttcHOG/r+GIz0+hTakpExzfNYvlnhSw= Subject key identifier: 9A:AC:7A:BB:CF:AF:91:1E:2F:5B:8C:B2:F3:3E:ED:6B:7F:56:1F:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DD882C4C2828D80516A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b97450ab-d7db-3cf9-9bcb-e640fde6501e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 16871 IP address blocks: 2001:470:8a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d8:82:c4:c2:82:8d:80:51:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=4ebc4275-8f2d-44c0-a70f-94ed09397e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:d9:30:fa:2b:4e:38:f4:e4:a4:bb:ea:9c: ae:36:a4:83:29:61:a2:ab:76:29:73:16:11:94:c3: 4f:58:1c:e5:2e:76:95:bd:a8:d2:46:5f:ee:b6:ed: 52:cf:d2:df:27:2a:f8:ee:56:64:21:2c:74:41:30: a2:f3:8a:65:b7:b7:4b:81:fb:c5:08:2b:ac:a8:88: af:33:81:aa:62:42:65:94:10:36:d1:f2:08:d7:45: ed:8c:27:cd:58:cd:ac:d4:b4:21:ea:07:a5:6b:c7: b8:5d:9f:8a:5a:39:95:54:7c:44:00:f8:f7:6c:da: ff:65:0a:a7:1e:b1:9e:0e:40:e8:4e:46:da:2f:24: b5:2b:ea:ac:c8:7f:f9:80:46:49:1f:2e:6a:16:c9: 71:0b:8c:e9:20:74:da:d4:d7:92:80:df:5f:5f:0f: a2:04:fc:cd:f5:34:84:6e:67:08:d8:fe:3c:8e:3a: 12:c9:bd:a7:86:49:d5:6c:86:20:5f:78:c0:0f:bc: cd:68:c5:9d:b3:57:d7:8c:fa:18:1e:4e:41:e4:21: 6e:c5:b5:6c:a8:09:85:78:9a:d3:09:28:f4:27:ae: c9:ea:de:74:25:0c:a3:75:df:8c:6f:4d:c9:df:c5: 4d:e5:b4:c6:63:99:47:e3:2f:12:92:3d:80:43:a8: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AC:7A:BB:CF:AF:91:1E:2F:5B:8C:B2:F3:3E:ED:6B:7F:56:1F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b97450ab-d7db-3cf9-9bcb-e640fde6501e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5c:92:08:7e:37:b3:85:1d:99:fb:39:5d:02:00:eb:f5:f2: 0a:74:8e:ce:58:42:c1:85:60:d1:7d:63:04:7c:3e:0b:04:1f: dd:04:fa:77:62:f0:35:79:8a:b9:8d:23:09:a7:16:37:19:a7: 7b:f0:3c:6d:15:40:b7:4e:da:1a:98:e5:13:04:72:7d:a3:d6: e7:82:3a:0a:64:44:38:2e:61:f6:bb:28:46:1d:cc:be:cb:31: f0:f8:41:56:9e:c2:52:dc:02:a7:83:b5:40:d0:88:76:52:e6: 87:cb:3d:69:20:db:19:5f:19:48:b8:95:e5:39:70:72:84:8d: f2:f4:f4:56:6e:d2:ab:73:1c:5c:ae:71:53:c6:86:05:dd:34: 1e:d3:c9:58:27:f6:9e:75:fa:ea:06:9e:66:08:52:9a:24:30: d9:c4:34:f6:ed:df:14:0c:65:67:12:3a:b7:27:c3:fb:ec:9f: d2:18:59:93:17:5b:76:98:79:e5:48:dd:d8:a3:c9:d1:b4:fb: 31:d2:b0:fa:5d:76:74:5f:0e:ab:e9:16:7e:0e:95:f0:cd:9b: 7c:c8:79:2c:80:20:39:6c:d4:43:a5:57:a5:c6:12:b1:de:2e: ce:29:15:70:53:ff:66:66:93:2b:70:e3:1b:a3:b2:6b:3f:94: a2:1a:fb:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fdiCxMKCjYBRaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NGViYzQyNzUtOGYyZC00NGMwLWE3MGYtOTRlZDA5Mzk3ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gjZMPorTjj05KS76pyuNqSDKWGiq3YpcxYR lMNPWBzlLnaVvajSRl/utu1Sz9LfJyr47lZkISx0QTCi84plt7dLgfvFCCusqIiv M4GqYkJllBA20fII10XtjCfNWM2s1LQh6gela8e4XZ+KWjmVVHxEAPj3bNr/ZQqn HrGeDkDoTkbaLyS1K+qsyH/5gEZJHy5qFslxC4zpIHTa1NeSgN9fXw+iBPzN9TSE bmcI2P48jjoSyb2nhknVbIYgX3jAD7zNaMWds1fXjPoYHk5B5CFuxbVsqAmFeJrT CSj0J67J6t50JQyjdd+Mb03J38VN5bTGY5lH4y8Skj2AQ6gc+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqservPr5EeL1uMsvM+7Wt/Vh9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjk3NDUwYWItZDdkYi0z Y2Y5LTliY2ItZTY0MGZkZTY1MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZckgh+N7OFHZn7OV0CAOv18gp0js5YQsGFYNF9YwR8PgsEH90E +ndi8DV5irmNIwmnFjcZp3vwPG0VQLdO2hqY5RMEcn2j1ueCOgpkRDguYfa7KEYd zL7LMfD4QVaewlLcAqeDtUDQiHZS5ofLPWkg2xlfGUi4leU5cHKEjfL09FZu0qtz HFyucVPGhgXdNB7TyVgn9p51+uoGnmYIUpokMNnENPbt3xQMZWcSOrcnw/vsn9IY WZMXW3aYeeVI3dijydG0+zHSsPpddnRfDqvpFn4OlfDNm3zIeSyAIDls1EOlV6XG ErHeLs4pFXBT/2Zmkytw4xujsms/lKIa+9E= -----END CERTIFICATE-----Generated at Tue Oct 20 21:01:54 2026 by rpki-client