$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa File: bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa (raw, json) Hash identifier: eKeZYJSlvtFWkJjIb7ZS4k4y8sa/+CeFkcgw94eAfTQ= Subject key identifier: 6D:86:5D:67:70:13:C6:4F:BD:CE:52:F4:FF:05:F3:75:4A:30:98:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584FB3A6792F92275AA463F3B800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 29430 IP address blocks: 2001:470:424::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:79:2f:92:27:5a:a4:63:f3:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=13a7f58d-6b4a-4065-a46b-8482bf4005dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:39:b3:24:5c:c3:1a:7b:69:ca:77:ab:c5: de:e2:24:cd:2e:7e:a8:88:8a:bb:29:01:76:bc:5e: cd:0b:4a:ab:97:91:0e:7d:f5:1b:8f:c5:2d:9f:cb: 31:16:e1:75:c4:25:a4:1e:d7:fc:2d:7d:60:88:a4: a1:4f:65:75:2b:d8:a9:da:1e:af:c9:68:46:ab:bb: b7:a1:b2:e7:7e:ca:13:e2:0f:6e:6f:f9:25:d5:61: db:61:71:20:e8:6f:cb:56:fc:55:5a:c2:29:86:25: 60:75:ff:f5:f7:d8:96:03:9c:1c:16:ec:01:2b:e7: f3:ce:89:16:d8:4c:fb:bf:66:bf:85:ce:b8:21:09: 44:e9:1e:ae:b2:1f:4e:27:99:7b:40:9b:31:3b:0d: 24:80:10:c3:f6:07:90:16:76:34:7a:4c:d5:69:47: 69:cb:07:e3:cb:9e:34:42:2d:a9:36:06:4b:af:8d: 3c:37:99:3b:4d:e0:ea:ee:8d:6d:72:e2:7b:a9:2c: 60:23:8f:e3:7c:ae:19:70:51:83:43:c4:c5:8b:3e: 55:a0:f6:98:08:1a:c1:43:3a:c3:e4:10:3e:a6:6c: 49:f7:cf:8b:da:5a:73:71:3b:24:87:06:65:2b:aa: 95:94:4b:7d:3b:aa:4d:31:ca:ef:a1:9c:76:03:11: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:86:5D:67:70:13:C6:4F:BD:CE:52:F4:FF:05:F3:75:4A:30:98:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:424::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4c:54:c4:15:45:bc:b5:8c:3a:85:d6:0e:d6:10:84:2c:81: 20:52:0e:37:81:b7:27:0c:3c:d9:51:15:ca:5f:82:a7:e5:dd: 1a:d1:6f:4f:31:28:e8:79:02:77:c6:66:08:f5:7b:14:f8:2a: 04:07:cb:3f:1a:41:dc:ed:c1:3d:4c:f8:04:2b:77:db:3b:03: 9b:d2:d9:7a:15:51:44:e5:d4:4c:24:4d:4a:f0:ef:5b:80:2c: 71:47:33:c8:b2:52:41:fc:af:9b:84:cc:c8:0a:55:77:72:46: 51:87:b2:c3:b3:e0:6b:d6:e0:24:e5:b6:e5:b8:c1:32:07:ee: b9:c3:73:38:15:54:b0:7e:a4:95:b3:f0:76:8b:b9:60:ea:8b: cf:81:38:61:27:45:7e:c9:9e:2a:28:bb:17:44:03:06:5d:39: 8d:b0:71:1a:1a:30:f8:e2:7f:1f:c2:b4:78:a2:90:db:5e:37: f9:e8:bf:80:45:b1:4e:b4:de:30:7c:94:59:45:28:07:0a:50: 96:c0:1e:4d:8f:e1:9a:c4:56:8e:e6:e1:d6:7a:ca:df:ec:73: 84:f7:fe:63:0e:f7:63:7b:ac:e6:50:a2:a1:03:6a:7f:e5:fe: df:8e:00:e3:5c:ce:2a:56:e5:fd:17:68:42:6d:92:30:29:e0: 03:34:ed:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+zpnkvkidapGPzuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MTNhN2Y1OGQtNmI0YS00MDY1LWE0NmItODQ4MmJmNDAwNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoM5syRcwxp7acp3q8Xe4iTNLn6oiIq7KQF2 vF7NC0qrl5EOffUbj8Utn8sxFuF1xCWkHtf8LX1giKShT2V1K9ip2h6vyWhGq7u3 obLnfsoT4g9ub/kl1WHbYXEg6G/LVvxVWsIphiVgdf/199iWA5wcFuwBK+fzzokW 2Ez7v2a/hc64IQlE6R6ush9OJ5l7QJsxOw0kgBDD9geQFnY0ekzVaUdpywfjy540 Qi2pNgZLr408N5k7TeDq7o1tcuJ7qSxgI4/jfK4ZcFGDQ8TFiz5VoPaYCBrBQzrD 5BA+pmxJ98+L2lpzcTskhwZlK6qVlEt9O6pNMcrvoZx2AxEDRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG2GXWdwE8ZPvc5S9P8F83VKMJgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmIyNWEyZjYtYzJlZi0z ZmE2LTk4YmQtMDYzMTczNmVkYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNMVMQVRby1jDqF1g7WEIQsgSBSDjeBtycMPNlRFcpfgqfl3RrR b08xKOh5AnfGZgj1exT4KgQHyz8aQdztwT1M+AQrd9s7A5vS2XoVUUTl1EwkTUrw 71uALHFHM8iyUkH8r5uEzMgKVXdyRlGHssOz4GvW4CTltuW4wTIH7rnDczgVVLB+ pJWz8HaLuWDqi8+BOGEnRX7JnioouxdEAwZdOY2wcRoaMPjifx/CtHiikNteN/no v4BFsU603jB8lFlFKAcKUJbAHk2P4ZrEVo7m4dZ6yt/sc4T3/mMO92N7rOZQoqED an/l/t+OAONczipW5f0XaEJtkjAp4AM07fQ= -----END CERTIFICATE-----Generated at Mon Nov 2 12:43:19 2026 by rpki-client