$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9534be-bdfe-3b45-8708-1c8012aa34c0.roa File: bb9534be-bdfe-3b45-8708-1c8012aa34c0.roa (raw, json) Hash identifier: KtDNa0x4098Ymt2ThJUMOSnE+wFF3/is1SuT3uEmLpI= Subject key identifier: 3A:ED:36:BA:CE:71:5B:C6:28:9B:3B:71:EE:81:B3:8D:76:C4:49:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EAFE6F0242F6B5AD774E60700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9534be-bdfe-3b45-8708-1c8012aa34c0.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 47702 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f0:24:2f:6b:5a:d7:74:e6:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=10f4eb0f-de13-4166-96ab-603e6766973b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:b8:bd:77:6e:b3:13:6c:ba:93:a3:07:67: 37:88:33:0d:82:12:ce:7f:19:45:80:8e:08:0c:38: ac:6e:2d:a3:f8:95:f8:c2:a2:36:2e:6b:97:10:2f: 1a:cb:56:8a:ba:24:f4:b2:3e:bc:e7:6e:62:24:2b: ba:33:c4:4c:9c:c6:47:15:0a:45:13:89:f2:9d:c8: b3:83:b8:82:28:55:34:58:db:c0:e7:07:d7:dc:ff: c3:a6:05:40:f9:92:80:66:85:81:d7:24:83:60:37: d2:3d:ad:db:c1:e7:20:a2:55:03:cd:78:63:f6:e8: 4f:6b:ad:65:16:c9:33:f1:d5:27:2c:8f:47:26:70: 9a:d9:ae:85:02:22:99:a7:75:f2:bd:4d:ff:05:3b: cc:7e:7c:64:8c:a7:a7:49:0b:a1:2c:a2:ec:de:06: fb:80:63:1a:ec:c9:7c:40:ab:96:fe:4b:1a:53:8b: de:18:f7:4a:85:9b:c2:bf:f7:7b:15:a4:97:d7:a7: 7a:4e:b2:c2:e5:52:08:bd:77:47:b0:64:1c:7e:ce: 54:82:43:3d:26:2a:95:e1:06:0b:5f:af:93:ce:51: 85:9c:d6:c0:28:37:91:94:a4:b9:78:87:a0:fd:69: 9c:cd:27:e9:51:ec:3f:dd:30:88:4c:8e:4f:7f:0a: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:36:BA:CE:71:5B:C6:28:9B:3B:71:EE:81:B3:8D:76:C4:49:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb9534be-bdfe-3b45-8708-1c8012aa34c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:64:44:f6:09:ff:a9:8c:58:5a:2d:b5:b9:2a:c6:92:42:5a: 98:d3:7f:56:c0:bf:a7:46:c4:32:4c:ea:23:c1:f6:09:5c:61: 41:e9:21:f6:03:07:17:b7:48:72:4b:29:74:65:96:c4:f3:25: fb:2e:ff:ad:14:a0:13:6f:e6:76:f3:2d:d4:54:f9:89:d1:c8: 0b:0f:ea:3d:c8:a1:5e:f5:8b:f7:9c:72:53:85:14:39:0b:fa: 5f:5f:26:f0:3c:ec:34:a6:76:a0:49:0b:c9:40:b8:a5:4a:88: 5d:2b:c5:e2:90:ed:e0:01:23:44:a3:78:bd:c0:35:16:21:e5: 12:eb:39:c5:36:fd:23:94:67:8a:4b:94:b3:57:4c:75:c2:93: a0:e3:a3:db:da:5d:fc:30:1e:a1:f8:13:ea:0c:88:d6:e7:69: dc:2e:0d:ff:99:1f:66:8a:57:8a:73:46:be:08:e1:a8:04:f5: 33:5f:fe:1c:62:72:04:02:58:00:91:92:a7:23:6c:e2:b9:4f: 9b:09:60:83:11:fd:b4:f6:97:66:0a:66:00:7d:68:76:b8:65: bc:87:cd:d9:03:ed:85:5c:e0:0c:33:63:c3:20:ed:9f:f8:eb: 84:fa:e2:4f:ab:8b:27:a4:57:44:53:28:a3:d3:01:58:43:33: fa:0a:31:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6v5vAkL2ta13TmBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MTBmNGViMGYtZGUxMy00MTY2LTk2YWItNjAzZTY3NjY5NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww64vXdusxNsupOjB2c3iDMNghLOfxlFgI4I DDisbi2j+JX4wqI2LmuXEC8ay1aKuiT0sj68525iJCu6M8RMnMZHFQpFE4nynciz g7iCKFU0WNvA5wfX3P/DpgVA+ZKAZoWB1ySDYDfSPa3bwecgolUDzXhj9uhPa61l Fskz8dUnLI9HJnCa2a6FAiKZp3XyvU3/BTvMfnxkjKenSQuhLKLs3gb7gGMa7Ml8 QKuW/ksaU4veGPdKhZvCv/d7FaSX16d6TrLC5VIIvXdHsGQcfs5UgkM9JiqV4QYL X6+TzlGFnNbAKDeRlKS5eIeg/WmczSfpUew/3TCITI5PfwrHpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDrtNrrOcVvGKJs7ce6Bs412xElPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI5NTM0YmUtYmRmZS0z YjQ1LTg3MDgtMWM4MDEyYWEzNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlkRPYJ/6mMWFottbkqxpJCWpjTf1bAv6dGxDJM6iPB9glcYUHp IfYDBxe3SHJLKXRllsTzJfsu/60UoBNv5nbzLdRU+YnRyAsP6j3IoV71i/ecclOF FDkL+l9fJvA87DSmdqBJC8lAuKVKiF0rxeKQ7eABI0SjeL3ANRYh5RLrOcU2/SOU Z4pLlLNXTHXCk6Djo9vaXfwwHqH4E+oMiNbnadwuDf+ZH2aKV4pzRr4I4agE9TNf /hxicgQCWACRkqcjbOK5T5sJYIMR/bT2l2YKZgB9aHa4ZbyHzdkD7YVc4AwzY8Mg 7Z/464T64k+riyekV0RTKKPTAVhDM/oKMb0= -----END CERTIFICATE-----Generated at Sat Sep 12 08:27:41 2026 by rpki-client