$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa File: bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa (raw, json) Hash identifier: cL1dl4LJNmRdJi+TxUQIeJxilg4phlVzzAz2gBPdYyA= Subject key identifier: 1A:C6:2B:91:8A:BC:3A:E4:00:84:C2:3D:64:9D:FA:EE:D7:13:7A:59 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDF5C911F9EBFE5CC6813A932 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 198408 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:91:1f:9e:bf:e5:cc:68:13:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=d08801bf-f74d-4d6d-81c5-c802f6a52a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:6d:74:2d:f2:b6:db:e7:d4:18:e5:20:40: ca:1b:8e:2a:a2:99:7b:50:df:ba:ce:7e:d9:8e:8f: 18:9f:43:11:92:05:e2:42:2b:a9:f5:09:3c:4e:4d: 54:38:e4:a6:83:58:e5:fb:98:75:13:f0:38:e5:38: 41:eb:2b:d2:05:4f:16:e8:2c:80:ff:44:39:98:02: 08:c3:8f:1a:c4:d1:2e:2d:49:78:e9:54:19:9f:db: 9f:40:f4:86:df:cd:2c:d6:3e:43:d7:0e:b9:15:4d: 5a:3d:04:8e:54:56:2a:88:43:f2:a4:74:2c:9e:92: 67:db:74:72:1a:43:b2:b9:57:5d:d4:af:db:eb:37: 31:02:e7:e2:b2:4b:0c:b7:6f:aa:ed:39:c2:8a:3b: db:a9:90:58:25:95:b5:03:20:e4:e1:9c:9f:c2:04: c7:6d:30:b0:91:31:d1:1d:46:9d:ce:43:d3:51:c8: 9d:e9:d2:de:24:58:e4:07:65:e4:38:99:aa:d5:78: 79:f2:ab:6c:87:7b:20:4a:d9:65:81:49:94:4d:fd: d1:17:c0:e2:be:12:f3:e7:b2:7e:fc:88:f0:3f:19: e0:1d:f2:d1:f8:45:7c:bc:5b:8a:64:db:5f:5c:1a: 73:fd:ee:c1:15:f9:eb:bf:7e:f7:3e:9d:a3:4a:24: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C6:2B:91:8A:BC:3A:E4:00:84:C2:3D:64:9D:FA:EE:D7:13:7A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:60:a2:cc:e1:64:f2:46:51:2b:de:ff:a2:ef:82:4b:d9:f1: 3d:6f:ec:11:79:d4:a5:79:74:4a:9f:c2:b2:3c:d6:f0:2a:86: 26:a7:b5:8b:b1:5e:f0:84:ae:e0:45:48:bb:35:db:7c:d7:02: c9:6c:8b:8e:5a:26:9d:9f:11:0b:77:27:a9:e4:c9:82:94:db: 7b:d1:c3:ab:02:f8:bc:32:96:d8:88:da:3a:d3:f4:7d:46:8d: d8:69:f2:94:29:ba:53:56:ec:8f:74:07:99:9c:f5:6c:4a:6c: a7:79:d6:d6:9f:e8:4c:52:4b:0f:06:f6:4a:3a:33:6d:05:7c: 08:ab:81:48:fa:11:87:d8:b5:d7:e0:a0:7b:ac:87:13:3d:02: fa:bf:2e:2d:c2:17:d8:6b:68:11:ec:39:e9:be:94:c0:a5:cb: b2:53:44:aa:af:00:05:a9:7c:11:ea:45:86:ae:81:c4:02:41: 9a:93:9a:30:70:9c:29:fb:77:fc:a7:a9:3c:ce:0d:40:fb:a7: 59:e9:5a:0a:55:e9:15:f4:8c:2f:20:12:96:f4:c4:90:cb:1e: cf:ac:83:f4:26:61:7a:19:f2:e9:eb:88:02:d2:b6:71:45:73: 26:32:9d:c5:74:79:be:32:d7:55:e3:d5:52:b6:15:2d:ee:4a: d9:a7:bb:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7fXJEfnr/lzGgTqTIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDA4ODAxYmYtZjc0ZC00ZDZkLTgxYzUtYzgwMmY2YTUyYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj99tdC3yttvn1BjlIEDKG44qopl7UN+6zn7Z jo8Yn0MRkgXiQiup9Qk8Tk1UOOSmg1jl+5h1E/A45ThB6yvSBU8W6CyA/0Q5mAII w48axNEuLUl46VQZn9ufQPSG380s1j5D1w65FU1aPQSOVFYqiEPypHQsnpJn23Ry GkOyuVdd1K/b6zcxAufisksMt2+q7TnCijvbqZBYJZW1AyDk4ZyfwgTHbTCwkTHR HUadzkPTUcid6dLeJFjkB2XkOJmq1Xh58qtsh3sgStllgUmUTf3RF8DivhLz57J+ /IjwPxngHfLR+EV8vFuKZNtfXBpz/e7BFfnrv373Pp2jSiQ/vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrGK5GKvDrkAITCPWSd+u7XE3pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmYzYmI5ZTgtNTc4Mi0z YTNkLWEyOTctNTFiMjNmOGUzYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFgoszhZPJGUSve/6LvgkvZ8T1v7BF51KV5dEqfwrI81vAqhian tYuxXvCEruBFSLs123zXAslsi45aJp2fEQt3J6nkyYKU23vRw6sC+LwyltiI2jrT 9H1Gjdhp8pQpulNW7I90B5mc9WxKbKd51taf6ExSSw8G9ko6M20FfAirgUj6EYfY tdfgoHushxM9Avq/Li3CF9hraBHsOem+lMCly7JTRKqvAAWpfBHqRYaugcQCQZqT mjBwnCn7d/ynqTzODUD7p1npWgpV6RX0jC8gEpb0xJDLHs+sg/QmYXoZ8unriALS tnFFcyYyncV0eb4y11Xj1VK2FS3uStmnuwE= -----END CERTIFICATE-----Generated at Thu Sep 10 10:56:21 2026 by rpki-client