$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa File: bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa (raw, json) Hash identifier: J7qJMgwZvdT+ENZVZ/Hhht5aTtfYpwBq/oJDJCRBhGQ= Subject key identifier: 77:7F:7A:8C:52:C4:18:E4:19:75:C3:07:29:F9:33:3F:AF:8C:E1:57 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F4974EBFA7B1D7C5256C38D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21512 IP address blocks: 2001:470:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:eb:fa:7b:1d:7c:52:56:c3:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49140511-46d2-4daa-b7d7-baf844af2ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:e1:a7:3d:f4:1d:a1:56:73:27:6e:b8:0b: 23:9c:ff:7a:3a:86:53:f0:85:e2:85:35:b0:cf:08: ac:b0:45:e3:6a:3f:f1:93:b2:7f:b5:a2:cd:2b:82: 73:28:dd:68:77:2f:35:af:59:c6:ab:c4:6d:be:46: 1d:c2:f3:f9:fe:73:fe:e3:cc:01:c3:b3:ce:32:99: 27:5f:a8:6c:29:fa:61:35:00:90:26:e1:6c:41:92: 9a:40:03:5b:86:d3:a8:e2:ca:f1:8d:1a:00:11:23: f9:e8:f6:f3:8d:ad:8e:59:e4:dd:28:59:bc:f5:42: 7d:b1:df:a9:6f:f6:3d:a4:5c:77:5e:5d:f6:71:9f: cc:da:37:65:f2:b2:a7:82:d8:6a:31:53:46:21:6d: a6:e3:96:49:7f:02:7c:46:d5:50:be:4b:1e:6b:85: 5c:83:22:cd:75:da:ed:6e:74:27:fd:28:cb:37:35: a9:62:9b:40:e8:b5:53:30:34:84:d4:46:02:85:73: 54:b1:c2:ba:98:56:38:aa:9b:88:ca:f5:68:42:a3: 48:54:6c:eb:fc:01:72:91:3a:d7:6c:e7:b5:45:d6: ff:f6:da:be:7e:35:b8:70:79:90:09:76:e3:65:64: e7:ae:9c:bd:b1:ed:36:c5:55:c3:48:c7:01:a9:d3: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:7A:8C:52:C4:18:E4:19:75:C3:07:29:F9:33:3F:AF:8C:E1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5f6b61-727e-3e6a-9d8b-063b57b35245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:385::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:27:cc:82:4e:14:3c:f2:95:cb:85:80:c6:34:68:20:6e:5e: a3:a7:3b:b8:e7:1c:b7:82:b6:b6:48:6d:5d:df:27:10:3a:51: 4e:3d:08:35:9b:6d:9f:f8:08:30:c5:b9:48:32:8f:98:de:e8: ab:50:71:90:5d:85:1a:da:8a:68:c0:2d:c0:fd:74:10:cc:a0: 8c:bb:24:f8:d1:c2:ff:a0:ca:dd:44:32:b4:28:34:ce:3e:c5: 55:96:f3:5b:9f:56:d9:7f:34:a2:d3:6d:b7:df:ba:c6:8d:05: 92:6a:73:90:6a:3d:99:71:d8:14:37:ad:1e:d5:19:83:80:06: 07:03:51:88:b3:ac:74:0a:ce:a6:3a:24:b5:5c:2e:d5:83:d0: 2f:d7:e8:4f:4b:59:3c:e9:55:dd:01:53:58:f2:ec:42:5c:33: 69:b4:c7:3a:a6:87:15:9a:7e:95:e4:2b:b2:6e:e9:6d:4c:31: 6a:73:9e:e9:ef:34:d1:28:89:f9:c0:76:69:d6:a3:33:0d:1f: 75:b1:8f:82:c2:c5:39:33:0b:83:09:44:d2:dc:3c:c8:ed:61: 13:4a:bc:48:7e:e6:2d:d4:98:2f:25:1a:84:67:bf:f8:de:e7: 2e:00:4b:1a:5b:d1:95:bc:0f:66:89:6b:6e:b4:92:b7:00:c2: 61:51:f2:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdOv6ex18UlbDjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkxNDA1MTEtNDZkMi00ZGFhLWI3ZDctYmFmODQ0YWYyZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod7hpz30HaFWcyduuAsjnP96OoZT8IXihTWw zwissEXjaj/xk7J/taLNK4JzKN1ody81r1nGq8RtvkYdwvP5/nP+48wBw7POMpkn X6hsKfphNQCQJuFsQZKaQANbhtOo4srxjRoAESP56Pbzja2OWeTdKFm89UJ9sd+p b/Y9pFx3Xl32cZ/M2jdl8rKngthqMVNGIW2m45ZJfwJ8RtVQvksea4VcgyLNddrt bnQn/SjLNzWpYptA6LVTMDSE1EYChXNUscK6mFY4qpuIyvVoQqNIVGzr/AFykTrX bOe1Rdb/9tq+fjW4cHmQCXbjZWTnrpy9se02xVXDSMcBqdMlmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHd/eoxSxBjkGXXDByn5Mz+vjOFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1ZjZiNjEtNzI3ZS0z ZTZhLTlkOGItMDYzYjU3YjM1MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUnzIJOFDzylcuFgMY0aCBuXqOnO7jnHLeCtrZIbV3fJxA6UU49 CDWbbZ/4CDDFuUgyj5je6KtQcZBdhRraimjALcD9dBDMoIy7JPjRwv+gyt1EMrQo NM4+xVWW81ufVtl/NKLTbbffusaNBZJqc5BqPZlx2BQ3rR7VGYOABgcDUYizrHQK zqY6JLVcLtWD0C/X6E9LWTzpVd0BU1jy7EJcM2m0xzqmhxWafpXkK7Ju6W1MMWpz nunvNNEoifnAdmnWozMNH3Wxj4LCxTkzC4MJRNLcPMjtYRNKvEh+5i3UmC8lGoRn v/je5y4ASxpb0ZW8D2aJa260krcAwmFR8lM= -----END CERTIFICATE-----Generated at Mon Oct 26 01:53:59 2026 by rpki-client