$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa File: bfaaea38-a576-3f1a-8fae-db459997dda8.roa (raw, json) Hash identifier: k0XfmjTKoQFWmRfKMjLstN9D/60fxnuHroUlfkvA4Zw= Subject key identifier: D9:D2:F5:F7:84:F1:CE:7A:7E:A5:C8:B0:47:2D:6D:5B:73:6A:E5:C6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EF44CAB32EED7281E8BA2AB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 131642 IP address blocks: 2001:470:21e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ab:32:ee:d7:28:1e:8b:a2:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=b5b893c6-e068-4661-b256-027a1756f936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:a7:75:ad:af:be:60:f1:41:da:a4:c1:45: fe:69:1b:62:57:7f:63:9b:99:19:30:de:20:ca:47: 46:0a:55:a6:04:57:5f:54:29:92:0d:14:3b:2b:a2: 79:7f:c5:19:84:63:50:84:3d:0f:c3:b4:f6:bb:53: c3:a5:98:54:6d:a6:a0:aa:e6:5d:82:9f:2e:82:71: 0d:b9:af:9c:fe:10:e8:69:60:f3:7e:3b:9c:f7:df: 04:ac:b1:6f:70:da:78:79:57:5d:04:73:12:9d:a4: b5:1d:c5:f8:be:89:fa:50:dd:5b:de:7b:99:5b:cb: 12:9f:5d:ee:ee:f7:a9:91:54:e1:ab:74:79:18:39: 7b:ec:f2:12:9b:5a:bb:00:17:f7:5e:5d:e4:6f:6b: 58:36:46:c9:2b:75:72:02:87:fc:55:25:ca:dd:23: e7:04:cf:33:d6:ce:02:1a:c9:82:1a:e9:09:13:e4: bb:27:61:d7:4d:f1:4c:b9:fb:0c:b8:bf:11:8c:81: dd:e4:a6:68:1b:13:d1:da:25:6d:d1:33:30:69:02: 92:2b:ea:be:61:c9:98:af:74:a9:dc:1a:eb:82:db: c0:ad:24:05:9d:b3:ca:ff:bd:81:8b:2d:3d:ba:1d: cf:70:d5:d5:cc:5f:b8:6f:c6:6e:0a:58:ff:68:48: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D2:F5:F7:84:F1:CE:7A:7E:A5:C8:B0:47:2D:6D:5B:73:6A:E5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfaaea38-a576-3f1a-8fae-db459997dda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0c:b2:54:fa:15:f2:06:7e:fb:2c:26:81:6d:99:6d:46:df: d0:99:6d:be:04:03:d2:de:2b:fb:22:ce:56:7c:cd:4b:cc:1d: fe:79:37:c7:39:07:5a:e2:4e:3f:7c:23:b9:59:c8:9f:4b:d0: a0:d8:44:3b:e4:f0:15:d1:a8:88:9a:ce:30:3a:40:bc:a4:03: 5c:cb:dc:da:24:61:a6:4e:a0:37:e1:6e:c3:a0:d5:df:6b:a1: 18:4d:60:cb:f5:00:31:64:9e:61:30:01:ff:00:2c:87:74:82: b4:f8:63:d0:d1:9f:28:83:6c:1a:bf:e1:09:ca:70:4d:21:bb: 84:5c:0a:92:6e:3a:3d:4d:34:9b:1e:48:fd:87:d9:f0:0c:31: 19:07:52:20:2e:ea:b4:ba:34:53:6e:91:46:6e:36:b8:74:37: 3f:1a:a8:c5:a8:6e:de:98:9b:6d:01:20:b4:1b:33:11:60:7e: ad:67:97:48:8c:78:0b:aa:ff:f3:59:aa:10:43:70:4d:d3:92: fa:67:22:68:c5:56:79:9a:b3:30:bc:ee:73:23:07:48:37:d6: ad:b7:10:78:89:17:32:b8:5b:4c:86:47:10:11:c8:97:65:03: fc:51:00:42:74:d6:28:db:93:fa:86:43:71:e0:67:de:19:34: 85:05:d7:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TKsy7tcoHouiqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YjViODkzYzYtZTA2OC00NjYxLWIyNTYtMDI3YTE3NTZmOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO6nda2vvmDxQdqkwUX+aRtiV39jm5kZMN4g ykdGClWmBFdfVCmSDRQ7K6J5f8UZhGNQhD0Pw7T2u1PDpZhUbaagquZdgp8ugnEN ua+c/hDoaWDzfjuc998ErLFvcNp4eVddBHMSnaS1HcX4von6UN1b3nuZW8sSn13u 7vepkVThq3R5GDl77PISm1q7ABf3Xl3kb2tYNkbJK3VyAof8VSXK3SPnBM8z1s4C GsmCGukJE+S7J2HXTfFMufsMuL8RjIHd5KZoGxPR2iVt0TMwaQKSK+q+YcmYr3Sp 3BrrgtvArSQFnbPK/72Biy09uh3PcNXVzF+4b8ZuClj/aEg90wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNnS9feE8c56fqXIsEctbVtzauXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZhYWVhMzgtYTU3Ni0z ZjFhLThmYWUtZGI0NTk5OTdkZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgMslT6FfIGfvssJoFtmW1G39CZbb4EA9LeK/sizlZ8zUvMHf55 N8c5B1riTj98I7lZyJ9L0KDYRDvk8BXRqIiazjA6QLykA1zL3NokYaZOoDfhbsOg 1d9roRhNYMv1ADFknmEwAf8ALId0grT4Y9DRnyiDbBq/4QnKcE0hu4RcCpJuOj1N NJseSP2H2fAMMRkHUiAu6rS6NFNukUZuNrh0Nz8aqMWobt6Ym20BILQbMxFgfq1n l0iMeAuq//NZqhBDcE3TkvpnImjFVnmaszC87nMjB0g31q23EHiJFzK4W0yGRxAR yJdlA/xRAEJ01ijbk/qGQ3HgZ94ZNIUF13A= -----END CERTIFICATE-----Generated at Thu Sep 10 18:42:06 2026 by rpki-client