$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4e41a02-a62c-3bd0-88ea-53f48a0d2677.roa File: c4e41a02-a62c-3bd0-88ea-53f48a0d2677.roa (raw, json) Hash identifier: lpZ1BazrcXqVYz+kmnkDJ/7r3ecs0IU/cQy8us7DbBY= Subject key identifier: 19:40:14:09:41:D8:13:D4:F2:5F:3A:06:15:CD:B2:05:B6:3F:EB:7C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC921BDBFAF79A6E9606A0A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4e41a02-a62c-3bd0-88ea-53f48a0d2677.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 54182 IP address blocks: 2001:470:12e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:1b:db:fa:f7:9a:6e:96:06:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=092ac352-618b-4987-90fe-514b941a5973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:99:86:20:8e:6c:20:86:3d:2c:de:50:96: b9:13:55:60:26:b8:62:d7:99:5e:a4:7e:b3:0a:42: c0:57:c9:4c:ae:81:6a:fc:45:ef:45:66:e5:4a:7a: 73:81:2e:af:fe:eb:83:72:00:e9:f8:1d:0f:3a:09: ca:c4:18:29:d7:f0:43:a7:0e:1d:0b:b1:89:64:66: 1c:7e:9d:3a:47:b8:c1:66:05:e1:50:ba:bd:44:83: b3:b4:bc:04:ee:a2:2e:4d:4c:93:94:41:60:8a:89: 80:b2:0f:09:d3:5c:3e:a0:eb:53:1a:f4:9b:f3:08: 42:6e:ce:6f:c3:4b:f6:7a:b1:66:29:59:29:0e:67: a7:79:93:3f:3f:27:e4:89:f4:89:35:69:a6:fe:1e: 78:01:d4:39:63:ea:d2:8d:35:9d:8f:c2:84:62:12: a5:ca:27:8d:fd:17:d4:75:c2:be:c8:6d:b1:00:74: 43:c9:48:51:15:4c:88:cc:c7:d9:09:46:7e:e4:62: ae:8d:78:ab:d4:78:d2:98:80:82:62:e4:97:18:b9: 03:ce:aa:af:cd:ff:6f:d9:11:c3:00:32:4a:0f:6e: 27:b1:e3:78:3c:f3:ed:d0:e6:36:b2:a8:05:14:d8: 7e:4d:3b:3b:7e:41:fb:3c:0b:fb:7a:53:56:86:02: c7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:40:14:09:41:D8:13:D4:F2:5F:3A:06:15:CD:B2:05:B6:3F:EB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4e41a02-a62c-3bd0-88ea-53f48a0d2677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:12e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:9f:71:94:2a:64:63:f2:82:45:89:41:63:6e:55:59:ff:30: f6:7d:97:b4:50:0c:e7:33:fe:fa:36:6d:f6:5a:56:20:28:db: 1f:d7:99:91:70:a5:5d:fc:f4:57:95:36:2e:38:9a:e3:86:ce: b3:e8:bf:22:0b:dd:73:5c:2d:7d:2d:f2:ff:b4:79:70:79:87: 47:ed:bc:df:12:b3:1f:53:43:8a:a1:99:40:b4:6a:a4:15:43: 24:00:16:73:38:9d:f4:14:2b:57:a4:e6:b0:d0:d0:19:da:66: 9e:f9:60:fb:db:0b:4f:a7:9a:32:6d:d4:11:31:e9:bf:84:80: 7e:b2:92:b1:73:d7:d2:44:59:85:28:9c:93:6c:73:04:e2:80: 9c:f3:a1:b3:75:de:16:b8:4d:2a:f2:ad:0c:1b:1f:39:6e:b1: a2:c7:79:8b:db:75:a8:2f:5b:87:66:44:12:47:5a:e2:98:59: 33:22:b5:43:06:ce:50:3c:82:5c:7e:f9:cf:12:bc:82:f1:cd: b7:f4:35:2e:6e:6e:80:c2:48:bb:9b:e1:96:31:c0:52:9f:ee: a5:93:bb:0e:3f:16:85:d6:62:37:5c:b8:38:aa:33:ac:b0:ad: 13:50:0c:01:70:85:c3:22:07:41:8e:9f:c3:8e:e3:1f:49:4d: a1:15:80:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckhvb+veabpYGoKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MDkyYWMzNTItNjE4Yi00OTg3LTkwZmUtNTE0Yjk0MWE1OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKqZhiCObCCGPSzeUJa5E1VgJrhi15lepH6z CkLAV8lMroFq/EXvRWblSnpzgS6v/uuDcgDp+B0POgnKxBgp1/BDpw4dC7GJZGYc fp06R7jBZgXhULq9RIOztLwE7qIuTUyTlEFgiomAsg8J01w+oOtTGvSb8whCbs5v w0v2erFmKVkpDmeneZM/PyfkifSJNWmm/h54AdQ5Y+rSjTWdj8KEYhKlyieN/RfU dcK+yG2xAHRDyUhRFUyIzMfZCUZ+5GKujXir1HjSmICCYuSXGLkDzqqvzf9v2RHD ADJKD24nseN4PPPt0OY2sqgFFNh+TTs7fkH7PAv7elNWhgLHbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBlAFAlB2BPU8l86BhXNsgW2P+t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzRlNDFhMDItYTYyYy0z YmQwLTg4ZWEtNTNmNDhhMGQyNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALyfcZQqZGPygkWJQWNuVVn/MPZ9l7RQDOcz/vo2bfZaViAo2x/X mZFwpV389FeVNi44muOGzrPovyIL3XNcLX0t8v+0eXB5h0ftvN8Ssx9TQ4qhmUC0 aqQVQyQAFnM4nfQUK1ek5rDQ0BnaZp75YPvbC0+nmjJt1BEx6b+EgH6ykrFz19JE WYUonJNscwTigJzzobN13ha4TSryrQwbHzlusaLHeYvbdagvW4dmRBJHWuKYWTMi tUMGzlA8glx++c8SvILxzbf0NS5uboDCSLub4ZYxwFKf7qWTuw4/FoXWYjdcuDiq M6ywrRNQDAFwhcMiB0GOn8OO4x9JTaEVgE4= -----END CERTIFICATE-----Generated at Sat Sep 12 09:03:00 2026 by rpki-client