$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa File: c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa (raw, json) Hash identifier: rDhCnzv36Ac+ls/opiEtX5/jSlN5hUIHR3IEsN/NgC0= Subject key identifier: 8A:CC:50:AA:82:57:DF:FB:C3:2D:E4:15:B1:92:27:4F:10:78:28:22 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC9223677C534E1ADD2137C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 7782 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:23:67:7c:53:4e:1a:dd:21:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=2ff79eef-56ce-47b0-b299-09da167e6da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b1:97:43:7a:16:a6:79:c3:3a:64:9d:74:74: 7f:8e:c6:45:01:da:a6:59:5f:f7:78:da:75:12:13: d0:5a:5b:84:f0:4a:62:f0:14:91:8f:c9:32:44:6a: 12:78:dc:26:da:5b:32:ce:d6:5c:b0:0d:53:62:fd: f6:54:ba:a3:95:68:22:63:55:5b:0a:a5:fb:1a:4b: 82:8c:23:95:b8:d2:38:cd:13:fe:21:37:49:c3:6d: 4c:bc:97:4e:46:e3:39:0c:0f:55:8e:ed:cb:f1:fc: 8c:4e:43:e0:86:4c:c7:dc:eb:f6:01:a9:92:40:36: 8c:8c:e8:28:a7:91:a2:61:b6:14:af:ee:cf:b5:81: 84:95:f1:c1:33:38:fb:25:62:04:43:02:b4:71:d4: 6d:8e:37:b4:60:46:f3:96:d5:b2:4e:18:54:0c:d3: 30:a6:b9:b8:d0:b2:71:df:62:bc:01:f0:44:48:62: 01:28:6e:7b:be:f8:5c:c9:8e:1e:dc:cd:35:e1:f1: 63:d3:d7:2f:f4:12:6c:61:e4:df:83:60:f8:9d:01: d5:09:80:87:1a:9e:6f:80:79:0d:6a:37:c2:49:e9: 0e:dc:ae:5e:7d:a4:06:a2:e2:4c:37:60:0f:9a:fd: a5:77:13:56:52:d4:24:fc:7c:a3:b0:76:ca:c8:84: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CC:50:AA:82:57:DF:FB:C3:2D:E4:15:B1:92:27:4F:10:78:28:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d0e3d5-76fb-3ce4-9f32-9714f20bd220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:17:6e:1e:ef:9f:46:b9:22:dc:71:84:2a:cc:1d:1c:4c:6e: 44:90:69:7e:59:f2:eb:bc:8e:e7:9c:74:13:f5:38:b3:19:5b: 94:41:65:6f:ce:90:c4:4a:0e:80:12:b4:45:a9:8d:de:6d:71: e6:a4:c9:90:ee:a2:91:dd:b1:d1:05:63:7e:0a:8a:82:87:a6: 7d:a2:c8:db:5f:90:91:cf:84:6d:df:24:8a:62:86:22:83:d3: 86:b4:fa:d6:e8:9f:a7:67:cb:9d:ea:bb:eb:19:06:37:4c:e4: 5f:6a:0a:fe:60:fa:57:af:e8:5e:9c:c9:87:b4:06:92:32:69: f0:50:6a:32:de:f5:dd:37:b9:02:6e:d4:80:59:9e:52:cb:16: fb:63:38:69:a1:fa:e8:0e:a3:e6:6e:92:c0:f1:64:66:96:df: f5:4c:81:06:99:bc:80:ca:a0:8a:f6:1c:43:66:3b:05:d6:3a: 45:38:09:a8:c2:8b:f7:ba:a2:53:42:22:89:09:ad:e7:00:cc: bc:d2:92:79:77:44:f8:ab:a6:78:a5:ee:c9:ef:94:20:7e:d6: 77:c8:a8:b6:6d:15:f7:e0:58:ff:39:b0:e4:36:19:e0:a4:9d: f4:d8:29:c5:1d:14:26:31:2c:e9:02:bf:da:dc:c8:62:33:52: 67:cc:9d:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiNnfFNOGt0hN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MmZmNzllZWYtNTZjZS00N2IwLWIyOTktMDlkYTE2N2U2ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrGXQ3oWpnnDOmSddHR/jsZFAdqmWV/3eNp1 EhPQWluE8Epi8BSRj8kyRGoSeNwm2lsyztZcsA1TYv32VLqjlWgiY1VbCqX7GkuC jCOVuNI4zRP+ITdJw21MvJdORuM5DA9Vju3L8fyMTkPghkzH3Ov2AamSQDaMjOgo p5GiYbYUr+7PtYGElfHBMzj7JWIEQwK0cdRtjje0YEbzltWyThhUDNMwprm40LJx 32K8AfBESGIBKG57vvhcyY4e3M014fFj09cv9BJsYeTfg2D4nQHVCYCHGp5vgHkN ajfCSekO3K5efaQGouJMN2APmv2ldxNWUtQk/HyjsHbKyISntwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrMUKqCV9/7wy3kFbGSJ08QeCgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVkMGUzZDUtNzZmYi0z Y2U0LTlmMzItOTcxNGYyMGJkMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMEXbh7vn0a5ItxxhCrMHRxMbkSQaX5Z8uu8juecdBP1OLMZW5RB ZW/OkMRKDoAStEWpjd5tceakyZDuopHdsdEFY34KioKHpn2iyNtfkJHPhG3fJIpi hiKD04a0+tbon6dny53qu+sZBjdM5F9qCv5g+lev6F6cyYe0BpIyafBQajLe9d03 uQJu1IBZnlLLFvtjOGmh+ugOo+ZuksDxZGaW3/VMgQaZvIDKoIr2HENmOwXWOkU4 CajCi/e6olNCIokJrecAzLzSknl3RPirpnil7snvlCB+1nfIqLZtFffgWP85sOQ2 GeCknfTYKcUdFCYxLOkCv9rcyGIzUmfMnUk= -----END CERTIFICATE-----Generated at Sat Sep 19 08:27:27 2026 by rpki-client