$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa File: c7aa874f-1879-3ecc-8f5b-8680416567df.roa (raw, json) Hash identifier: qrZPmdswWbvaO/VZpWVk93vG5TMjaTei9XqC3IKo8Gc= Subject key identifier: C7:D2:1A:4D:B4:12:8E:85:44:32:7A:36:0D:B7:A9:23:D8:6E:96:24 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF57BC3EC53A6A8E8FB40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 40862 IP address blocks: 2001:470:9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f5:7b:c3:ec:53:a6:a8:e8:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=ea15eeba-dc5a-4963-84e8-514e6001b11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:ea:80:68:f3:7c:a3:35:82:63:49:de:a3: 21:23:99:f2:ad:df:d1:e4:0a:b8:c2:72:5b:a7:12: 05:9c:9c:d4:c1:4e:98:c7:a0:68:74:7b:51:c5:13: 60:60:f0:02:b1:2f:ac:d9:db:1a:07:bb:cf:36:54: 05:aa:94:e4:69:85:52:18:e6:e3:8c:52:8c:aa:48: b4:da:d7:08:e4:13:45:87:35:f8:a6:a8:90:64:48: ca:7d:9d:a2:fa:59:12:91:e4:9d:f6:97:a7:8c:de: 2c:d5:07:3e:bb:c5:96:9c:a7:0b:3b:87:35:d1:69: be:e5:8a:f3:80:24:ec:f2:b6:85:fd:0e:69:fb:e7: b7:3f:33:c3:57:65:62:8b:f3:7c:30:34:b0:2c:9a: e6:87:ad:32:66:3d:4e:6b:1a:5a:8c:ab:bc:2c:a1: 0a:71:a5:29:31:4c:a9:1f:16:e1:76:25:19:d5:db: a8:24:e0:65:5e:44:2e:3f:f5:45:59:5e:69:3a:bb: 3b:be:af:01:56:25:e4:20:1d:8f:ae:89:3f:29:d6: 17:48:14:3d:0e:2f:0c:12:42:40:b0:62:c2:57:d8: b9:ec:c7:bc:c9:86:24:80:08:3c:f8:8a:c6:c4:26: a9:91:ee:ca:8f:9c:9f:83:35:21:f1:5d:18:3d:f5: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:1A:4D:B4:12:8E:85:44:32:7A:36:0D:B7:A9:23:D8:6E:96:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7aa874f-1879-3ecc-8f5b-8680416567df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:9d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c5:33:7c:47:a6:66:4a:b9:1e:aa:5b:07:d0:bf:31:d8:c6: e9:a4:21:e0:eb:63:b5:a4:47:30:7a:a0:67:e2:a3:93:bf:56: 0f:1c:f0:68:41:ad:68:3f:f6:7f:42:32:21:bb:2f:c0:66:8b: bb:42:57:97:3b:bd:69:b2:8f:48:cc:0f:bb:0f:2a:62:56:10: 89:39:76:ee:b4:ac:f2:86:8b:36:db:97:10:62:87:ae:c5:0b: 86:68:5d:52:ce:6e:b8:4c:d6:9d:6f:80:f7:d1:ba:9b:d0:c9: 06:40:09:30:a3:a8:c6:91:a3:18:04:02:e8:6a:60:ac:1e:28: 19:ad:e3:27:80:9d:96:4b:71:5f:56:d7:a6:74:5e:c2:35:3a: 9a:ab:53:d2:7e:64:98:c1:27:b4:bd:aa:65:2e:ed:28:78:26: f6:a8:64:59:96:84:4c:77:ee:71:91:73:72:65:78:ea:40:86: 23:43:1b:e6:b8:fa:18:54:3c:e1:15:04:e9:d6:03:59:66:40: cb:e0:17:7a:1c:a5:6a:c8:18:d7:08:3e:2e:3a:44:76:b1:31: 41:33:56:07:0c:4a:de:58:fb:ac:e1:e1:36:ea:f8:4a:30:30: d1:19:0e:79:86:4b:be:b5:93:09:ef:46:65:e0:16:b6:b3:3d: dc:cd:9b:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffV7w+xTpqjo+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWExNWVlYmEtZGM1YS00OTYzLTg0ZTgtNTE0ZTYwMDFiMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnqgGjzfKM1gmNJ3qMhI5nyrd/R5Aq4wnJb pxIFnJzUwU6Yx6BodHtRxRNgYPACsS+s2dsaB7vPNlQFqpTkaYVSGObjjFKMqki0 2tcI5BNFhzX4pqiQZEjKfZ2i+lkSkeSd9penjN4s1Qc+u8WWnKcLO4c10Wm+5Yrz gCTs8raF/Q5p++e3PzPDV2Vii/N8MDSwLJrmh60yZj1OaxpajKu8LKEKcaUpMUyp HxbhdiUZ1duoJOBlXkQuP/VFWV5pOrs7vq8BViXkIB2Prok/KdYXSBQ9Di8MEkJA sGLCV9i57Me8yYYkgAg8+IrGxCapke7Kj5yfgzUh8V0YPfWg2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMfSGk20Eo6FRDJ6Ng23qSPYbpYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzdhYTg3NGYtMTg3OS0z ZWNjLThmNWItODY4MDQxNjU2N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzFM3xHpmZKuR6qWwfQvzHYxumkIeDrY7WkRzB6oGfio5O/Vg8c 8GhBrWg/9n9CMiG7L8Bmi7tCV5c7vWmyj0jMD7sPKmJWEIk5du60rPKGizbblxBi h67FC4ZoXVLObrhM1p1vgPfRupvQyQZACTCjqMaRoxgEAuhqYKweKBmt4yeAnZZL cV9W16Z0XsI1OpqrU9J+ZJjBJ7S9qmUu7Sh4JvaoZFmWhEx37nGRc3JleOpAhiND G+a4+hhUPOEVBOnWA1lmQMvgF3ocpWrIGNcIPi46RHaxMUEzVgcMSt5Y+6zh4Tbq +EowMNEZDnmGS761kwnvRmXgFrazPdzNm2Q= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:15 2026 by rpki-client