$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa File: c934e88f-0de8-38ab-823a-63300183a4ee.roa (raw, json) Hash identifier: ia5V1ze9JexCOWJoXuW+nrurU+PwP2PKpQDhQwGStOI= Subject key identifier: 4B:7C:52:6B:94:66:70:17:6B:1E:FA:E6:69:34:E6:E8:EC:7B:B0:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DFE5AA3F3FA84B86C20C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 267784 IP address blocks: 2001:470:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:fe:5a:a3:f3:fa:84:b8:6c:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=85cddb97-233b-4cc0-87c8-751f7e1fd1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:50:7d:77:db:cc:94:85:a0:e1:ba:ca:62:9d: ee:7d:6b:82:eb:a7:66:55:0f:31:d6:ad:b6:66:57: 0e:45:b4:ee:9d:f8:66:78:ba:3a:09:98:ba:c1:72: 1c:0d:53:22:ad:76:cb:0d:44:51:5c:c4:86:9f:9a: 01:56:38:64:c9:16:f6:fc:1c:d5:d9:5a:2e:e3:d1: 13:e3:a8:2b:98:7b:0b:6f:df:57:df:f7:09:da:13: 32:48:d9:12:5f:71:47:a3:97:23:57:ac:ff:84:d1: ff:d2:da:21:c8:66:4d:ae:66:f5:cf:72:d5:f2:5b: 1b:20:63:b0:c3:d1:05:b9:d1:c5:88:e4:ed:a2:72: e7:51:87:e7:d0:5c:2c:92:32:c7:50:30:b6:d7:e2: 96:e7:07:58:14:41:1f:56:0a:c4:cb:40:ad:ca:ca: 9d:48:cb:c6:3f:4e:69:cf:fd:62:4b:96:12:8f:e0: 17:7f:29:f1:a0:f6:4f:aa:56:bc:07:59:fd:74:b2: 50:c3:51:e3:d7:3c:2c:0a:0f:50:f6:51:3e:b6:ff: 4d:45:84:fe:4a:45:27:dd:6c:0e:e8:60:3b:03:c4: f9:79:3f:64:92:ac:98:c1:b3:64:5d:bf:dc:a0:b8: 4c:88:4d:09:0e:39:55:44:f2:95:58:1e:52:ca:aa: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:52:6B:94:66:70:17:6B:1E:FA:E6:69:34:E6:E8:EC:7B:B0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c934e88f-0de8-38ab-823a-63300183a4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:84:f2:dc:c8:50:f3:ee:4f:6f:95:66:da:18:1c:52:c3:76: ad:ff:29:fc:74:f1:f8:76:d7:13:f6:22:67:87:f3:13:9a:f6: 06:82:e6:6e:78:8d:ca:b3:87:ae:ba:91:1b:1f:84:2c:b5:c4: 79:02:52:1a:9f:33:50:d0:f9:0f:03:d3:28:2c:12:b4:0c:d9: 00:70:01:45:d1:e6:0f:63:ae:a7:e3:51:ec:57:c5:59:1d:51: b8:5f:98:90:91:47:3d:90:d5:67:c8:ac:80:31:09:09:0f:a4: 07:65:38:07:d0:30:f4:39:b0:bb:d9:32:39:34:06:9b:df:b9: c1:c1:d5:4e:5b:d4:ae:71:4b:d7:af:c2:78:e5:5a:c0:21:05: ac:79:55:01:89:0f:93:19:7f:c6:67:0c:d3:48:11:28:64:2e: d2:af:aa:1f:c6:87:fb:53:a6:c0:61:79:ff:fa:7e:b7:52:02: 7f:f7:cf:4b:cb:6b:ce:30:54:0a:bd:b0:65:98:2d:1e:c1:ea: 26:fa:ff:ff:25:52:af:e4:5f:71:79:30:fb:8b:9b:45:46:96: 2a:dc:9c:64:83:2d:f2:9c:8e:13:b0:e6:80:ac:e2:33:26:3b: ed:73:bb:ed:76:0b:0b:d1:7b:06:0a:f6:3d:3c:df:c4:f0:bc: 4a:2c:c8:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ff5ao/P6hLhsIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ODVjZGRiOTctMjMzYi00Y2MwLTg3YzgtNzUxZjdlMWZkMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVB9d9vMlIWg4brKYp3ufWuC66dmVQ8x1q22 ZlcORbTunfhmeLo6CZi6wXIcDVMirXbLDURRXMSGn5oBVjhkyRb2/BzV2Vou49ET 46grmHsLb99X3/cJ2hMySNkSX3FHo5cjV6z/hNH/0tohyGZNrmb1z3LV8lsbIGOw w9EFudHFiOTtonLnUYfn0FwskjLHUDC21+KW5wdYFEEfVgrEy0CtysqdSMvGP05p z/1iS5YSj+AXfynxoPZPqla8B1n9dLJQw1Hj1zwsCg9Q9lE+tv9NRYT+SkUn3WwO 6GA7A8T5eT9kkqyYwbNkXb/coLhMiE0JDjlVRPKVWB5SyqpTowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEt8UmuUZnAXax765mk05ujse7D8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzkzNGU4OGYtMGRlOC0z OGFiLTgyM2EtNjMzMDAxODNhNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeE8tzIUPPuT2+VZtoYHFLDdq3/Kfx08fh21xP2ImeH8xOa9gaC 5m54jcqzh666kRsfhCy1xHkCUhqfM1DQ+Q8D0ygsErQM2QBwAUXR5g9jrqfjUexX xVkdUbhfmJCRRz2Q1WfIrIAxCQkPpAdlOAfQMPQ5sLvZMjk0BpvfucHB1U5b1K5x S9evwnjlWsAhBax5VQGJD5MZf8ZnDNNIEShkLtKvqh/Gh/tTpsBhef/6frdSAn/3 z0vLa84wVAq9sGWYLR7B6ib6//8lUq/kX3F5MPuLm0VGlircnGSDLfKcjhOw5oCs 4jMmO+1zu+12CwvRewYK9j0838TwvEosyI0= -----END CERTIFICATE-----Generated at Tue Oct 27 13:00:09 2026 by rpki-client