$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca4cd2b7-0014-36cc-bfab-0cbfbb25a56e.roa File: ca4cd2b7-0014-36cc-bfab-0cbfbb25a56e.roa (raw, json) Hash identifier: KmipAYsMnwGxYvQX07tbZG4vYdClBNIOP6wgOkGCTKE= Subject key identifier: AC:D8:7B:11:9F:26:38:CB:F5:E5:DF:B9:D4:C3:DF:74:43:04:F3:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F8851D77429A2CA081EF27280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca4cd2b7-0014-36cc-bfab-0cbfbb25a56e.roa Signing time: Sat 17 Oct 2026 13:30:17 +0000 ROA not before: Sat 17 Oct 2026 13:30:17 +0000 ROA not after: Fri 15 Jan 2027 14:30:17 +0000 asID: 20135 IP address blocks: 2001:470:644::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:88:51:d7:74:29:a2:ca:08:1e:f2:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 17 13:30:17 2026 GMT Not After : Jan 15 14:30:17 2027 GMT Subject: CN=52dbf43d-b0aa-417b-8642-45c85d0fdd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:06:ec:6c:db:8d:9b:f2:34:b1:84:a2:27: a6:28:07:68:23:38:b5:1b:1c:5f:f8:7a:03:0a:e7: c7:14:70:32:97:7f:f3:66:7c:31:84:be:5d:08:a0: 68:93:dc:13:54:8e:26:a5:77:d0:10:60:e8:8a:36: ed:51:93:71:42:2e:05:12:4d:47:9a:dc:7e:4f:84: 53:b5:32:09:6a:dd:41:ec:de:d6:f6:51:d2:64:3d: d4:72:ba:00:58:c4:88:e1:f8:e9:93:f7:ab:d2:80: 8f:33:2d:8d:b0:ac:3d:a6:ae:e4:fd:79:85:30:82: cf:bd:65:a7:cf:1b:91:9f:a6:63:75:5f:87:57:3c: 06:55:eb:b3:ce:37:e0:a5:8d:22:19:92:e6:cd:0c: 29:59:25:bf:9e:e4:6f:a7:2a:4e:13:ee:c4:20:4e: fe:2a:1a:15:54:98:29:a8:22:f8:de:77:84:fe:ed: 95:eb:36:77:c9:d8:a3:66:45:d4:70:d8:0b:52:af: 01:cd:86:c5:60:c1:f8:13:11:07:e3:94:00:9f:e1: 6c:96:c0:b2:a2:d0:bb:2a:83:79:1f:f5:75:16:26: 29:90:21:53:42:ed:49:9e:50:0a:f4:df:8e:a9:69: 85:e2:b8:dc:e0:ce:73:bb:6d:73:c9:44:41:9d:52: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:7B:11:9F:26:38:CB:F5:E5:DF:B9:D4:C3:DF:74:43:04:F3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca4cd2b7-0014-36cc-bfab-0cbfbb25a56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:644::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:fe:9d:14:cf:12:e3:07:8e:fa:65:d7:6a:35:bd:5f:2e:3e: 4a:3c:54:61:91:e0:f9:8a:1b:51:60:23:4e:68:43:e6:28:eb: fe:5f:84:e6:cb:55:40:38:a2:f9:42:dc:d1:8d:e3:51:97:01: 0a:20:ae:80:b2:81:27:a1:b9:84:5c:10:51:e4:d3:5b:27:49: d1:49:01:d2:e6:c0:95:ed:54:fc:9c:bf:65:85:20:eb:94:c5: 97:7e:eb:f6:a1:22:e0:eb:f4:41:85:29:a2:00:42:b3:d3:6b: 51:b2:1a:07:e3:1a:30:5d:c4:83:07:27:fc:88:cc:09:e3:2e: 20:6f:a7:59:d9:e1:bc:36:48:7b:b6:03:ce:59:ce:4c:32:ef: 7a:ac:f6:ec:f6:c2:d3:bb:95:d4:1c:c9:50:18:66:0e:fb:b5: fc:c0:31:dd:b2:d2:3e:ef:7e:4d:d9:ad:e9:07:98:3d:7b:c1: 8d:03:85:f5:15:8d:f7:f6:af:bd:32:29:8d:24:72:88:b5:6e: cc:02:85:b0:86:f2:a0:e7:76:f5:ec:74:e0:62:ae:40:b9:b3: b5:49:bc:7b:2c:ec:79:42:57:51:d2:af:b4:4e:07:da:77:37: 9f:0a:5b:32:67:90:1d:f4:d8:a5:a9:9e:54:cf:4a:00:cd:8f: 5d:14:90:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+IUdd0KaLKCB7ycoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNzEzMzAxN1oXDTI3MDExNTE0MzAxN1owLzEtMCsGA1UEAxMk NTJkYmY0M2QtYjBhYS00MTdiLTg2NDItNDVjODVkMGZkZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8G7GzbjZvyNLGEoiemKAdoIzi1Gxxf+HoD CufHFHAyl3/zZnwxhL5dCKBok9wTVI4mpXfQEGDoijbtUZNxQi4FEk1Hmtx+T4RT tTIJat1B7N7W9lHSZD3UcroAWMSI4fjpk/er0oCPMy2NsKw9pq7k/XmFMILPvWWn zxuRn6ZjdV+HVzwGVeuzzjfgpY0iGZLmzQwpWSW/nuRvpypOE+7EIE7+KhoVVJgp qCL43neE/u2V6zZ3ydijZkXUcNgLUq8BzYbFYMH4ExEH45QAn+FslsCyotC7KoN5 H/V1FiYpkCFTQu1JnlAK9N+OqWmF4rjc4M5zu21zyURBnVKhdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKzYexGfJjjL9eXfudTD33RDBPNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2E0Y2QyYjctMDAxNC0z NmNjLWJmYWItMGNiZmJiMjVhNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAZE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALH+nRTPEuMHjvpl12o1vV8uPko8VGGR4PmKG1FgI05oQ+Yo6/5f hObLVUA4ovlC3NGN41GXAQogroCygSehuYRcEFHk01snSdFJAdLmwJXtVPycv2WF IOuUxZd+6/ahIuDr9EGFKaIAQrPTa1GyGgfjGjBdxIMHJ/yIzAnjLiBvp1nZ4bw2 SHu2A85Zzkwy73qs9uz2wtO7ldQcyVAYZg77tfzAMd2y0j7vfk3ZrekHmD17wY0D hfUVjff2r70yKY0kcoi1bswChbCG8qDndvXsdOBirkC5s7VJvHss7HlCV1HSr7RO B9p3N58KWzJnkB302KWpnlTPSgDNj10UkBM= -----END CERTIFICATE-----Generated at Thu Oct 22 14:50:52 2026 by rpki-client