$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9773f0-fc71-3281-afa8-53691ca53912.roa File: cb9773f0-fc71-3281-afa8-53691ca53912.roa (raw, json) Hash identifier: dAO7nxaUTJuw9NELu1KMpBoiRWKgcXSFOVr4EzxnV1c= Subject key identifier: 89:86:8E:1D:6E:B2:F1:62:DE:58:43:9C:8A:F2:E4:D0:DA:6E:CE:0C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9A68BF2AC4BBEF4144295800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9773f0-fc71-3281-afa8-53691ca53912.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 204121 IP address blocks: 2001:470:599::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:bf:2a:c4:bb:ef:41:44:29:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=e4f1784d-04ca-4c62-95e2-b149f9bc6faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:e9:1a:7c:5f:66:9f:b9:57:86:a3:87:f3: 37:bd:79:84:54:3b:12:83:74:4e:c4:72:c6:5b:00: 9b:e8:ad:80:64:a0:4a:af:16:28:95:51:88:e9:ea: af:5f:e7:6b:b5:0c:31:1d:c7:4c:5d:12:6a:b2:1b: 1d:ae:e9:0d:50:6f:2f:c7:22:b0:b9:88:8c:d8:f6: 30:0d:05:87:92:84:3c:85:05:9d:fa:8c:13:56:21: 2c:4e:72:13:43:e2:6d:91:ae:54:c8:ca:55:3e:c9: 18:77:0f:f7:d0:0e:d0:f4:d1:a1:76:ae:9a:21:a2: 16:16:ab:9b:1f:e6:f1:e3:71:b5:a7:f7:bf:a1:98: 2e:9a:dc:5b:5b:04:71:bd:e1:a7:77:8e:47:86:e2: 84:7c:5b:4a:28:91:e4:85:d8:b5:a1:0d:57:fe:8f: 99:9d:b1:14:c3:33:77:12:e5:a1:0a:76:87:d9:4e: 0f:71:d6:b7:90:62:08:d1:e3:98:be:8a:e8:79:b0: f9:dc:ce:99:b6:49:34:60:71:ef:85:ee:37:7c:dd: 64:90:d3:4d:c2:ff:2e:79:24:f2:0a:fe:80:04:28: 36:bf:cf:a7:c1:a7:a7:7a:d0:ad:bf:55:2a:38:b2: b3:72:d2:ac:98:54:e1:0c:01:fa:02:d4:32:60:60: 33:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:86:8E:1D:6E:B2:F1:62:DE:58:43:9C:8A:F2:E4:D0:DA:6E:CE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb9773f0-fc71-3281-afa8-53691ca53912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:599::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f6:ce:28:2d:4d:87:a3:ec:e3:08:69:f7:35:4e:c7:4b:52: 8d:cc:4e:33:eb:e9:13:23:8f:24:17:1d:3b:ca:9e:a8:f3:be: 36:44:18:fd:f1:66:72:bf:ff:a7:85:71:74:82:94:10:4c:a1: 2e:dd:ed:a2:02:06:0e:84:7e:e2:f3:b6:47:27:87:dc:93:88: cc:c5:3e:77:92:85:1b:b0:f5:6a:f5:0a:e8:a3:d8:44:f5:ed: d9:ae:19:65:e0:95:9e:37:33:ab:18:56:3d:e7:2d:fc:21:f4: cb:48:d5:0c:ea:6f:bf:d9:e6:96:c8:c8:b0:27:27:2c:78:15: 7b:71:d9:9e:d6:2c:aa:c6:00:42:d5:cb:30:df:0c:e1:cb:d2: 85:4d:8d:81:ee:f4:7b:26:fb:c6:f9:6a:19:b2:fb:01:d3:14: 0c:16:c5:4a:1f:81:1d:8e:31:e4:d6:4e:3c:e6:5e:b8:74:3d: f7:e0:90:29:6e:eb:a9:ab:fa:a4:83:a0:9e:86:b5:4f:2f:78: bb:d1:30:da:c5:c9:f7:54:c5:78:7e:58:f2:e9:64:d6:45:20: 68:a6:ab:d3:8c:ee:11:32:a4:98:96:c3:f4:f6:92:8f:f5:08: f3:98:d8:5a:03:0a:53:50:2a:d7:1d:ae:96:8a:ab:6b:f3:fd: 5a:a1:17:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+aaL8qxLvvQUQpWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTRmMTc4NGQtMDRjYS00YzYyLTk1ZTItYjE0OWY5YmM2ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDpGnxfZp+5V4ajh/M3vXmEVDsSg3ROxHLG WwCb6K2AZKBKrxYolVGI6eqvX+drtQwxHcdMXRJqshsdrukNUG8vxyKwuYiM2PYw DQWHkoQ8hQWd+owTViEsTnITQ+Jtka5UyMpVPskYdw/30A7Q9NGhdq6aIaIWFqub H+bx43G1p/e/oZgumtxbWwRxveGnd45HhuKEfFtKKJHkhdi1oQ1X/o+ZnbEUwzN3 EuWhCnaH2U4Pcda3kGII0eOYvoroebD53M6Ztkk0YHHvhe43fN1kkNNNwv8ueSTy Cv6ABCg2v8+nwaenetCtv1UqOLKzctKsmFThDAH6AtQyYGAzTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImGjh1usvFi3lhDnIry5NDabs4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2I5NzczZjAtZmM3MS0z MjgxLWFmYTgtNTM2OTFjYTUzOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIH2zigtTYej7OMIafc1TsdLUo3MTjPr6RMjjyQXHTvKnqjzvjZE GP3xZnK//6eFcXSClBBMoS7d7aICBg6EfuLztkcnh9yTiMzFPneShRuw9Wr1Cuij 2ET17dmuGWXglZ43M6sYVj3nLfwh9MtI1Qzqb7/Z5pbIyLAnJyx4FXtx2Z7WLKrG AELVyzDfDOHL0oVNjYHu9Hsm+8b5ahmy+wHTFAwWxUofgR2OMeTWTjzmXrh0Pffg kClu66mr+qSDoJ6GtU8veLvRMNrFyfdUxXh+WPLpZNZFIGimq9OM7hEypJiWw/T2 ko/1CPOY2FoDClNQKtcdrpaKq2vz/VqhFwI= -----END CERTIFICATE-----Generated at Sun Nov 1 19:42:25 2026 by rpki-client