$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa File: cddff9b6-4295-3ac0-a198-c12221481fbc.roa (raw, json) Hash identifier: dGFBM7fNqmj83/rL95QOD/aL48Tc+cbzK4cDQpwXBdE= Subject key identifier: 9F:4F:0E:D7:F6:45:F3:C0:EE:DD:43:40:A1:A2:E2:43:F4:BE:FE:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584FAB28CC3A31A331EF2B6F5000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 32278 IP address blocks: 2001:470:470::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:cc:3a:31:a3:31:ef:2b:6f:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=8fdee6bd-92ce-45fd-9385-ec1ff4f9a0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3c:be:67:41:55:39:86:90:29:cf:f0:dd:d8: 9b:c5:67:f9:70:b3:0e:f9:d5:f3:ec:23:01:0c:62: 18:bd:88:d9:a0:92:4e:e6:dd:84:b0:75:69:cf:d9: 72:50:ac:6c:1a:94:38:e0:ef:45:10:21:ab:3b:b0: 89:35:2d:0d:fe:d2:98:39:22:b0:57:17:1e:f3:1f: cf:c6:c8:7d:a9:16:44:84:e3:dd:6a:9f:b6:b2:b0: db:9b:49:b1:a9:8f:3d:55:fa:d0:78:bc:a2:ad:ff: 80:d0:69:79:e4:e2:23:10:53:c8:4e:99:74:82:28: 97:37:ea:0c:12:98:63:80:73:b6:40:00:a5:63:66: d2:ba:40:04:8f:51:26:3d:6e:f1:68:92:17:12:71: 49:38:ae:9d:33:59:f7:87:10:17:89:40:c9:f2:06: 98:c6:6c:2c:9a:64:5f:be:6c:28:1b:85:04:61:6a: 54:7a:5f:59:37:b1:de:8e:3d:2c:f1:08:40:49:1f: 68:b2:c5:9f:06:a8:c6:98:05:77:d2:c0:dc:b7:c8: cf:58:2a:e9:d5:f7:74:73:fc:a5:12:f4:99:4f:d9: 8e:62:87:81:9a:94:0d:dc:58:98:fc:c9:75:8a:81: 88:23:b3:6f:1f:32:c3:34:84:90:75:86:73:dc:bd: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4F:0E:D7:F6:45:F3:C0:EE:DD:43:40:A1:A2:E2:43:F4:BE:FE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:470::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7a:66:ba:92:02:88:b4:5a:09:c3:7e:3b:c9:66:63:2c:d3: 98:a8:73:91:bf:27:22:46:f0:e6:75:6a:26:b1:b8:5b:0c:82: 06:39:1d:41:2e:95:c0:40:1b:59:95:58:82:ed:30:1d:b7:0a: 7b:3e:29:97:e6:c7:3c:00:60:65:c1:ad:0a:c9:ce:18:59:52: 60:fe:d8:d4:45:38:77:db:0b:7a:e5:37:32:c4:0a:9e:ae:14: 35:71:3c:2a:71:00:21:b9:e3:20:79:ec:2d:ec:eb:89:21:0c: 27:bf:23:03:ec:a6:b6:f9:a7:b2:ff:04:d3:f4:7c:7b:5a:af: fc:44:7e:0c:30:c7:3f:42:9d:36:99:4e:65:96:41:9c:ae:1a: a3:b0:ab:cc:0a:6a:94:60:82:04:4c:16:fe:d4:da:a8:0b:18: ce:b2:39:5c:82:e1:27:85:d2:76:ba:45:1a:2b:94:cd:da:7c: 2d:8f:e2:e7:f7:ab:b9:61:64:ef:4c:2e:1d:e5:79:a2:78:79: f9:36:3a:81:ff:04:33:23:b0:11:3c:a6:38:fc:17:05:21:68: 8d:b1:60:21:86:c4:8e:8e:68:82:ec:8e:e6:98:67:32:a2:dc: d2:fd:50:0a:b9:2d:96:d9:c6:81:45:65:0d:b0:fd:ac:af:de: f8:01:c5:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+rKMw6MaMx7ytvUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk OGZkZWU2YmQtOTJjZS00NWZkLTkzODUtZWMxZmY0ZjlhMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzy+Z0FVOYaQKc/w3dibxWf5cLMO+dXz7CMB DGIYvYjZoJJO5t2EsHVpz9lyUKxsGpQ44O9FECGrO7CJNS0N/tKYOSKwVxce8x/P xsh9qRZEhOPdap+2srDbm0mxqY89VfrQeLyirf+A0Gl55OIjEFPITpl0giiXN+oM EphjgHO2QAClY2bSukAEj1EmPW7xaJIXEnFJOK6dM1n3hxAXiUDJ8gaYxmwsmmRf vmwoG4UEYWpUel9ZN7Hejj0s8QhASR9ossWfBqjGmAV30sDct8jPWCrp1fd0c/yl EvSZT9mOYoeBmpQN3FiY/Ml1ioGII7NvHzLDNISQdYZz3L1t2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9PDtf2RfPA7t1DQKGi4kP0vv7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RkZmY5YjYtNDI5NS0z YWMwLWExOTgtYzEyMjIxNDgxZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACt6ZrqSAoi0WgnDfjvJZmMs05ioc5G/JyJG8OZ1aiaxuFsMggY5 HUEulcBAG1mVWILtMB23Cns+KZfmxzwAYGXBrQrJzhhZUmD+2NRFOHfbC3rlNzLE Cp6uFDVxPCpxACG54yB57C3s64khDCe/IwPsprb5p7L/BNP0fHtar/xEfgwwxz9C nTaZTmWWQZyuGqOwq8wKapRgggRMFv7U2qgLGM6yOVyC4SeF0na6RRorlM3afC2P 4uf3q7lhZO9MLh3leaJ4efk2OoH/BDMjsBE8pjj8FwUhaI2xYCGGxI6OaILsjuaY ZzKi3NL9UAq5LZbZxoFFZQ2w/ayv3vgBxSg= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:52 2026 by rpki-client