$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa File: cdfb66e4-27c6-35c1-8af5-d00d02307131.roa (raw, json) Hash identifier: 6AbpmuXWgSbeJ8Nm9NYEGqhrYywc82I/S+xSMOFe9lQ= Subject key identifier: 30:AE:E6:19:97:70:FD:44:4C:E5:10:E6:A5:46:36:D1:CF:14:7A:68 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE23FE6D7929C50C39380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398357 IP address blocks: 2001:470:1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e2:3f:e6:d7:92:9c:50:c3:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=bbe3f61d-149c-4507-a235-3d40ac38c185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:41:07:bd:3f:8c:52:de:85:9b:ed:74:97: 93:52:e7:98:9b:25:a6:0d:58:35:8c:bc:ed:a3:9a: 54:06:54:92:11:03:1e:f1:fe:3f:9c:37:66:6c:f1: bd:ed:1b:98:cf:21:5f:6c:3a:ce:3e:cc:1a:b5:6f: e8:e0:a2:f4:6a:a9:72:11:37:ee:da:3a:0b:3e:a5: 7b:14:c4:30:35:06:e9:3b:1c:17:e8:3e:d2:1c:9b: 91:c4:64:1a:a6:12:40:20:f3:40:06:f8:95:b8:80: 86:80:78:5c:ae:e9:e9:0e:5f:be:85:83:0b:1b:0d: ba:cb:28:08:1f:f1:36:6a:d5:a9:ce:a8:c6:20:67: 98:e8:2c:4b:7e:43:5d:1f:db:aa:b1:cf:f8:74:30: 1a:08:29:61:5f:ee:e0:74:ca:b5:de:8f:1c:78:69: df:de:95:64:f6:7a:84:db:4a:fe:50:0a:10:a1:ed: ae:5c:9a:42:72:f6:a7:d5:cb:f3:e6:7a:38:1d:bb: c1:49:e8:03:95:9b:13:de:36:46:2b:5a:5d:f9:15: ac:fd:cc:4b:47:9b:02:eb:ef:7d:27:f0:03:f6:89: 1e:4d:70:9d:63:e8:47:bc:32:e2:ad:1f:c9:b5:10: d5:35:2a:d4:05:1b:71:20:24:79:a5:39:a4:b6:8d: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:E6:19:97:70:FD:44:4C:E5:10:E6:A5:46:36:D1:CF:14:7A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:04:50:57:09:11:10:42:d6:a5:73:56:d3:41:64:76:b9: 1a:4b:a8:3d:ec:cd:8c:b2:06:3f:5d:a3:af:02:01:b5:c6:75: a8:5a:ba:c0:4a:5a:6d:6d:1b:85:a5:a8:6e:74:5b:30:69:70: 18:1d:ac:99:b0:4c:0f:f7:a6:ff:1e:64:ec:2f:72:dd:83:a4: 31:51:78:4d:0e:33:b9:53:8d:38:5a:fa:ad:09:ee:f7:a6:27: a2:d5:c2:6b:03:00:af:9e:05:27:a2:85:48:9e:be:8f:30:fe: c5:9a:cc:4a:d3:25:d2:15:28:ba:9b:8f:11:82:34:ed:4d:37: 40:5f:39:06:61:48:a4:76:c3:e2:08:b6:d8:9c:c5:54:d0:49: 30:89:71:19:e5:f2:8a:fd:4b:db:1f:fb:57:f7:ee:ce:6e:d5: 00:07:51:7c:02:e3:c9:7f:e8:f5:55:13:e5:7f:da:45:de:c4: c8:96:a5:5b:de:bb:fe:c7:51:08:5c:1c:b5:e0:e7:fb:3a:77: 18:48:7d:ac:fd:17:48:5c:a7:6d:d9:4f:41:cd:11:22:2f:45: ce:69:39:98:47:43:8e:67:1d:d2:d2:f0:6f:b4:d3:6e:15:ed: 0b:ee:fa:26:fc:06:84:5e:cd:9d:59:34:76:2f:30:25:ef:21: 93:02:ae:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feI/5teSnFDDk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YmJlM2Y2MWQtMTQ5Yy00NTA3LWEyMzUtM2Q0MGFjMzhjMTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dVBB70/jFLehZvtdJeTUueYmyWmDVg1jLzt o5pUBlSSEQMe8f4/nDdmbPG97RuYzyFfbDrOPswatW/o4KL0aqlyETfu2joLPqV7 FMQwNQbpOxwX6D7SHJuRxGQaphJAIPNABviVuICGgHhcrunpDl++hYMLGw26yygI H/E2atWpzqjGIGeY6CxLfkNdH9uqsc/4dDAaCClhX+7gdMq13o8ceGnf3pVk9nqE 20r+UAoQoe2uXJpCcvan1cvz5no4HbvBSegDlZsT3jZGK1pd+RWs/cxLR5sC6+99 J/AD9okeTXCdY+hHvDLirR/JtRDVNSrUBRtxICR5pTmkto0SZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDCu5hmXcP1ETOUQ5qVGNtHPFHpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RmYjY2ZTQtMjdjNi0z NWMxLThhZjUtZDAwZDAyMzA3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmWBFBXCREQQtalc1bTQWR2uRpLqD3szYyyBj9do68CAbXGdaha usBKWm1tG4WlqG50WzBpcBgdrJmwTA/3pv8eZOwvct2DpDFReE0OM7lTjTha+q0J 7vemJ6LVwmsDAK+eBSeihUievo8w/sWazErTJdIVKLqbjxGCNO1NN0BfOQZhSKR2 w+IItticxVTQSTCJcRnl8or9S9sf+1f37s5u1QAHUXwC48l/6PVVE+V/2kXexMiW pVveu/7HUQhcHLXg5/s6dxhIfaz9F0hcp23ZT0HNESIvRc5pOZhHQ45nHdLS8G+0 024V7Qvu+ib8BoRezZ1ZNHYvMCXvIZMCroY= -----END CERTIFICATE-----Generated at Sun Oct 18 14:40:57 2026 by rpki-client