$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa File: cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa (raw, json) Hash identifier: lnvyEj6tQShdqVpQg0Merp/FrNbP7pn6dR1uZ6MXjQM= Subject key identifier: 67:21:1D:E8:62:49:EA:AF:70:59:2D:75:FB:37:3B:43:1C:E3:AF:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDEA6D470F33604619E68 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 393737 IP address blocks: 2001:470:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:de:a6:d4:70:f3:36:04:61:9e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=02fca024-7359-4c39-966a-1b4d31df95ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:de:9f:4b:28:bb:85:02:a0:d2:e8:4b:ca: 87:42:f2:6a:c3:a3:a1:53:71:34:c6:56:42:38:7f: 08:af:88:94:4d:cb:da:02:0d:fd:d8:fd:08:cd:b6: af:3d:7d:e4:57:9c:de:57:c3:1d:43:83:8c:32:eb: 91:86:60:b7:41:74:82:60:ab:91:ca:38:e4:fd:60: da:5e:c9:20:15:2f:2e:ad:97:56:de:16:ec:ee:14: cd:36:61:5d:23:5f:07:bf:69:a5:44:4c:87:d3:e3: 36:da:61:63:2f:d7:42:a8:c8:4d:1b:ea:e2:a6:20: 19:89:2e:25:31:db:11:3b:73:3c:3f:a6:18:4c:64: e3:5b:82:25:06:e3:3a:69:a8:b4:63:97:36:0a:1b: 03:a0:67:28:87:ea:52:38:ba:29:85:22:3c:62:3b: 7b:0f:4d:26:a0:cd:ed:a5:ad:54:4f:f7:bf:8e:a0: 95:a9:83:b1:bd:ad:7d:68:4d:87:0d:39:5b:83:fd: ac:11:0a:a9:0f:35:cb:8c:e5:2b:8f:8f:a8:50:0d: 22:dc:44:64:8b:ae:c4:08:d0:95:3a:84:27:2c:86: 8d:d0:c9:fb:18:3a:44:f1:80:52:ea:cd:39:22:20: db:d8:5e:f3:c4:09:76:81:23:cd:51:fd:84:7b:f9: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:1D:E8:62:49:EA:AF:70:59:2D:75:FB:37:3B:43:1C:E3:AF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d4:a3:61:aa:a7:3d:ec:76:1d:ec:47:cd:e5:26:8f:a2:19: 81:74:c0:53:a9:51:57:4f:84:7b:86:33:b6:93:91:be:7c:6b: 4e:e0:69:c0:59:52:aa:21:37:1c:68:da:2f:e9:75:d7:b7:93: 28:b6:2b:3f:f3:0e:4b:38:5d:35:85:57:80:23:71:f9:71:43: cf:e0:4d:d4:0e:89:09:00:4c:41:5d:cf:eb:3e:e0:bd:ca:86: d6:34:52:43:48:35:b5:07:d0:07:04:c8:12:48:0b:9c:f2:67: c0:b1:4c:89:91:5d:57:31:85:b5:2a:6f:ad:60:fe:17:36:fd: 53:25:19:3b:7e:80:64:6e:52:d3:f1:59:fa:59:ca:ff:b9:16: 1f:24:5c:7f:f1:29:82:ee:34:15:8f:3e:1e:f4:6a:ea:b9:0c: 6b:1a:aa:ba:68:3a:fc:af:6c:c1:cf:37:26:eb:89:30:d1:95: 08:06:f3:e3:82:30:15:7f:c5:2a:5d:64:e5:b9:2e:b8:63:e6: bf:cb:6c:14:b7:c6:25:da:50:9b:a2:dd:43:c8:7a:33:e2:66: 04:3e:4a:d7:51:50:18:aa:37:b7:e0:a4:22:9a:f6:0c:e5:ca: 75:eb:e3:dc:10:0a:fc:2c:b9:56:f1:7d:54:8d:88:92:9c:a0: dd:42:52:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fd6m1HDzNgRhnmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MDJmY2EwMjQtNzM1OS00YzM5LTk2NmEtMWI0ZDMxZGY5NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNTen0sou4UCoNLoS8qHQvJqw6OhU3E0xlZC OH8Ir4iUTcvaAg392P0IzbavPX3kV5zeV8MdQ4OMMuuRhmC3QXSCYKuRyjjk/WDa XskgFS8urZdW3hbs7hTNNmFdI18Hv2mlREyH0+M22mFjL9dCqMhNG+ripiAZiS4l MdsRO3M8P6YYTGTjW4IlBuM6aai0Y5c2ChsDoGcoh+pSOLophSI8Yjt7D00moM3t pa1UT/e/jqCVqYOxva19aE2HDTlbg/2sEQqpDzXLjOUrj4+oUA0i3ERki67ECNCV OoQnLIaN0Mn7GDpE8YBS6s05IiDb2F7zxAl2gSPNUf2Ee/nltQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGchHehiSeqvcFktdfs3O0Mc46/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2YzZjNhMWMtM2FhZi0z YzY5LTg4NTAtNGNiNDI1Yjk4OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXUo2Gqpz3sdh3sR83lJo+iGYF0wFOpUVdPhHuGM7aTkb58a07g acBZUqohNxxo2i/pdde3kyi2Kz/zDks4XTWFV4AjcflxQ8/gTdQOiQkATEFdz+s+ 4L3KhtY0UkNINbUH0AcEyBJIC5zyZ8CxTImRXVcxhbUqb61g/hc2/VMlGTt+gGRu UtPxWfpZyv+5Fh8kXH/xKYLuNBWPPh70auq5DGsaqrpoOvyvbMHPNybriTDRlQgG 8+OCMBV/xSpdZOW5Lrhj5r/LbBS3xiXaUJui3UPIejPiZgQ+StdRUBiqN7fgpCKa 9gzlynXr49wQCvwsuVbxfVSNiJKcoN1CUrA= -----END CERTIFICATE-----Generated at Tue Nov 3 22:40:56 2026 by rpki-client