$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa File: d20e5194-1e49-35af-9248-92bde05f0419.roa (raw, json) Hash identifier: qB/A7JuN/is6+0DNSGpR1ozrV7uBPPS8ji5P2OCQmAY= Subject key identifier: B6:13:D3:6D:CB:ED:6B:0D:12:E3:61:8E:19:6C:1A:EA:F7:F0:D8:82 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF66ADFBD66714F2F2700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 64238 IP address blocks: 2001:470:f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f6:6a:df:bd:66:71:4f:2f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e8993d30-8b02-40d4-af2f-51c99e3f871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:d5:d1:ed:64:37:bd:de:90:b5:0c:6d:09: 66:1c:a9:69:0f:b8:d5:e1:50:b3:18:e1:2d:58:bf: 2f:6c:27:e0:13:bc:8d:bb:d3:53:44:aa:c9:99:41: 26:99:5a:60:aa:f9:e0:7a:ed:53:ee:1d:98:a1:1f: 53:60:fe:92:6d:a0:00:f6:26:a5:5c:96:d1:b6:af: 84:96:13:d3:88:60:b6:62:0b:ee:20:2d:dc:c7:90: 21:1e:f6:a5:fb:fd:f1:e0:24:07:70:c8:67:8c:47: 54:95:4c:c0:9b:31:84:98:1d:cf:a2:2f:ce:4d:67: eb:d7:3f:82:e6:6b:d7:7e:bb:8a:6c:98:fe:2b:98: de:1c:e3:fb:cc:1e:4d:8e:98:cc:e0:a3:71:d5:79: c3:a0:d8:ee:ff:49:3d:16:cb:4c:9b:66:0d:fe:32: fe:05:82:e0:fe:bc:70:e2:89:f3:ef:ed:4c:0a:60: 12:c5:a4:bf:70:9f:66:f8:08:22:4d:98:3f:de:66: ad:f6:99:22:9f:fd:ab:2a:5c:65:92:71:65:94:6b: 73:ab:9e:8f:c2:78:8d:a1:67:20:b6:8e:f6:73:8a: ab:7c:42:65:28:0e:9a:1a:4b:8b:58:44:3d:5d:d7: 26:18:dc:38:13:49:ee:41:a1:18:ab:f4:8c:a7:b8: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:D3:6D:CB:ED:6B:0D:12:E3:61:8E:19:6C:1A:EA:F7:F0:D8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dc:16:f9:8f:4b:85:da:ef:44:de:51:cb:94:4a:ca:9e:2c: 63:33:32:3d:28:a9:a1:2c:5a:13:22:2d:aa:7c:52:ea:4e:8f: 83:d7:f8:87:fb:15:d8:df:ea:a3:c3:7d:0d:1d:c3:fe:2c:85: 8c:21:16:43:4f:b1:9e:40:3b:30:e6:4a:39:8e:02:ae:a4:6c: 77:7a:b2:0a:2d:97:75:1c:4f:e7:ca:98:48:d7:cf:80:8d:5b: f4:6b:5d:d7:30:24:06:32:27:7d:a0:c1:b2:30:3c:a6:2c:56: a2:a6:4a:3c:f5:6b:95:ef:2c:1a:08:f4:5c:4e:fb:42:20:1d: 00:e3:65:76:7a:df:57:7f:31:8d:14:65:22:67:b5:b6:0d:02: b7:3d:6d:1d:3a:41:7a:7f:c8:cf:8e:04:da:b3:6a:21:67:91: 11:f2:f5:22:92:3a:b4:87:33:28:6d:63:dc:1c:7b:0d:28:b3: 2b:96:26:0e:ab:1d:a7:0e:b2:5e:c6:64:c0:6e:6c:f9:e5:41: a5:3d:0a:d4:66:9a:d4:4e:e6:2c:2a:99:88:0b:bf:6d:57:fc: 8c:87:51:60:74:1a:0f:ad:bd:a0:05:cc:50:ac:80:c6:5b:2d: ee:a6:7e:92:fe:5b:f1:4f:65:ac:eb:19:0a:b7:7d:c0:8a:14: 95:6f:19:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffZq371mcU8vJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTg5OTNkMzAtOGIwMi00MGQ0LWFmMmYtNTFjOTllM2Y4NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqTV0e1kN73ekLUMbQlmHKlpD7jV4VCzGOEt WL8vbCfgE7yNu9NTRKrJmUEmmVpgqvngeu1T7h2YoR9TYP6SbaAA9ialXJbRtq+E lhPTiGC2YgvuIC3cx5AhHval+/3x4CQHcMhnjEdUlUzAmzGEmB3Poi/OTWfr1z+C 5mvXfruKbJj+K5jeHOP7zB5NjpjM4KNx1XnDoNju/0k9FstMm2YN/jL+BYLg/rxw 4onz7+1MCmASxaS/cJ9m+AgiTZg/3mat9pkin/2rKlxlknFllGtzq56PwniNoWcg to72c4qrfEJlKA6aGkuLWEQ9XdcmGNw4E0nuQaEYq/SMp7gd6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYT023L7WsNEuNhjhlsGur38NiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwZTUxOTQtMWU0OS0z NWFmLTkyNDgtOTJiZGUwNWYwNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjcFvmPS4Xa70TeUcuUSsqeLGMzMj0oqaEsWhMiLap8UupOj4PX +If7Fdjf6qPDfQ0dw/4shYwhFkNPsZ5AOzDmSjmOAq6kbHd6sgotl3UcT+fKmEjX z4CNW/RrXdcwJAYyJ32gwbIwPKYsVqKmSjz1a5XvLBoI9FxO+0IgHQDjZXZ631d/ MY0UZSJntbYNArc9bR06QXp/yM+OBNqzaiFnkRHy9SKSOrSHMyhtY9wcew0osyuW Jg6rHacOsl7GZMBubPnlQaU9CtRmmtRO5iwqmYgLv21X/IyHUWB0Gg+tvaAFzFCs gMZbLe6mfpL+W/FPZazrGQq3fcCKFJVvGXI= -----END CERTIFICATE-----Generated at Sun Nov 1 21:25:15 2026 by rpki-client