$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa File: d20e5194-1e49-35af-9248-92bde05f0419.roa (raw, json) Hash identifier: SoorTAkEYSLNdaEhbQc3Lt8234JRwcPfgTIVLyUaP4E= Subject key identifier: D7:1A:2A:FE:B2:6A:6A:B3:D5:31:E6:03:6D:FE:23:E9:6E:17:06:E4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC9237927DCDCE37E34F6100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 64238 IP address blocks: 2001:470:f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:37:92:7d:cd:ce:37:e3:4f:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=429cc31f-cc37-4e41-9e44-1e3b2f2eff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:17:8e:70:e5:b5:4a:7e:39:27:48:6f:86: 83:93:c6:52:a7:8e:06:86:a8:0f:2e:96:e7:4f:3e: 7f:bc:b6:cc:8c:dd:43:5e:91:2a:47:c4:35:20:03: 6d:c5:fc:41:de:cb:87:b0:a5:2f:1d:18:c4:6d:e6: f9:63:a5:90:8e:16:8c:06:0c:40:43:b0:26:98:fe: de:91:ca:ce:a8:cf:aa:05:cf:36:fa:d1:b4:6c:1d: fe:ce:a2:be:cc:a4:97:69:61:5e:67:2a:0f:bf:e4: 50:1b:33:94:2c:15:a7:54:9a:17:20:02:ba:ca:8c: 3c:33:11:4f:ab:b5:dc:3a:56:26:58:7f:64:1d:19: 13:a1:41:b9:56:3b:56:5b:69:63:70:d6:b4:7a:9e: a2:ee:3a:dd:6f:28:9b:75:32:f4:87:d8:7d:2b:8b: eb:af:80:70:2c:e1:da:c2:d9:52:88:53:db:cc:26: 77:2c:44:ef:80:5f:8b:2e:3c:75:0b:93:4a:c3:ce: 63:ae:16:f7:be:a6:32:a0:8b:48:20:be:06:f1:3c: 7e:8c:81:95:96:45:ce:13:48:41:bd:b9:da:59:1a: 7e:92:12:32:a0:0b:6e:4d:a9:cd:a3:01:71:13:2e: 06:33:6a:62:33:4e:ce:41:c5:1d:d3:a9:cb:d2:1e: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:2A:FE:B2:6A:6A:B3:D5:31:E6:03:6D:FE:23:E9:6E:17:06:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20e5194-1e49-35af-9248-92bde05f0419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:17:2c:4d:33:ae:97:51:91:64:1a:66:28:81:6f:68:3d:8d: c1:ec:0e:2f:e4:81:5a:d3:96:c8:a8:01:54:a9:b9:b9:a2:bb: 13:c0:dd:5d:58:1f:16:01:56:a2:55:1e:e3:7f:63:58:8a:88: 94:1a:29:85:39:26:37:b2:6d:5c:84:bc:bd:2e:3d:05:db:16: c3:3e:38:75:77:42:56:2d:d3:26:15:57:49:52:a7:fd:cf:20: c3:12:36:86:fe:04:cf:87:d2:64:61:6e:c6:1e:ef:dc:97:3a: 5e:26:d0:43:dc:d4:78:df:58:1f:02:0d:a6:30:a3:cf:18:da: 3c:99:a2:e6:96:a1:cb:bf:b5:62:b0:56:c7:50:c1:c7:f6:ec: bc:99:b0:f0:b6:89:17:1a:99:95:98:90:8c:58:fc:75:d2:2f: a2:81:a8:eb:d6:47:cf:2f:15:c6:98:fe:53:0e:5d:d6:5b:e2: 1a:98:ca:17:7f:fc:63:2c:83:20:fe:67:e2:10:dc:f3:88:09: b3:10:34:4e:4d:f4:0c:31:8c:eb:78:65:9b:97:3c:b4:4b:4d: 6f:3e:46:9c:4e:fa:88:4c:42:f0:36:62:ac:18:6a:71:60:ec: 73:ad:0a:71:2f:da:04:1b:55:a9:2e:b8:4d:8f:8b:08:0f:30: 0a:35:b6:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckjeSfc3ON+NPYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NDI5Y2MzMWYtY2MzNy00ZTQxLTllNDQtMWUzYjJmMmVmZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRkXjnDltUp+OSdIb4aDk8ZSp44GhqgPLpbn Tz5/vLbMjN1DXpEqR8Q1IANtxfxB3suHsKUvHRjEbeb5Y6WQjhaMBgxAQ7AmmP7e kcrOqM+qBc82+tG0bB3+zqK+zKSXaWFeZyoPv+RQGzOULBWnVJoXIAK6yow8MxFP q7XcOlYmWH9kHRkToUG5VjtWW2ljcNa0ep6i7jrdbyibdTL0h9h9K4vrr4BwLOHa wtlSiFPbzCZ3LETvgF+LLjx1C5NKw85jrhb3vqYyoItIIL4G8Tx+jIGVlkXOE0hB vbnaWRp+khIyoAtuTanNowFxEy4GM2piM07OQcUd06nL0h676wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNcaKv6yamqz1THmA23+I+luFwbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwZTUxOTQtMWU0OS0z NWFmLTkyNDgtOTJiZGUwNWYwNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcXLE0zrpdRkWQaZiiBb2g9jcHsDi/kgVrTlsioAVSpubmiuxPA 3V1YHxYBVqJVHuN/Y1iKiJQaKYU5JjeybVyEvL0uPQXbFsM+OHV3QlYt0yYVV0lS p/3PIMMSNob+BM+H0mRhbsYe79yXOl4m0EPc1HjfWB8CDaYwo88Y2jyZouaWocu/ tWKwVsdQwcf27LyZsPC2iRcamZWYkIxY/HXSL6KBqOvWR88vFcaY/lMOXdZb4hqY yhd//GMsgyD+Z+IQ3POICbMQNE5N9AwxjOt4ZZuXPLRLTW8+RpxO+ohMQvA2YqwY anFg7HOtCnEv2gQbVakuuE2PiwgPMAo1toE= -----END CERTIFICATE-----Generated at Sat Sep 12 07:52:53 2026 by rpki-client