$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d54c8b86-a9aa-39e3-b7c0-a6d51f3e340b.roa File: d54c8b86-a9aa-39e3-b7c0-a6d51f3e340b.roa (raw, json) Hash identifier: nA9AJy9E7v8jH2dw/aFgY6Cr0du0fT5kXcAaUL4hXDs= Subject key identifier: 6B:F8:B0:BE:77:AC:28:CE:C8:9E:E4:F6:10:9C:28:AF:28:87:B8:98 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F35F6A58FF57976E367AC0F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d54c8b86-a9aa-39e3-b7c0-a6d51f3e340b.roa Signing time: Fri 18 Sep 2026 01:30:15 +0000 ROA not before: Fri 18 Sep 2026 01:30:15 +0000 ROA not after: Thu 17 Dec 2026 02:30:15 +0000 asID: 39961 IP address blocks: 2001:470:620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:f6:a5:8f:f5:79:76:e3:67:ac:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 18 01:30:15 2026 GMT Not After : Dec 17 02:30:15 2026 GMT Subject: CN=035ddcfe-65a7-4897-8bb1-b476858dc554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:35:25:e6:ec:09:b7:60:a5:0a:90:99:8b: 5f:30:2d:12:6a:b3:f3:7b:53:5c:99:78:ad:bb:01: 75:e7:6b:f7:b7:e9:62:40:7b:c7:bb:b4:83:bd:6f: 77:08:97:d4:26:ab:bd:8a:d4:ae:a3:5a:ab:65:63: d9:7c:cc:4c:67:eb:c8:39:3a:de:40:ba:a9:6d:9a: 19:d6:54:f8:58:02:a8:47:a9:d7:d0:d0:99:4e:25: c6:ac:62:4c:73:b8:73:d8:4a:09:0b:a9:53:c9:c1: 1a:99:28:e0:e8:cf:43:d0:c4:fa:fa:ce:40:e4:20: da:e6:5e:e7:a0:28:19:d1:5b:8a:91:06:73:ce:e6: 01:b5:7e:33:94:e5:f2:30:72:fd:67:35:8f:39:27: b5:3f:c0:54:7e:3c:1b:ac:e4:b8:f0:84:97:e4:cf: e4:07:e4:dc:22:39:9e:4d:68:ba:3a:27:a9:35:94: 2c:45:67:e0:fa:32:3f:4c:a3:9f:c8:05:38:aa:b9: dc:f8:cb:d4:b9:09:6a:ba:3f:91:40:3c:4b:ce:25: 94:6e:b5:aa:e0:e1:61:ba:32:c5:48:34:2f:dc:af: 37:e6:bb:0a:3c:52:1a:ef:37:b0:33:53:ba:3c:48: 08:3c:22:6e:44:4d:2d:c6:1f:59:65:44:10:a6:df: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F8:B0:BE:77:AC:28:CE:C8:9E:E4:F6:10:9C:28:AF:28:87:B8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d54c8b86-a9aa-39e3-b7c0-a6d51f3e340b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:620::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8f:4b:85:32:65:ef:bc:dd:8b:95:aa:8a:63:6c:7f:8e:84: ee:78:ed:91:9a:31:86:79:26:b9:b5:5d:2d:0b:b9:41:b9:f5: e4:15:54:bc:9d:90:6f:97:90:85:6f:13:01:92:95:aa:72:39: 2d:a3:ea:ac:6c:64:2c:02:cc:7b:2e:0c:56:56:d1:38:8a:d9: 85:8d:12:67:d0:04:e7:db:2a:36:52:03:89:8b:88:80:96:a5: 9a:ec:47:37:0b:31:c9:ed:5d:56:22:2b:aa:2f:ac:fd:ff:6b: 2a:da:6b:21:ed:f7:d9:e8:d8:53:a6:7c:75:78:9d:20:9b:ca: 18:31:fd:ee:fd:73:6d:27:57:92:1b:23:27:b9:5c:af:1e:38: 33:4d:15:a3:ca:88:8e:30:70:31:37:fd:2a:74:77:a8:f0:c3: 37:24:e4:e4:16:4a:ec:39:99:15:db:a5:58:51:92:1f:3d:5d: 13:1c:16:09:30:bd:30:33:45:7d:4e:c6:39:9e:46:6b:c9:18: 90:81:b3:3a:d1:84:44:4d:ab:2c:5c:7d:09:2f:fc:66:77:98: ad:03:68:e7:27:8b:34:83:bb:d7:72:1d:67:c3:7c:37:2f:85: 1c:0c:ce:27:35:7b:26:55:eb:26:31:2a:db:28:b6:c4:e0:d0: 6e:37:9e:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE819qWP9Xl242esD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxODAxMzAxNVoXDTI2MTIxNzAyMzAxNVowLzEtMCsGA1UEAxMk MDM1ZGRjZmUtNjVhNy00ODk3LThiYjEtYjQ3Njg1OGRjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs781JebsCbdgpQqQmYtfMC0SarPze1NcmXit uwF152v3t+liQHvHu7SDvW93CJfUJqu9itSuo1qrZWPZfMxMZ+vIOTreQLqpbZoZ 1lT4WAKoR6nX0NCZTiXGrGJMc7hz2EoJC6lTycEamSjg6M9D0MT6+s5A5CDa5l7n oCgZ0VuKkQZzzuYBtX4zlOXyMHL9ZzWPOSe1P8BUfjwbrOS48ISX5M/kB+TcIjme TWi6OiepNZQsRWfg+jI/TKOfyAU4qrnc+MvUuQlquj+RQDxLziWUbrWq4OFhujLF SDQv3K835rsKPFIa7zewM1O6PEgIPCJuRE0txh9ZZUQQpt8a9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGv4sL53rCjOyJ7k9hCcKK8oh7iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDU0YzhiODYtYTlhYS0z OWUzLWI3YzAtYTZkNTFmM2UzNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAYg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2PS4UyZe+83YuVqopjbH+OhO547ZGaMYZ5Jrm1XS0LuUG59eQV VLydkG+XkIVvEwGSlapyOS2j6qxsZCwCzHsuDFZW0TiK2YWNEmfQBOfbKjZSA4mL iICWpZrsRzcLMcntXVYiK6ovrP3/ayraayHt99no2FOmfHV4nSCbyhgx/e79c20n V5IbIye5XK8eODNNFaPKiI4wcDE3/Sp0d6jwwzck5OQWSuw5mRXbpVhRkh89XRMc FgkwvTAzRX1OxjmeRmvJGJCBszrRhERNqyxcfQkv/GZ3mK0DaOcnizSDu9dyHWfD fDcvhRwMzic1eyZV6yYxKtsotsTg0G43njY= -----END CERTIFICATE-----Generated at Sat Sep 19 08:25:50 2026 by rpki-client