$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa File: d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa (raw, json) Hash identifier: OwIc9Zz98xcK6J93hjl7tWkAdsL5fauS+XW0WtIFaNA= Subject key identifier: 0B:1C:DD:60:9D:8E:04:BB:98:58:0C:4A:F0:31:5B:57:79:3E:41:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EAFE709DE2C7B7134ACBF7000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 48438 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:09:de:2c:7b:71:34:ac:bf:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=bf012a14-b4fa-4c67-a742-a3ac85314d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:06:95:38:75:0a:d6:87:a5:0f:68:48:1a: 78:62:ed:18:ba:53:43:90:2e:34:e7:2d:19:da:34: d4:71:54:a0:fb:42:e2:5c:7e:7f:69:2f:c3:73:4f: 55:b7:7b:47:82:83:c6:d4:fb:82:de:05:a2:3b:70: 71:95:58:f2:2b:10:64:6c:45:b4:b5:1a:28:ca:40: ef:9b:1d:cf:e2:8a:ff:70:21:d9:b4:5e:f0:52:97: 66:f1:68:f5:5e:ac:6c:ac:63:56:e3:34:0e:7e:88: 32:aa:e3:d5:a3:e6:64:9e:99:5d:5c:3a:59:79:e2: 4d:35:36:3e:c4:68:7a:6c:0e:7b:08:b6:b5:0e:bd: a9:ca:bb:8d:c9:37:6b:59:10:c9:ca:99:22:96:db: 17:de:1c:e2:6f:f7:9d:a3:79:67:7f:43:cb:dc:73: 3a:6d:bb:9b:03:99:6c:63:32:5d:51:20:22:0d:2a: 7f:71:84:cf:fa:ac:da:b7:f1:ec:80:f7:37:2c:19: 36:26:68:87:9c:d6:2e:8d:16:52:b3:17:bb:87:05: ef:7c:08:81:31:3a:0a:66:65:6c:c4:c6:cb:45:62: 78:8a:7d:e6:2b:c7:c0:47:2a:58:7f:d3:99:d3:36: e8:36:2d:1a:a1:c3:42:9a:fd:13:dd:f9:dd:c3:a9: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:DD:60:9D:8E:04:BB:98:58:0C:4A:F0:31:5B:57:79:3E:41:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c8:83:94:b5:91:45:78:46:89:5f:5d:8f:04:40:12:2b:d2: 4f:6a:05:f4:fe:64:87:b1:15:1b:91:75:fb:7d:21:a0:b5:63: 34:ef:48:6f:4e:23:73:67:33:4f:1f:e0:59:90:0c:90:4a:05: d7:5b:07:88:85:35:dd:42:8a:34:6f:97:03:00:9d:be:03:61: 1f:d8:6e:10:79:82:9c:70:c5:42:3b:20:34:4d:5d:8a:95:20: 3c:d5:f7:4e:8e:6a:95:6c:b7:9b:95:70:26:4d:03:16:33:48: 66:cb:18:0f:06:dc:42:54:17:f0:72:72:1c:38:26:2a:42:43: 40:4c:ba:68:6e:89:e8:02:98:19:91:c4:47:c9:d9:57:fe:ce: 24:40:4b:43:5c:74:b8:c9:50:f8:0e:41:76:f9:ad:ca:72:9b: d9:ef:17:c9:56:d2:0a:8e:9a:83:14:bf:02:c7:ba:df:3f:36: 85:71:90:b0:8c:6a:ec:d0:e9:58:34:bd:35:6f:80:58:99:99: ee:0d:0f:cc:c0:4a:f7:ff:f6:70:1a:ac:7a:e6:21:6c:3c:44: 65:a6:48:49:10:fd:29:47:ab:17:2b:12:c2:49:eb:5b:45:2d: 56:5d:66:44:4a:7f:34:54:14:d1:9b:43:4a:18:3c:70:74:fd: 5f:1e:5d:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6v5wneLHtxNKy/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YmYwMTJhMTQtYjRmYS00YzY3LWE3NDItYTNhYzg1MzE0ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUGlTh1CtaHpQ9oSBp4Yu0YulNDkC405y0Z 2jTUcVSg+0LiXH5/aS/Dc09Vt3tHgoPG1PuC3gWiO3BxlVjyKxBkbEW0tRooykDv mx3P4or/cCHZtF7wUpdm8Wj1XqxsrGNW4zQOfogyquPVo+ZknpldXDpZeeJNNTY+ xGh6bA57CLa1Dr2pyruNyTdrWRDJypkiltsX3hzib/edo3lnf0PL3HM6bbubA5ls YzJdUSAiDSp/cYTP+qzat/HsgPc3LBk2JmiHnNYujRZSsxe7hwXvfAiBMToKZmVs xMbLRWJ4in3mK8fARypYf9OZ0zboNi0aocNCmv0T3fndw6lnbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAsc3WCdjgS7mFgMSvAxW1d5PkEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDViZmEzNWItN2ZiYy0z YmVmLWEwNTktYmJkNWY0ZDg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL/Ig5S1kUV4RolfXY8EQBIr0k9qBfT+ZIexFRuRdft9IaC1YzTv SG9OI3NnM08f4FmQDJBKBddbB4iFNd1CijRvlwMAnb4DYR/YbhB5gpxwxUI7IDRN XYqVIDzV906OapVst5uVcCZNAxYzSGbLGA8G3EJUF/Bychw4JipCQ0BMumhuiegC mBmRxEfJ2Vf+ziRAS0NcdLjJUPgOQXb5rcpym9nvF8lW0gqOmoMUvwLHut8/NoVx kLCMauzQ6Vg0vTVvgFiZme4ND8zASvf/9nAarHrmIWw8RGWmSEkQ/SlHqxcrEsJJ 61tFLVZdZkRKfzRUFNGbQ0oYPHB0/V8eXUE= -----END CERTIFICATE-----Generated at Sat Sep 12 08:26:58 2026 by rpki-client