$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa File: d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa (raw, json) Hash identifier: DqXQe1xj+gviWkiwN5SQWCl46xCeFqdwyHxziMAF64Q= Subject key identifier: A5:07:B5:C1:59:85:75:00:B1:0B:6B:B8:74:37:17:2E:D2:4B:A4:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F9BCDDD9C1D3E1B6AC3F58240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 394740 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:dd:9c:1d:3e:1b:6a:c3:f5:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=1a6a4c30-b7ab-474f-8e56-83a724521d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:e6:65:34:31:f1:89:10:6b:67:5b:15:db: 40:7c:27:ad:97:2b:94:a4:02:a5:d0:82:e4:a1:92: 95:46:1c:4c:21:73:9e:87:17:b5:f0:35:72:0c:f1: ae:09:2a:43:3e:16:5b:bb:b1:94:82:f3:85:4a:9c: 3a:6c:f8:03:3a:82:c0:1f:31:d3:76:af:f4:fd:da: 64:d4:f8:40:0e:4a:2a:5a:bd:18:01:9c:a7:f4:12: 6a:0c:c1:47:33:61:b2:49:71:ca:3f:c3:08:b7:dd: e7:64:a1:49:25:04:e7:58:05:ac:a5:56:ad:d0:21: c0:34:b7:a8:b1:3a:88:dc:93:48:f1:71:6b:25:c4: 3a:fe:08:d9:87:6b:e8:ab:d4:6f:d1:16:13:60:c4: c4:ef:48:1e:5b:d0:19:51:77:6d:54:c9:48:f0:5d: f9:8b:74:d7:77:cf:4d:3d:50:3e:02:70:b5:bf:e0: b3:02:44:d7:56:d9:48:59:aa:61:f5:38:78:81:d2: 51:ab:5f:62:b8:1f:18:c1:95:cf:8b:dd:05:bd:20: aa:cb:d0:16:66:66:1c:80:98:ae:c7:ee:cc:b9:ea: 5f:d5:a2:27:b1:6b:d0:ec:c4:00:57:6a:6d:94:1c: 72:36:3e:f5:7c:50:b6:07:6a:95:83:64:14:d0:de: d4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:B5:C1:59:85:75:00:B1:0B:6B:B8:74:37:17:2E:D2:4B:A4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ad:71:73:d7:6b:8f:69:cd:24:c7:8d:4e:16:21:80:b1:ad: 1e:77:37:a5:42:99:1d:44:01:f0:a0:ae:d2:74:96:b7:1b:e1: 67:0e:cd:03:c7:06:47:d8:ff:99:aa:12:cd:d2:d3:a1:c0:c0: ad:ad:f2:62:0c:84:c5:55:c8:08:b7:5a:86:21:e2:96:69:06: 71:15:5d:bf:39:31:6f:d0:70:ba:00:2f:30:54:72:32:3e:1f: c5:5c:d6:64:01:4e:05:85:94:35:68:71:ab:a4:c5:99:92:33: 00:bf:51:d6:78:10:51:60:5f:29:84:4c:8f:78:d0:7e:05:98: 34:a9:08:4d:72:95:2f:3c:cf:6c:41:58:cb:7a:d8:8c:db:dd: d2:5e:03:42:b2:88:ce:5d:e4:be:0f:83:f3:81:91:92:22:f7: 9c:68:58:f8:77:e1:48:c6:eb:84:d3:15:79:a5:91:6f:f6:d3: d9:fb:42:87:4f:2c:7a:9a:d1:ea:c0:18:2e:48:e8:d9:cc:c6: a3:66:cc:4a:7e:db:1c:0f:f9:ae:f0:5f:fc:ac:ac:34:6a:d9: ae:b2:ad:5c:1e:97:d6:80:83:97:5b:3b:8b:bb:07:44:b7:8a: 27:f4:c5:7b:8a:2a:08:de:ad:2b:26:54:8c:cd:80:3e:fc:c3: fb:c8:0c:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzd2cHT4basP1gkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MWE2YTRjMzAtYjdhYi00NzRmLThlNTYtODNhNzI0NTIxZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxzmZTQx8YkQa2dbFdtAfCetlyuUpAKl0ILk oZKVRhxMIXOehxe18DVyDPGuCSpDPhZbu7GUgvOFSpw6bPgDOoLAHzHTdq/0/dpk 1PhADkoqWr0YAZyn9BJqDMFHM2GySXHKP8MIt93nZKFJJQTnWAWspVat0CHANLeo sTqI3JNI8XFrJcQ6/gjZh2voq9Rv0RYTYMTE70geW9AZUXdtVMlI8F35i3TXd89N PVA+AnC1v+CzAkTXVtlIWaph9Th4gdJRq19iuB8YwZXPi90FvSCqy9AWZmYcgJiu x+7Muepf1aInsWvQ7MQAV2ptlBxyNj71fFC2B2qVg2QU0N7UdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUHtcFZhXUAsQtruHQ3Fy7SS6SqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDY0YTQ5ZjgtMWY2Yi0z N2RhLWI5ZDEtZmRlNGU3ZjgwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGKtcXPXa49pzSTHjU4WIYCxrR53N6VCmR1EAfCgrtJ0lrcb4WcO zQPHBkfY/5mqEs3S06HAwK2t8mIMhMVVyAi3WoYh4pZpBnEVXb85MW/QcLoALzBU cjI+H8Vc1mQBTgWFlDVocaukxZmSMwC/UdZ4EFFgXymETI940H4FmDSpCE1ylS88 z2xBWMt62Izb3dJeA0KyiM5d5L4Pg/OBkZIi95xoWPh34UjG64TTFXmlkW/209n7 QodPLHqa0erAGC5I6NnMxqNmzEp+2xwP+a7wX/ysrDRq2a6yrVwel9aAg5dbO4u7 B0S3iif0xXuKKgjerSsmVIzNgD78w/vIDIo= -----END CERTIFICATE-----Generated at Wed Nov 4 19:00:45 2026 by rpki-client