$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d775efb5-3dee-34d7-8526-a69d7bc7ab3e.roa File: d775efb5-3dee-34d7-8526-a69d7bc7ab3e.roa (raw, json) Hash identifier: YxrKp0KPwAK2+0U6Hdhcd9hQu2c+7jO/3LPcIwz7ZUk= Subject key identifier: 56:0E:C0:A9:EF:6F:8F:3F:DC:18:91:0E:9F:E3:54:FA:7E:6E:8A:7E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F62930D3740A0973D1A046860 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d775efb5-3dee-34d7-8526-a69d7bc7ab3e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 216138 IP address blocks: 2001:470:3d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0d:37:40:a0:97:3d:1a:04:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a6ac9263-9608-4e96-9500-25cc89184503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:36:eb:dd:cc:d8:fc:fb:e6:aa:fa:a7:57: 0f:83:ce:3a:a7:bb:ec:aa:69:80:72:75:9c:05:7f: bf:4d:e6:7c:f7:a1:ba:42:20:34:48:2d:e0:0e:60: 11:ec:9a:72:79:13:2f:46:49:ee:5c:82:5a:99:0c: c1:c5:e3:2e:01:e4:08:50:31:da:6a:be:37:3b:2a: 6d:f9:40:0f:55:31:3d:55:f3:21:f6:15:b0:41:30: 0b:d8:e6:ba:8a:2b:ba:94:51:00:69:f3:4b:6a:b0: ba:ec:cd:c2:23:7d:8d:d2:74:ec:3b:61:4f:2f:9c: 91:44:7f:44:bc:99:d4:00:fa:61:65:46:9a:29:ee: aa:bc:c1:46:df:64:57:14:a3:ce:6d:4f:6b:19:59: 05:be:eb:86:f0:e6:1c:9f:a5:e7:ba:3c:f2:34:16: bf:23:ec:93:fe:9c:24:20:e3:f9:7e:da:6a:1c:a0: 77:9e:31:40:44:cb:a3:82:3a:09:c4:b1:20:eb:f8: 54:e9:b0:1a:36:69:06:ad:2a:d0:e7:b3:2e:89:9d: 8f:35:fa:c8:cd:53:4c:44:ac:16:10:e7:06:89:d1: da:42:e2:fa:40:97:05:d9:31:30:c5:98:2f:11:80: 04:e7:a8:9f:d2:1c:18:c4:84:48:74:35:0a:60:4a: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:C0:A9:EF:6F:8F:3F:DC:18:91:0E:9F:E3:54:FA:7E:6E:8A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d775efb5-3dee-34d7-8526-a69d7bc7ab3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1c:60:9e:71:f4:b7:8b:84:d1:26:52:33:ae:c1:d4:fb:ae: 8e:ac:55:bd:f4:90:96:69:92:1e:05:9a:42:43:80:52:18:2d: 98:e6:26:d4:a6:cd:d3:ab:95:7f:0f:ef:14:90:14:fb:6d:23: 7f:a0:6b:69:6d:fd:dc:ed:0b:7c:69:b0:d8:5f:69:d8:91:f5: 29:c2:03:c9:a7:13:42:f7:d6:82:d0:e2:e0:e1:ba:c6:c7:a6: db:28:f5:85:b9:ac:c2:64:e9:c9:da:e4:b0:de:ac:00:d3:d8: 67:6a:cf:3b:9f:3c:f3:87:f3:b7:16:a5:70:ba:00:14:03:f8: b8:88:a1:0a:5f:f2:78:38:38:68:e3:1a:a8:f6:e5:e6:cd:70: f3:2f:fa:c8:12:eb:15:bf:7c:70:e2:92:5d:1a:bf:ad:61:fb: 5b:39:6d:de:97:62:10:43:52:b3:7d:6a:1c:a1:aa:8f:13:23: ba:3b:d5:e5:5b:e2:f7:70:f8:0b:fa:e7:19:06:3d:71:0a:00: 8a:dc:23:3e:2f:07:9d:a4:2c:58:5b:d5:7e:61:f2:71:36:a6: 19:0c:5c:81:91:82:9f:13:55:74:00:90:ee:41:ae:d7:0f:fd: 04:5e:8d:9d:09:5f:f3:b0:16:5d:10:40:51:b5:c5:e7:c2:cd: 13:99:f7:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikw03QKCXPRoEaGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTZhYzkyNjMtOTYwOC00ZTk2LTk1MDAtMjVjYzg5MTg0NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP82693M2Pz75qr6p1cPg846p7vsqmmAcnWc BX+/TeZ896G6QiA0SC3gDmAR7JpyeRMvRknuXIJamQzBxeMuAeQIUDHaar43Oypt +UAPVTE9VfMh9hWwQTAL2Oa6iiu6lFEAafNLarC67M3CI32N0nTsO2FPL5yRRH9E vJnUAPphZUaaKe6qvMFG32RXFKPObU9rGVkFvuuG8OYcn6XnujzyNBa/I+yT/pwk IOP5ftpqHKB3njFARMujgjoJxLEg6/hU6bAaNmkGrSrQ57MuiZ2PNfrIzVNMRKwW EOcGidHaQuL6QJcF2TEwxZgvEYAE56if0hwYxIRIdDUKYErd8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFYOwKnvb48/3BiRDp/jVPp+bop+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDc3NWVmYjUtM2RlZS0z NGQ3LTg1MjYtYTY5ZDdiYzdhYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8cYJ5x9LeLhNEmUjOuwdT7ro6sVb30kJZpkh4FmkJDgFIYLZjm JtSmzdOrlX8P7xSQFPttI3+ga2lt/dztC3xpsNhfadiR9SnCA8mnE0L31oLQ4uDh usbHptso9YW5rMJk6cna5LDerADT2GdqzzufPPOH87cWpXC6ABQD+LiIoQpf8ng4 OGjjGqj25ebNcPMv+sgS6xW/fHDikl0av61h+1s5bd6XYhBDUrN9ahyhqo8TI7o7 1eVb4vdw+Av65xkGPXEKAIrcIz4vB52kLFhb1X5h8nE2phkMXIGRgp8TVXQAkO5B rtcP/QRejZ0JX/OwFl0QQFG1xefCzROZ9xk= -----END CERTIFICATE-----Generated at Sat Oct 10 19:16:47 2026 by rpki-client