$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa File: d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa (raw, json) Hash identifier: 11Rq2C5hoDBcipP2kvSZvfAMIk/6VbwzMk3afr0A66I= Subject key identifier: 5A:E2:68:A0:C4:E3:13:FD:19:70:FE:93:A2:DC:48:0B:94:3F:17:C8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F1467A890FC4862D157B21160 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 35908 IP address blocks: 2001:470:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a8:90:fc:48:62:d1:57:b2:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=156d6ae4-9042-4d23-a8dc-7f6d76b84e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:ac:de:57:1b:91:db:97:bd:0e:be:37:56: 90:76:24:17:d3:ae:18:56:b8:c5:0c:71:33:fe:fc: 7f:b8:39:0a:49:ee:95:91:9b:88:fb:27:e2:a1:a9: ed:ce:9b:a9:40:e5:63:fe:7b:c4:f7:02:aa:01:7b: 05:fb:b3:42:f0:0d:9d:bb:8a:83:4f:5d:b7:c5:0b: f5:73:5b:fe:71:68:6f:9d:e5:7e:04:47:af:50:c6: e1:70:18:25:6d:fb:50:0e:0b:09:b0:3d:01:66:40: f6:09:55:e9:5f:79:af:43:fb:8f:bf:ec:cf:da:b2: ae:98:bc:63:ec:65:7b:79:e0:9c:ba:33:74:c4:a2: ea:c5:10:63:08:4c:f1:01:08:9d:14:8c:c9:0d:4a: cb:51:6b:a0:bf:9f:1a:f5:d4:75:5e:92:0f:1b:02: 85:ba:db:53:c0:b2:34:c1:fa:a4:54:d2:73:b9:a6: 37:30:90:d9:0f:0e:bf:e6:bd:e4:4e:f6:74:64:f3: 05:bf:af:b1:11:e7:82:2d:9a:1c:93:8a:45:e9:0d: 3a:b2:ab:d2:02:26:2a:d1:6e:54:1c:02:d8:1c:4f: 51:ed:42:0c:71:d0:a9:31:ff:21:a0:8f:55:29:61: 59:08:c7:df:63:a8:78:54:b9:1f:c4:ef:5e:bf:7b: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:68:A0:C4:E3:13:FD:19:70:FE:93:A2:DC:48:0B:94:3F:17:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d78c59fc-d0fa-3454-a9a5-3dbb60e345a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c8:3d:a9:36:1c:32:c8:a6:d6:75:5a:ea:76:67:d2:76:2f: f0:e7:46:ac:65:e5:3f:ae:e0:bc:e2:5f:26:ec:02:44:4e:cb: 2f:38:73:2d:aa:9b:33:64:2f:0f:d2:fa:c5:56:19:cf:6b:4f: 8f:99:e6:5e:0c:63:c0:50:07:25:e5:f6:88:75:9f:ea:df:50: f9:b5:15:3d:14:b4:bf:e4:33:2d:dc:3e:44:34:fc:8b:b4:3d: cd:cb:8d:b2:c7:8b:c9:03:59:09:bc:b8:99:0f:53:a0:b8:56: 98:47:99:29:05:86:e6:46:e2:9d:8f:72:d4:36:33:eb:99:bb: 35:9a:85:f2:04:69:df:7c:e2:23:2d:6a:83:10:c4:15:53:b2: 6a:87:c2:a1:44:8e:bd:60:ba:87:7e:1d:be:79:e6:ae:d6:67: 76:a0:15:20:aa:b3:f3:03:41:30:f4:62:62:57:93:90:4f:61: 42:2d:02:f9:d0:73:c9:90:83:c9:3a:9d:1c:45:54:b2:d0:09: 7a:5c:61:f1:5d:b8:c5:31:53:a9:d0:7d:1a:e4:02:00:51:78: f1:a0:f6:7b:78:ee:62:16:98:af:31:45:2b:d3:6f:80:fa:d0: 4f:1c:16:7e:10:5c:03:e9:cf:39:c9:91:c3:e0:d1:d6:e3:45: 80:bb:dc:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6iQ/Ehi0VeyEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTU2ZDZhZTQtOTA0Mi00ZDIzLWE4ZGMtN2Y2ZDc2Yjg0ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVGs3lcbkduXvQ6+N1aQdiQX064YVrjFDHEz /vx/uDkKSe6VkZuI+yfioantzpupQOVj/nvE9wKqAXsF+7NC8A2du4qDT123xQv1 c1v+cWhvneV+BEevUMbhcBglbftQDgsJsD0BZkD2CVXpX3mvQ/uPv+zP2rKumLxj 7GV7eeCcujN0xKLqxRBjCEzxAQidFIzJDUrLUWugv58a9dR1XpIPGwKFuttTwLI0 wfqkVNJzuaY3MJDZDw6/5r3kTvZ0ZPMFv6+xEeeCLZock4pF6Q06sqvSAiYq0W5U HALYHE9R7UIMcdCpMf8hoI9VKWFZCMffY6h4VLkfxO9ev3tEcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFriaKDE4xP9GXD+k6LcSAuUPxfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDc4YzU5ZmMtZDBmYS0z NDU0LWE5YTUtM2RiYjYwZTM0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIvIPak2HDLIptZ1Wup2Z9J2L/DnRqxl5T+u4LziXybsAkROyy84 cy2qmzNkLw/S+sVWGc9rT4+Z5l4MY8BQByXl9oh1n+rfUPm1FT0UtL/kMy3cPkQ0 /Iu0Pc3LjbLHi8kDWQm8uJkPU6C4VphHmSkFhuZG4p2PctQ2M+uZuzWahfIEad98 4iMtaoMQxBVTsmqHwqFEjr1guod+Hb555q7WZ3agFSCqs/MDQTD0YmJXk5BPYUIt AvnQc8mQg8k6nRxFVLLQCXpcYfFduMUxU6nQfRrkAgBRePGg9nt47mIWmK8xRSvT b4D60E8cFn4QXAPpzznJkcPg0dbjRYC73HI= -----END CERTIFICATE-----Generated at Sat Sep 12 08:27:11 2026 by rpki-client