$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa File: d978219e-a272-3f43-8a67-9325428ac9d6.roa (raw, json) Hash identifier: Y8IMDu5bFKUV9IMbzqfDstz4vCc4QXqYtETk4C2g0O8= Subject key identifier: 8F:CA:E7:A9:81:11:AA:D3:70:64:81:90:D4:B7:48:1A:CA:4B:75:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE082CBAB4B36678CEE38 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 395301 IP address blocks: 2001:470:f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e0:82:cb:ab:4b:36:67:8c:ee:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=3809aa8e-2082-4d4f-9888-0f7492c5fb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:86:0a:40:9a:dd:3a:2c:57:23:63:d1:fa:8a: 91:aa:91:f6:b0:59:df:78:28:96:7f:e9:e8:c8:a0: 06:5b:d0:82:2e:32:42:13:25:42:c3:72:21:c4:46: 01:3f:bc:a1:de:e6:ec:ef:ad:87:3e:3f:54:63:2c: 8c:d6:47:e0:85:aa:1b:5f:8c:bb:79:e2:46:6a:04: 17:2e:71:2d:9e:77:ed:ed:46:b3:a8:0b:2a:f4:be: 81:f7:d4:43:9b:f2:44:ef:12:7e:52:92:1b:4b:e5: a8:07:ee:8e:10:3b:49:06:10:c4:45:02:c8:9b:f4: 82:da:34:4b:f8:0b:bc:7d:2c:1a:af:31:9f:64:a7: 63:9f:3e:98:37:5b:57:3a:b0:f3:1e:43:ea:16:99: 85:62:c2:d2:bc:cb:01:72:73:82:5b:06:cb:44:a7: db:c0:8a:93:b4:1f:66:26:e9:89:cf:7c:e4:e8:7d: a5:e6:f8:5c:5d:66:fd:40:93:7b:bc:e3:c7:fd:1f: 19:42:69:0d:d9:af:88:3b:2e:2c:98:c7:7e:8e:78: 4c:ab:bd:e7:cf:52:50:ac:51:53:5e:69:fb:18:5a: 8f:65:68:cd:73:20:4e:73:7b:49:6b:fe:1b:9f:cd: ec:45:a4:35:91:77:fc:f4:f4:67:04:d2:d1:29:bd: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:E7:A9:81:11:AA:D3:70:64:81:90:D4:B7:48:1A:CA:4B:75:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d978219e-a272-3f43-8a67-9325428ac9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ea:52:67:1d:4f:2e:91:c6:8f:00:24:5c:f8:f0:d7:a3:99: 63:7b:89:6f:12:59:a6:dc:3d:03:64:d0:8c:b2:1a:f9:f9:7b: 31:75:f7:50:21:c1:a4:d2:e5:48:6e:9f:97:e3:39:5a:b5:83: 24:e7:90:a6:be:76:62:c6:28:ac:f5:eb:1e:e8:35:13:7f:68: 33:99:36:db:5a:4c:39:31:ac:da:d1:d5:43:f6:5c:7a:72:1a: a4:36:ef:b3:1d:cd:47:bb:2e:27:eb:0d:9b:92:56:91:96:64: 1b:13:ed:42:a8:97:53:67:bd:50:5b:22:fe:6d:47:e4:ab:f7: 0d:04:a5:c5:d6:31:98:f6:6d:30:4e:73:fe:2e:5d:ca:f9:d4: b5:50:6c:7b:07:b2:ba:c4:40:eb:1f:58:92:01:c3:91:0c:74: 2e:22:ae:e1:8a:f3:e8:b5:84:f7:49:90:e4:e7:cc:6e:f9:10: c8:76:30:3d:8b:22:92:d1:77:83:14:c1:d6:ab:f0:6e:c4:32: 7a:de:7f:60:e5:5d:c2:b7:e8:8a:af:ac:de:d8:2b:93:95:fe: 0d:73:4a:32:14:ca:6b:b7:85:1d:af:36:d4:b1:e9:3d:f1:5f: 87:5c:ce:3b:32:7f:9d:68:08:cc:24:47:c9:14:7f:ae:09:b7: 87:4c:6d:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feCCy6tLNmeM7jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzgwOWFhOGUtMjA4Mi00ZDRmLTk4ODgtMGY3NDkyYzVmYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IYKQJrdOixXI2PR+oqRqpH2sFnfeCiWf+no yKAGW9CCLjJCEyVCw3IhxEYBP7yh3ubs762HPj9UYyyM1kfghaobX4y7eeJGagQX LnEtnnft7UazqAsq9L6B99RDm/JE7xJ+UpIbS+WoB+6OEDtJBhDERQLIm/SC2jRL +Au8fSwarzGfZKdjnz6YN1tXOrDzHkPqFpmFYsLSvMsBcnOCWwbLRKfbwIqTtB9m JumJz3zk6H2l5vhcXWb9QJN7vOPH/R8ZQmkN2a+IOy4smMd+jnhMq73nz1JQrFFT Xmn7GFqPZWjNcyBOc3tJa/4bn83sRaQ1kXf89PRnBNLRKb1eYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/K56mBEarTcGSBkNS3SBrKS3UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDk3ODIxOWUtYTI3Mi0z ZjQzLThhNjctOTMyNTQyOGFjOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzqUmcdTy6Rxo8AJFz48NejmWN7iW8SWabcPQNk0IyyGvn5ezF1 91AhwaTS5Uhun5fjOVq1gyTnkKa+dmLGKKz16x7oNRN/aDOZNttaTDkxrNrR1UP2 XHpyGqQ277MdzUe7LifrDZuSVpGWZBsT7UKol1NnvVBbIv5tR+Sr9w0EpcXWMZj2 bTBOc/4uXcr51LVQbHsHsrrEQOsfWJIBw5EMdC4iruGK8+i1hPdJkOTnzG75EMh2 MD2LIpLRd4MUwdar8G7EMnref2DlXcK36IqvrN7YK5OV/g1zSjIUymu3hR2vNtSx 6T3xX4dczjsyf51oCMwkR8kUf64Jt4dMbSc= -----END CERTIFICATE-----Generated at Sat Oct 24 20:56:05 2026 by rpki-client