$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa File: daac15f2-3bef-30d4-a28b-a795019d3194.roa (raw, json) Hash identifier: rKrytK+qocJ/IdET7DvX0kqyCs4KoRDbi67zz74fdEI= Subject key identifier: D3:DA:8D:B1:1B:61:39:BE:05:8C:E1:94:AF:36:56:A4:AE:4D:4A:23 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE45893DC9BA4A17C9500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 50607 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e4:58:93:dc:9b:a4:a1:7c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e99ce081-846d-4d57-9952-44f5692f349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:8c:f0:1e:b1:bd:81:e8:11:74:b4:58:a6: 4c:bc:76:1f:ec:70:58:a4:33:3a:2b:6a:b7:e7:e0: e8:68:de:2c:cf:61:11:07:dd:c1:fe:28:af:50:be: f1:64:91:eb:da:2b:30:84:16:8e:86:96:21:2c:b7: 3e:76:dd:40:57:07:43:2e:b4:0d:96:d2:a2:ef:f1: 8a:ed:4b:46:47:80:3a:15:5e:fa:08:f2:ae:97:5c: db:49:11:dc:60:d4:df:71:b6:68:4b:46:ed:37:e9: f3:0f:e9:7a:f3:8d:fa:b3:4d:9f:74:ec:8a:b7:66: ed:5e:26:f2:c2:84:d5:68:94:6a:ed:8a:46:6f:8f: 92:27:7f:f1:f6:43:dd:24:1f:10:14:52:fa:bf:8c: fd:3a:b4:a1:a2:36:92:ed:be:9c:79:0f:d5:84:6e: 99:d6:09:29:e9:16:11:36:ba:db:7a:57:51:05:e6: cb:b3:42:a5:a1:f0:38:57:a4:25:67:1b:e0:ed:7b: c9:1b:68:af:86:33:f7:b3:96:bf:e8:83:4e:47:ff: 71:b2:09:84:91:ea:9e:ad:9a:b3:b6:10:8a:7a:31: 96:ca:4e:aa:64:b4:d6:c2:26:72:09:32:52:f6:aa: cf:06:7e:7d:82:02:be:37:c6:6e:cb:1c:10:e2:52: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:8D:B1:1B:61:39:BE:05:8C:E1:94:AF:36:56:A4:AE:4D:4A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b0:e3:e5:32:83:c9:dc:73:17:f0:00:7e:06:69:fa:5a:bd: 48:6f:30:75:f5:73:fd:84:76:20:d4:a8:14:31:33:98:91:4f: ee:57:cc:c6:8e:c9:4b:25:15:a4:b5:54:ff:d4:4f:d1:77:ca: 94:ab:cb:81:9a:71:10:8c:16:dd:d2:15:92:98:4e:f3:f7:f3: 2b:0a:db:2d:92:2d:58:64:1f:fe:b1:46:33:5b:c8:83:4e:70: f8:77:a6:7a:61:fd:1a:6a:0c:cb:ab:7c:f6:7e:cb:ff:be:17: 9f:01:57:1f:a2:8e:87:fc:ce:c7:84:99:97:94:21:93:9e:91: 33:36:e7:b7:eb:2a:3d:d1:13:b1:40:0d:59:95:9d:2f:2e:3a: 84:f5:77:ab:f9:3b:ea:a2:02:c2:83:fb:9a:23:2b:cf:e1:56: bf:1b:88:e5:35:77:8b:8e:73:b3:3d:a7:57:f9:f5:52:77:9c: c4:c5:9e:3a:0c:0e:ee:35:ea:3c:41:ac:74:65:5e:72:03:f6: af:36:0f:e7:8e:7c:2d:35:fd:52:db:0f:08:4d:f1:2e:59:f0: 0e:f6:60:d1:ac:e3:02:54:d2:33:39:7d:f6:79:c8:6d:c8:a5: bc:b9:fa:25:d8:60:2a:a7:1c:b8:c4:01:81:f0:1c:0a:1c:f5: d8:f7:5d:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+feRYk9ybpKF8lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTk5Y2UwODEtODQ2ZC00ZDU3LTk5NTItNDRmNTY5MmYzNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5mM8B6xvYHoEXS0WKZMvHYf7HBYpDM6K2q3 5+DoaN4sz2ERB93B/iivUL7xZJHr2iswhBaOhpYhLLc+dt1AVwdDLrQNltKi7/GK 7UtGR4A6FV76CPKul1zbSRHcYNTfcbZoS0btN+nzD+l68436s02fdOyKt2btXiby woTVaJRq7YpGb4+SJ3/x9kPdJB8QFFL6v4z9OrShojaS7b6ceQ/VhG6Z1gkp6RYR NrrbeldRBebLs0KlofA4V6QlZxvg7XvJG2ivhjP3s5a/6INOR/9xsgmEkeqerZqz thCKejGWyk6qZLTWwiZyCTJS9qrPBn59ggK+N8ZuyxwQ4lKiuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPajbEbYTm+BYzhlK82VqSuTUojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFhYzE1ZjItM2JlZi0z MGQ0LWEyOGItYTc5NTAxOWQzMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+w4+Uyg8nccxfwAH4GafpavUhvMHX1c/2EdiDUqBQxM5iRT+5X zMaOyUslFaS1VP/UT9F3ypSry4GacRCMFt3SFZKYTvP38ysK2y2SLVhkH/6xRjNb yINOcPh3pnph/RpqDMurfPZ+y/++F58BVx+ijof8zseEmZeUIZOekTM257frKj3R E7FADVmVnS8uOoT1d6v5O+qiAsKD+5ojK8/hVr8biOU1d4uOc7M9p1f59VJ3nMTF njoMDu416jxBrHRlXnID9q82D+eOfC01/VLbDwhN8S5Z8A72YNGs4wJU0jM5ffZ5 yG3Ipby5+iXYYCqnHLjEAYHwHAoc9dj3XdY= -----END CERTIFICATE-----Generated at Wed Nov 4 18:45:26 2026 by rpki-client