$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa File: dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa (raw, json) Hash identifier: 9IFYPGRvZ7wzpHpStASCEfm4Th5XWPxkQhxzpVr4B8Y= Subject key identifier: B4:F9:0A:C3:E1:81:B8:74:51:2A:20:0C:1C:0E:26:41:00:E6:4D:FD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDF885BA2834429932D40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 26167 IP address blocks: 2001:470:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:df:88:5b:a2:83:44:29:93:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=56ebcc29-1efb-4145-87ab-6fb7ae3452d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:92:6e:e5:54:ad:8d:fb:57:ee:dd:f1:9e: 5b:72:73:a6:52:a9:a2:be:da:79:20:f6:a3:34:92: d8:9c:4b:0e:24:92:58:90:50:6f:77:80:1b:89:d6: 64:22:c4:fa:c7:52:cf:a3:6f:c2:00:67:25:de:2c: 22:42:ac:9b:9e:7b:92:d8:31:17:5c:4c:ba:5f:cc: 74:58:f7:81:4a:0f:06:3b:32:ee:33:e0:f3:a9:ae: 9d:45:fc:68:81:94:14:79:79:61:91:8c:9b:6c:96: 16:6a:45:45:84:f4:56:c9:ca:dd:62:d8:83:a3:6b: b8:5e:c8:5c:79:a9:82:2b:e6:a5:95:6b:0d:be:4f: 32:f6:ba:85:e0:e5:15:6e:fe:2c:6c:66:0d:ae:bc: d3:6f:56:1f:18:81:da:3a:67:96:4c:fb:ca:ff:49: 6f:e8:64:31:32:54:f9:22:dd:ff:97:f4:0b:28:9e: 24:de:e1:25:9d:1e:46:91:85:df:e7:c6:ff:24:5b: 1f:e5:5c:8d:43:e8:cb:2b:47:2e:da:3d:bd:54:8b: bb:77:60:ce:56:1d:bc:55:85:72:65:65:e5:b0:16: 6a:ad:34:09:b4:c1:a9:da:05:e5:12:25:b0:63:94: 2f:3d:5c:fb:fb:00:9d:4f:35:4d:ba:a9:48:4d:70: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F9:0A:C3:E1:81:B8:74:51:2A:20:0C:1C:0E:26:41:00:E6:4D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:116::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:79:47:60:2b:b5:fa:d9:67:72:e7:a1:ef:35:99:88:4d:db: 12:e4:60:76:27:0b:9d:cb:53:b8:64:ad:ab:56:d0:4e:0b:e1: 6e:c0:c5:be:e7:fa:69:c3:18:a1:c5:6b:58:46:2f:7b:7c:04: f1:59:fb:50:f9:c3:8d:dd:ac:e1:ac:8b:b9:05:86:73:cb:37: 2d:91:65:dd:36:bc:6b:c9:cb:3b:31:db:de:4f:03:b9:5f:0b: 9e:07:d7:41:ba:eb:5f:40:b8:72:e0:98:f7:08:d7:d0:68:87: 69:66:89:f7:a2:b3:29:54:27:96:9f:e7:c4:e8:5c:4a:7b:fd: 9b:58:55:d3:c4:25:ed:96:44:63:31:d1:13:64:44:0f:5b:7a: 74:f0:c5:5a:71:de:50:13:7a:ba:ae:54:35:15:24:1c:ce:a3: c2:37:bd:30:71:66:57:c5:a4:56:71:1e:33:88:eb:16:41:af: c1:d2:33:72:c8:a1:36:6d:f0:dd:5d:b2:b9:c3:74:98:ba:e0: 31:1f:28:90:12:e1:fa:95:1b:25:be:f4:29:16:df:4f:1a:cf: 68:d4:62:b9:b3:9f:2a:01:01:1a:33:d4:1e:60:ae:25:5e:87: fc:a5:e1:28:80:5f:f4:1f:d6:ce:25:0c:6f:b5:21:49:56:b1: e7:3d:13:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fd+IW6KDRCmTLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTZlYmNjMjktMWVmYi00MTQ1LTg3YWItNmZiN2FlMzQ1MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLuSbuVUrY37V+7d8Z5bcnOmUqmivtp5IPaj NJLYnEsOJJJYkFBvd4AbidZkIsT6x1LPo2/CAGcl3iwiQqybnnuS2DEXXEy6X8x0 WPeBSg8GOzLuM+Dzqa6dRfxogZQUeXlhkYybbJYWakVFhPRWycrdYtiDo2u4Xshc eamCK+allWsNvk8y9rqF4OUVbv4sbGYNrrzTb1YfGIHaOmeWTPvK/0lv6GQxMlT5 It3/l/QLKJ4k3uElnR5GkYXf58b/JFsf5VyNQ+jLK0cu2j29VIu7d2DOVh28VYVy ZWXlsBZqrTQJtMGp2gXlEiWwY5QvPVz7+wCdTzVNuqlITXAnQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLT5CsPhgbh0USogDBwOJkEA5k39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGJjZmQ0YTgtN2YxMi0z N2Y1LTg3NjItOWQ1ZTkwOWJiNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIh5R2ArtfrZZ3Lnoe81mYhN2xLkYHYnC53LU7hkratW0E4L4W7A xb7n+mnDGKHFa1hGL3t8BPFZ+1D5w43drOGsi7kFhnPLNy2RZd02vGvJyzsx295P A7lfC54H10G6619AuHLgmPcI19Boh2lmifeisylUJ5af58ToXEp7/ZtYVdPEJe2W RGMx0RNkRA9benTwxVpx3lATerquVDUVJBzOo8I3vTBxZlfFpFZxHjOI6xZBr8HS M3LIoTZt8N1dsrnDdJi64DEfKJAS4fqVGyW+9CkW308az2jUYrmznyoBARoz1B5g riVeh/yl4SiAX/Qf1s4lDG+1IUlWsec9E8A= -----END CERTIFICATE-----Generated at Sun Nov 1 14:48:46 2026 by rpki-client