$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbe328b9-4009-3b86-9393-dbfa4c346858.roa File: dbe328b9-4009-3b86-9393-dbfa4c346858.roa (raw, json) Hash identifier: XJEcqgRYfmxb9Cey3IwsaPJN7FZ9WP034Wm0G4DV8EY= Subject key identifier: F8:B4:DB:16:93:B9:3F:AD:75:DA:D0:5D:7D:6D:82:2B:39:EB:3B:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F82BC760A317B21948A9DBF40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbe328b9-4009-3b86-9393-dbfa4c346858.roa Signing time: Thu 15 Oct 2026 13:30:16 +0000 ROA not before: Thu 15 Oct 2026 13:30:16 +0000 ROA not after: Wed 13 Jan 2027 14:30:16 +0000 asID: 20191 IP address blocks: 2001:470:3e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:bc:76:0a:31:7b:21:94:8a:9d:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 15 13:30:16 2026 GMT Not After : Jan 13 14:30:16 2027 GMT Subject: CN=c7ea824a-ed15-4cda-b01e-3f45d944174c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:aa:b0:2c:0f:5c:a7:30:ba:a5:ac:17:bb: 88:8f:ae:ff:da:bf:ff:c7:da:21:2b:cc:23:09:73: a4:d2:91:73:6f:2e:e0:32:48:ec:20:7a:47:98:b3: d0:2a:39:e4:32:23:64:13:b5:67:a8:42:37:d8:f6: c1:91:0a:b4:e5:3d:83:21:9b:bc:9d:3c:cb:04:c5: 88:2b:7b:36:7e:7d:31:56:62:de:51:32:1d:d7:6e: 87:23:4c:bd:51:d3:b2:22:a3:88:7e:f7:7f:ed:b2: 0e:c2:4a:2a:17:68:61:f8:89:db:46:d1:23:65:81: c8:3b:b3:b5:b9:9b:f7:65:5c:93:3e:4d:42:86:af: fc:41:ce:26:eb:f2:03:4f:1a:90:fa:22:59:38:98: 53:07:1b:9c:db:c0:0a:2b:d2:7f:18:26:34:63:98: fa:1c:80:cc:74:6e:f4:ab:98:de:d5:fc:1e:59:36: 68:f9:fd:06:95:39:ec:bb:45:0b:f3:4a:17:ad:7d: b0:ce:71:70:25:be:03:20:88:a9:5d:ae:a0:7f:b9: f8:d0:31:27:46:d3:70:56:6a:45:5c:b5:ef:93:e8: fa:e1:81:f3:29:d3:2b:10:e4:d4:3f:64:9c:3e:7c: 65:5f:e2:b4:23:98:dd:d5:a7:9b:b0:de:83:89:47: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:DB:16:93:B9:3F:AD:75:DA:D0:5D:7D:6D:82:2B:39:EB:3B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbe328b9-4009-3b86-9393-dbfa4c346858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:04:f6:a6:41:6f:ee:33:ee:2a:f7:aa:28:e5:21:c8:ce:c2: f7:61:60:69:a9:98:f2:8f:f0:37:f9:b9:56:79:18:ff:90:20: 2c:3f:f2:a2:30:32:01:d5:7e:52:be:cd:98:4c:6a:8c:7c:97: 78:b2:d6:a0:7a:a4:30:a2:0f:2e:e3:43:a9:fd:94:40:a9:4b: af:0c:45:3a:36:41:22:4b:48:49:c5:70:42:6b:98:f6:88:3a: 73:d7:ec:a3:68:a1:72:26:d7:c3:eb:0f:96:13:83:bc:b8:8b: 80:47:95:88:21:27:2d:78:45:19:38:02:6b:8f:44:88:ff:67: fd:16:14:c1:bd:21:86:68:1b:bf:a2:f9:79:29:5c:c1:db:e0: 75:e6:e3:b8:af:f9:94:f7:97:56:11:f5:23:fe:1e:04:9e:0a: 3f:a0:07:39:7b:01:d7:27:93:ee:97:88:83:6e:45:3f:12:d2: fc:8c:f4:f4:ab:f4:12:43:fc:d5:68:14:03:00:52:bb:d4:da: 59:fd:62:29:85:bf:be:ea:6e:58:ad:49:f1:db:34:87:c1:5c: 62:1c:bd:ca:52:ba:d5:e4:8e:bf:04:a3:82:0b:8a:47:14:5a: 62:e3:cc:05:9b:1c:34:66:69:7f:f5:58:74:0e:b1:af:57:b1: 1b:f2:ea:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CvHYKMXshlIqdv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNTEzMzAxNloXDTI3MDExMzE0MzAxNlowLzEtMCsGA1UEAxMk YzdlYTgyNGEtZWQxNS00Y2RhLWIwMWUtM2Y0NWQ5NDQxNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UeqsCwPXKcwuqWsF7uIj67/2r//x9ohK8wj CXOk0pFzby7gMkjsIHpHmLPQKjnkMiNkE7VnqEI32PbBkQq05T2DIZu8nTzLBMWI K3s2fn0xVmLeUTId126HI0y9UdOyIqOIfvd/7bIOwkoqF2hh+InbRtEjZYHIO7O1 uZv3ZVyTPk1Chq/8Qc4m6/IDTxqQ+iJZOJhTBxuc28AKK9J/GCY0Y5j6HIDMdG70 q5je1fweWTZo+f0GlTnsu0UL80oXrX2wznFwJb4DIIipXa6gf7n40DEnRtNwVmpF XLXvk+j64YHzKdMrEOTUP2ScPnxlX+K0I5jd1aebsN6DiUcXDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPi02xaTuT+tddrQXX1tgis56zuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGJlMzI4YjktNDAwOS0z Yjg2LTkzOTMtZGJmYTRjMzQ2ODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoE9qZBb+4z7ir3qijlIcjOwvdhYGmpmPKP8Df5uVZ5GP+QICw/ 8qIwMgHVflK+zZhMaox8l3iy1qB6pDCiDy7jQ6n9lECpS68MRTo2QSJLSEnFcEJr mPaIOnPX7KNooXIm18PrD5YTg7y4i4BHlYghJy14RRk4AmuPRIj/Z/0WFMG9IYZo G7+i+XkpXMHb4HXm47iv+ZT3l1YR9SP+HgSeCj+gBzl7Adcnk+6XiINuRT8S0vyM 9PSr9BJD/NVoFAMAUrvU2ln9YimFv77qblitSfHbNIfBXGIcvcpSutXkjr8Eo4IL ikcUWmLjzAWbHDRmaX/1WHQOsa9XsRvy6uc= -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:22 2026 by rpki-client