$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa File: e987f505-6ba4-3ada-8736-654c9b72a3af.roa (raw, json) Hash identifier: nTo7ZqheJlSI+Vk0aWcE/bPVeHW9oP5KiTaCWeRODcM= Subject key identifier: C3:A5:81:9F:69:D4:BC:38:DB:73:E9:61:94:8E:2C:06:A3:42:A5:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE8107C42DC1252E37540 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 51500 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e8:10:7c:42:dc:12:52:e3:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=64fc8144-dc29-4c29-b974-3283f86da6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:89:f6:c6:4d:e6:9a:b2:e2:b4:f0:b3:3d: 27:4e:b4:03:ba:c2:e9:4d:ba:21:f3:1c:97:64:32: db:75:f9:e6:29:0b:28:af:1c:bf:e3:7d:26:b8:66: dd:28:4c:21:82:8f:d5:80:23:8d:1e:60:41:b8:61: 31:0e:82:39:86:a8:fa:1a:0b:ae:88:71:47:61:28: c1:cc:f4:a3:67:30:6f:16:0e:d2:cd:b4:dc:33:22: 5a:d1:7e:38:12:5c:40:55:43:d8:c3:e3:fa:5c:b1: cd:28:8e:c0:94:23:c7:0a:9c:78:ae:54:28:95:f3: a7:43:2d:14:c9:4d:17:ab:a7:b8:ba:c4:b4:21:d6: 5c:62:5b:56:bb:97:47:cc:57:ed:0a:cb:da:f4:56: d9:62:49:64:98:fa:c0:01:d6:25:c5:8e:9b:49:c2: a2:58:47:c6:5d:e5:ec:de:cc:8b:d1:00:49:36:2e: 8d:a0:66:92:6c:1c:c1:4e:e8:8c:05:2b:09:b6:a6: 2f:0e:be:55:6a:1b:e1:83:20:f4:8a:40:71:03:38: a7:5c:71:f5:55:72:5d:38:f0:a6:67:82:80:bf:9b: 37:d2:a3:52:a5:f4:7d:80:20:53:2b:2d:26:3d:55: eb:92:bf:1f:6b:71:c3:6b:31:90:0c:a6:37:1c:81: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:81:9F:69:D4:BC:38:DB:73:E9:61:94:8E:2C:06:A3:42:A5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e987f505-6ba4-3ada-8736-654c9b72a3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a0:d0:0c:4a:42:7d:f5:a5:ea:3a:ae:01:d9:b3:88:f8:3b: 1e:cc:fe:8f:7f:2d:73:5f:22:ec:d4:f8:3f:aa:27:0f:fd:93: 16:2c:ed:7a:fb:3d:3b:2c:b8:d6:ea:7f:a2:62:f7:4f:4d:10: e7:68:42:63:aa:37:04:02:08:ab:08:30:39:42:fe:17:09:75: 09:ce:a0:34:a1:6b:f1:fb:3e:9a:e7:64:30:64:9a:02:0c:2d: 12:3c:30:01:ba:f5:6c:cf:96:8a:32:1e:f3:d0:b5:df:e3:e7: fb:e1:74:d4:a5:33:fd:a1:e1:82:be:36:fe:2a:2b:da:42:ff: ab:17:c7:28:34:a0:08:2f:d9:23:d8:7b:ac:94:d7:2c:5b:f9: 22:3d:1c:66:4d:16:c0:57:74:d0:a9:db:44:9c:b5:35:07:8e: 21:f9:ec:1d:36:c5:33:67:6f:67:ad:6e:40:01:31:f1:06:1c: 18:4d:78:24:b8:e2:53:62:6f:f1:85:23:10:ef:d2:8d:15:21: 5a:a3:ed:e2:b4:f5:1c:3d:f6:07:de:2b:c9:42:87:49:b8:7d: 81:57:f2:50:14:90:e3:13:6c:dc:f4:f4:a8:93:1e:d0:ff:3c: 57:73:aa:28:dc:cd:d1:37:2b:ff:0f:e5:34:67:48:f8:8d:67: 8b:ae:e1:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fegQfELcElLjdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NjRmYzgxNDQtZGMyOS00YzI5LWI5NzQtMzI4M2Y4NmRhNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb6J9sZN5pqy4rTwsz0nTrQDusLpTboh8xyX ZDLbdfnmKQsorxy/430muGbdKEwhgo/VgCONHmBBuGExDoI5hqj6GguuiHFHYSjB zPSjZzBvFg7SzbTcMyJa0X44ElxAVUPYw+P6XLHNKI7AlCPHCpx4rlQolfOnQy0U yU0Xq6e4usS0IdZcYltWu5dHzFftCsva9FbZYklkmPrAAdYlxY6bScKiWEfGXeXs 3syL0QBJNi6NoGaSbBzBTuiMBSsJtqYvDr5VahvhgyD0ikBxAzinXHH1VXJdOPCm Z4KAv5s30qNSpfR9gCBTKy0mPVXrkr8fa3HDazGQDKY3HIG6KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOlgZ9p1Lw423PpYZSOLAajQqVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTk4N2Y1MDUtNmJhNC0z YWRhLTg3MzYtNjU0YzliNzJhM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmg0AxKQn31peo6rgHZs4j4Ox7M/o9/LXNfIuzU+D+qJw/9kxYs 7Xr7PTssuNbqf6Ji909NEOdoQmOqNwQCCKsIMDlC/hcJdQnOoDSha/H7PprnZDBk mgIMLRI8MAG69WzPlooyHvPQtd/j5/vhdNSlM/2h4YK+Nv4qK9pC/6sXxyg0oAgv 2SPYe6yU1yxb+SI9HGZNFsBXdNCp20SctTUHjiH57B02xTNnb2etbkABMfEGHBhN eCS44lNib/GFIxDv0o0VIVqj7eK09Rw99gfeK8lCh0m4fYFX8lAUkOMTbNz09KiT HtD/PFdzqijczdE3K/8P5TRnSPiNZ4uu4a4= -----END CERTIFICATE-----Generated at Mon Oct 26 08:32:21 2026 by rpki-client