$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef05ac2f-8c14-358c-803f-304522c9b649.roa File: ef05ac2f-8c14-358c-803f-304522c9b649.roa (raw, json) Hash identifier: C9KlOsyRF9nm8jlyb+vt+zp/TiFUB0Qfv77DhzHKKOU= Subject key identifier: E3:CB:FB:2D:0E:2E:F4:4D:92:14:85:B8:2F:E0:F1:A2:03:63:4E:C0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F15CCE1DF749BB41B34793340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef05ac2f-8c14-358c-803f-304522c9b649.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 22218 IP address blocks: 2001:470:5a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e1:df:74:9b:b4:1b:34:79:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=38fc970b-e630-4e28-8ca2-177d3d8632fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:4b:c8:fc:a5:d2:d5:9c:61:f7:27:3c:cb: 8c:a0:38:ef:fe:6a:ff:4f:2e:db:e6:17:dd:de:60: e6:40:09:6b:fa:5a:ce:e6:bc:a0:10:b5:25:d8:69: 18:51:59:a0:0d:8f:0a:6c:7e:fa:4b:51:b2:49:2f: ae:fc:7b:8a:f1:9c:98:45:c9:64:40:d4:8e:a0:40: b5:c5:50:78:2a:19:65:79:17:1d:0d:80:1a:fb:81: 02:e1:02:b1:5f:89:b8:40:02:c5:01:01:a2:0d:4e: fa:df:0c:09:5d:29:58:31:c6:18:f9:b9:4e:c7:6b: 92:05:93:2f:8a:82:3d:5c:fb:a1:1b:41:98:da:01: 3d:39:ed:9e:d7:d0:f1:70:ff:ae:56:8a:07:c0:8a: c1:2e:df:9b:b6:44:5e:fc:6c:96:57:a2:df:cc:d3: 44:c4:98:fd:9b:d0:8b:d1:7d:9f:ca:81:65:25:47: 6e:2d:cb:11:e4:75:50:31:f4:7c:c5:1d:27:d3:ed: 49:d1:c5:fe:d7:5c:cb:e0:22:8e:42:20:65:d8:79: 95:70:cc:5b:fe:7c:03:4a:19:bc:51:52:d0:ff:33: da:b4:b8:86:24:60:7e:4c:ff:96:57:27:70:7c:61: f1:3a:09:e2:f9:74:e1:ca:66:56:da:44:b8:c1:b6: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CB:FB:2D:0E:2E:F4:4D:92:14:85:B8:2F:E0:F1:A2:03:63:4E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef05ac2f-8c14-358c-803f-304522c9b649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:5a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:66:b4:62:80:5a:e6:35:ce:06:67:b2:42:40:d0:3d:00:58: 3d:79:9a:29:fd:f1:e8:d6:b3:30:9a:69:0f:1a:9c:39:ae:56: 3d:51:31:5d:b4:85:10:63:bd:ab:a0:8a:69:67:86:cf:95:b9: 16:50:19:98:dd:64:80:50:e4:bc:9d:ca:34:53:33:47:1e:b5: d8:83:b2:0c:c7:5b:7b:f0:e6:2b:71:9b:51:20:ca:ed:30:a5: 9a:55:f3:03:9a:6b:9e:18:7b:38:73:31:e2:bf:28:e8:f3:e5: b6:9a:43:27:50:3c:46:2e:43:fd:f7:0b:e4:b1:27:b1:07:98: 42:8e:97:60:e7:5b:21:14:4b:eb:3e:ab:4b:70:7e:b4:f6:66: 96:0e:6f:bc:cb:8f:f4:ea:86:ca:81:4b:b3:69:b1:5b:d9:7c: 21:1d:50:ba:b3:6d:ab:6a:aa:8b:78:02:ac:63:8d:31:37:b9: 33:18:d5:0a:20:d2:f7:c2:9e:2e:53:56:f0:47:1e:95:d6:50: d3:e4:3a:e0:ae:09:34:c1:5a:3c:44:95:80:cb:42:1e:54:7c: d4:ec:64:0c:82:f2:50:a4:a6:d9:75:25:4c:8e:74:76:13:3f: 35:76:f1:3e:a0:26:6c:4c:97:1c:f7:55:51:29:7b:51:88:5c: 68:9d:be:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8VzOHfdJu0GzR5M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MzhmYzk3MGItZTYzMC00ZTI4LThjYTItMTc3ZDNkODYzMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG1LyPyl0tWcYfcnPMuMoDjv/mr/Ty7b5hfd 3mDmQAlr+lrO5rygELUl2GkYUVmgDY8KbH76S1GySS+u/HuK8ZyYRclkQNSOoEC1 xVB4KhlleRcdDYAa+4EC4QKxX4m4QALFAQGiDU763wwJXSlYMcYY+blOx2uSBZMv ioI9XPuhG0GY2gE9Oe2e19DxcP+uVooHwIrBLt+btkRe/GyWV6LfzNNExJj9m9CL 0X2fyoFlJUduLcsR5HVQMfR8xR0n0+1J0cX+11zL4CKOQiBl2HmVcMxb/nwDShm8 UVLQ/zPatLiGJGB+TP+WVydwfGHxOgni+XThymZW2kS4wbbxlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPL+y0OLvRNkhSFuC/g8aIDY07AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWYwNWFjMmYtOGMxNC0z NThjLTgwM2YtMzA0NTIyYzliNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALpmtGKAWuY1zgZnskJA0D0AWD15min98ejWszCaaQ8anDmuVj1R MV20hRBjvaugimlnhs+VuRZQGZjdZIBQ5LydyjRTM0cetdiDsgzHW3vw5itxm1Eg yu0wpZpV8wOaa54YezhzMeK/KOjz5baaQydQPEYuQ/33C+SxJ7EHmEKOl2DnWyEU S+s+q0twfrT2ZpYOb7zLj/TqhsqBS7NpsVvZfCEdULqzbatqqot4AqxjjTE3uTMY 1Qog0vfCni5TVvBHHpXWUNPkOuCuCTTBWjxElYDLQh5UfNTsZAyC8lCkptl1JUyO dHYTPzV28T6gJmxMlxz3VVEpe1GIXGidvks= -----END CERTIFICATE-----Generated at Sat Sep 19 08:28:46 2026 by rpki-client