$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa File: f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa (raw, json) Hash identifier: mCJ3vzu9JdtU8BR3uQDQvH7akSl5gWHLLrj3BZ3qXIY= Subject key identifier: A4:2E:E0:3A:64:94:2B:37:D3:A2:D9:44:D1:E4:06:FB:54:3C:AB:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE94E2856BD9C086A7B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 26806 IP address blocks: 2001:470:2d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e9:4e:28:56:bd:9c:08:6a:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=1bda00df-e03f-4891-bafa-09d8305e62f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:cc:68:c2:28:20:01:92:6b:39:7a:03:c0: ee:bf:5e:4e:17:e2:5f:ba:7b:63:21:4f:23:10:2c: 51:c1:22:51:63:af:ba:54:6c:78:e8:2c:a1:54:07: 43:cb:8b:4d:f8:85:55:ca:d9:99:c5:47:ca:b2:99: f4:09:6e:6a:61:46:bd:dd:40:97:c2:bd:21:35:93: b8:59:98:50:94:70:89:9d:de:11:b6:17:43:a2:c6: b7:7e:9f:ef:55:4f:5e:94:55:fe:5b:51:61:45:ff: 49:6c:91:ed:41:d1:15:93:7b:e6:e9:2d:18:43:1c: f3:cf:1b:05:58:e9:f0:24:87:f3:52:31:7a:13:c3: 29:70:f3:b1:38:4f:60:5d:d4:46:ab:ac:d8:1f:48: 71:41:f3:4a:4c:fe:b8:84:b1:3f:90:79:85:4c:0d: 43:bf:83:56:1b:f7:01:95:6f:45:7d:a3:ab:c7:46: 5c:a8:7b:10:86:a7:0a:36:7b:66:1a:9c:73:60:ba: 54:79:b6:02:7f:f3:a8:4c:10:11:fa:ce:3a:e7:c1: 1f:91:78:2e:f4:0f:1d:39:06:c7:aa:7b:90:b9:4b: 9c:b2:e6:3c:59:58:42:9f:48:c7:48:92:08:c0:e7: a7:5a:d8:43:2d:f1:fd:02:53:15:64:05:87:d3:3b: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:E0:3A:64:94:2B:37:D3:A2:D9:44:D1:E4:06:FB:54:3C:AB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c3:c6:03:d3:36:5c:0d:00:08:16:ae:1a:a9:81:29:39:43: 72:df:88:59:5d:db:88:3d:89:b4:28:a1:c4:d5:04:ea:2c:15: 3a:6c:59:e7:4a:46:37:2f:02:4c:9c:84:64:c7:01:01:52:9a: d5:5f:4c:77:ab:4b:b4:47:71:c0:9a:d6:74:04:c0:ee:67:02: 89:6c:f0:d0:93:e1:3e:68:04:08:37:85:61:ed:50:b5:28:d1: 4c:8e:bc:1f:61:08:0d:2b:23:e6:0e:75:97:b7:cd:24:b6:f7: 9e:d2:6b:03:9b:61:d7:2a:91:88:dd:08:bd:df:59:66:a9:ba: ec:f2:41:8e:01:2c:fa:55:03:cc:64:89:b7:cf:61:83:36:ae: 35:a7:82:94:a1:7b:72:dc:5e:3d:11:de:ec:a1:ea:59:e9:b6: 76:36:bc:55:e0:32:c4:4b:f6:5d:a1:0f:31:e8:1c:eb:15:44: 2f:cf:50:bb:18:b4:86:53:04:6d:0e:d3:70:08:61:69:71:ab: 9c:cb:47:b3:07:f0:86:54:1c:f4:2b:f7:10:69:c2:14:ed:bd: 65:0d:69:12:31:73:02:2a:51:5d:52:07:4d:8a:57:9d:af:89: 2f:3b:34:08:d9:c1:f0:68:d7:89:05:43:ef:28:a6:b1:8a:19: 02:6c:e1:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+felOKFa9nAhqewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MWJkYTAwZGYtZTAzZi00ODkxLWJhZmEtMDlkODMwNWU2MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlszMaMIoIAGSazl6A8Duv15OF+JfuntjIU8j ECxRwSJRY6+6VGx46CyhVAdDy4tN+IVVytmZxUfKspn0CW5qYUa93UCXwr0hNZO4 WZhQlHCJnd4RthdDosa3fp/vVU9elFX+W1FhRf9JbJHtQdEVk3vm6S0YQxzzzxsF WOnwJIfzUjF6E8MpcPOxOE9gXdRGq6zYH0hxQfNKTP64hLE/kHmFTA1Dv4NWG/cB lW9FfaOrx0ZcqHsQhqcKNntmGpxzYLpUebYCf/OoTBAR+s4658EfkXgu9A8dOQbH qnuQuUucsuY8WVhCn0jHSJIIwOenWthDLfH9AlMVZAWH0zsvzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQu4DpklCs306LZRNHkBvtUPKtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjBjZWMyZDEtNTdjMi0z MmY5LWFiMDUtYmEzNTEzZGQ5ZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXDxgPTNlwNAAgWrhqpgSk5Q3LfiFld24g9ibQoocTVBOosFTps WedKRjcvAkychGTHAQFSmtVfTHerS7RHccCa1nQEwO5nAols8NCT4T5oBAg3hWHt ULUo0UyOvB9hCA0rI+YOdZe3zSS2957SawObYdcqkYjdCL3fWWapuuzyQY4BLPpV A8xkibfPYYM2rjWngpShe3LcXj0R3uyh6lnptnY2vFXgMsRL9l2hDzHoHOsVRC/P ULsYtIZTBG0O03AIYWlxq5zLR7MH8IZUHPQr9xBpwhTtvWUNaRIxcwIqUV1SB02K V52viS87NAjZwfBo14kFQ+8oprGKGQJs4Xo= -----END CERTIFICATE-----Generated at Sun Nov 1 14:47:36 2026 by rpki-client