$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa File: f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa (raw, json) Hash identifier: ii4lNt8iJfVhmRcYrHS6K1H+kbQrjIPNe+8PVu3ZvvI= Subject key identifier: 7C:8D:50:75:62:C5:A6:03:A2:57:70:4E:D6:CC:8C:52:11:8F:17:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DE7D5F0D677487C384A40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 44411 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:e7:d5:f0:d6:77:48:7c:38:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=2999d2e7-46a4-44e9-b5dc-a0816f2ab879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:f8:bc:ba:f3:59:d7:bc:93:ef:4a:c3:7f: 11:7d:30:3e:51:70:92:4e:59:1e:b3:a5:8c:71:95: e5:6e:b5:c9:f6:6a:08:c2:ad:a7:92:32:54:a1:67: 6e:1b:a1:e9:cf:ff:dd:4a:1c:0b:66:ca:a4:32:1c: 8a:af:08:92:d7:ed:a2:32:91:7e:a9:c9:6e:78:9b: 4b:26:a1:2c:52:db:bc:01:8c:66:5d:fa:f6:3e:75: 42:37:ec:8d:de:17:c7:f3:bf:a1:d3:f4:0c:64:fa: 2b:13:a0:b4:12:11:f0:3a:8b:a0:77:02:4a:ec:5b: 07:3f:f4:d1:6d:c2:d9:0d:1a:58:57:dd:d8:1e:c3: e6:c8:81:e1:ab:82:80:ed:27:55:68:58:33:c8:65: 18:6e:a9:50:b2:9a:b7:c5:57:f7:57:e8:8a:06:2a: f5:67:63:a3:9d:81:a8:8c:c0:f4:e2:30:88:f5:7a: 4f:70:ef:f1:b2:c8:aa:3c:22:9e:99:d8:5d:35:62: 83:da:57:26:03:57:c6:02:fd:97:94:12:32:46:5f: 21:17:9b:77:25:98:7a:b4:70:d5:3e:82:8d:e7:c6: e9:e7:9e:7e:46:31:a4:ca:22:16:a0:04:64:67:79: 6f:88:25:b9:b3:6b:44:6c:4f:50:57:ca:cb:6c:29: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8D:50:75:62:C5:A6:03:A2:57:70:4E:D6:CC:8C:52:11:8F:17:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4d9cdf4-9b94-3179-af7d-741a0dd3dd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b2:cf:13:71:00:e7:20:53:4b:57:0a:8f:16:58:77:95:6a: 1e:c8:27:af:65:fd:b2:2e:dc:8a:38:e8:aa:a3:3f:50:9d:3e: 25:32:b8:31:d5:f5:f3:a3:04:88:cf:d6:d5:84:88:a9:57:e9: a5:f2:22:2e:a4:56:41:ff:79:d9:80:bf:49:58:96:90:bc:2e: 2a:94:2c:76:a9:23:a1:d7:cb:13:8b:4a:71:e4:c7:ad:7f:8a: 8a:a6:83:50:d6:f8:f1:93:fa:e9:85:f2:b7:19:14:15:eb:3b: 8a:61:bb:73:c9:c3:4f:80:3b:9a:f4:f0:72:87:9c:4e:18:35: a7:06:08:4c:91:04:a9:5f:b5:75:43:4e:ab:33:27:5e:01:e1: e8:af:44:cd:f7:35:60:ea:fe:f7:d4:c8:de:48:ad:ac:2d:db: 93:4a:17:94:ab:d3:da:ca:05:0c:03:d1:bc:ca:86:89:ad:7f: 84:ed:50:9b:a1:89:8b:3a:e9:19:3a:cd:20:1a:a3:28:1f:9e: ca:8b:c8:bf:db:e9:cd:90:e3:7a:13:4e:66:f1:77:1c:5a:6b: 8e:8c:1a:b9:52:d3:04:53:5d:a6:6c:95:72:c7:ae:a3:fe:c2: de:a4:c6:2b:7c:f3:d6:77:d5:8e:11:b2:1a:38:fd:05:a7:66: e7:e2:79:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fefV8NZ3SHw4SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjk5OWQyZTctNDZhNC00NGU5LWI1ZGMtYTA4MTZmMmFiODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHL4vLrzWde8k+9Kw38RfTA+UXCSTlkes6WM cZXlbrXJ9moIwq2nkjJUoWduG6Hpz//dShwLZsqkMhyKrwiS1+2iMpF+qclueJtL JqEsUtu8AYxmXfr2PnVCN+yN3hfH87+h0/QMZPorE6C0EhHwOougdwJK7FsHP/TR bcLZDRpYV93YHsPmyIHhq4KA7SdVaFgzyGUYbqlQspq3xVf3V+iKBir1Z2OjnYGo jMD04jCI9XpPcO/xssiqPCKemdhdNWKD2lcmA1fGAv2XlBIyRl8hF5t3JZh6tHDV PoKN58bp555+RjGkyiIWoARkZ3lviCW5s2tEbE9QV8rLbCl9QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHyNUHVixaYDoldwTtbMjFIRjxcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjRkOWNkZjQtOWI5NC0z MTc5LWFmN2QtNzQxYTBkZDNkZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2yzxNxAOcgU0tXCo8WWHeVah7IJ69l/bIu3Io46KqjP1CdPiUy uDHV9fOjBIjP1tWEiKlX6aXyIi6kVkH/edmAv0lYlpC8LiqULHapI6HXyxOLSnHk x61/ioqmg1DW+PGT+umF8rcZFBXrO4phu3PJw0+AO5r08HKHnE4YNacGCEyRBKlf tXVDTqszJ14B4eivRM33NWDq/vfUyN5Irawt25NKF5Sr09rKBQwD0bzKhomtf4Tt UJuhiYs66Rk6zSAaoygfnsqLyL/b6c2Q43oTTmbxdxxaa46MGrlS0wRTXaZslXLH rqP+wt6kxit889Z31Y4Rsho4/QWnZufieRA= -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:06 2026 by rpki-client