$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa File: f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa (raw, json) Hash identifier: AGnLlu6aBMrIfo8jAwPyWVsU6UVK87nZYw8B6sXkSUQ= Subject key identifier: A8:F5:F5:71:87:45:B7:1D:B4:75:77:2A:5E:E9:87:17:3B:85:40:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F1467B19207E62EA2ED624700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 3255 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:b1:92:07:e6:2e:a2:ed:62:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a7cac269-b80f-460b-8297-cb2b4343eff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:1a:8b:f1:ff:04:01:e0:89:b7:47:cf:36: fc:72:d4:e8:c9:94:b5:c1:da:35:91:e2:44:5e:e8: d7:f9:38:2a:4a:ee:9c:49:25:ce:c6:53:c3:59:c8: 7b:25:cc:20:31:5b:13:f6:60:a2:74:e3:d6:54:6b: 92:fd:12:3f:63:25:9c:08:b6:14:c5:93:ae:04:85: 86:ce:dd:6e:1f:33:42:26:9c:b1:93:5a:bf:ee:9c: ca:4c:e5:c4:46:d3:47:80:fa:6f:7e:4b:90:6d:79: b5:2c:4f:28:6b:cd:d9:82:d1:3d:35:da:e2:62:82: 0c:b7:38:31:38:f9:49:45:cb:9a:92:4c:a6:02:b7: e3:3c:bd:8f:99:45:4f:84:9a:30:6e:9b:bd:6d:8b: 1c:a7:33:12:61:8e:5b:dc:9c:75:7a:a3:e5:b8:e2: 55:02:3c:e7:ae:8b:df:8c:f4:d1:e6:42:5a:d0:5e: 11:94:2f:af:1f:a2:3f:52:0b:a9:a2:f6:7d:ba:c7: 8f:a6:41:23:66:dd:ef:40:d5:6a:d4:25:3d:75:4b: 8d:64:9c:ca:6f:24:3f:1f:92:ea:d3:9e:b3:c2:6a: d1:7f:66:ae:3f:4b:8f:82:62:d4:5e:ea:55:d7:fe: 1f:40:6a:58:59:bd:6b:9d:ee:ef:6d:04:a7:7f:89: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F5:F5:71:87:45:B7:1D:B4:75:77:2A:5E:E9:87:17:3B:85:40:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:95:f3:93:d2:0d:27:a6:4d:13:6d:f3:26:68:e5:5c:dd:43: e9:89:37:38:22:32:5e:4f:a4:4d:e3:27:cb:b5:27:fd:5f:8f: 05:b6:e2:72:03:19:01:7b:94:d1:dc:4d:90:62:67:76:00:0f: 53:f7:c8:f6:b7:27:24:93:51:83:f8:98:ab:3a:21:92:f7:e5: 63:c1:e8:c6:ac:73:5d:d3:4a:b1:34:66:bd:06:c1:10:6d:3d: e9:b5:5a:76:2c:df:35:4f:27:5c:ef:09:65:47:fa:c6:af:f8: 88:3a:3b:16:26:74:10:aa:79:22:bf:1b:aa:73:56:2b:76:49: f3:42:ab:22:07:a6:e5:11:e6:ad:2e:d7:d9:52:cf:ce:d2:bb: 0a:6b:b8:55:14:41:67:b8:68:d7:89:5f:66:24:98:50:93:e7: 90:d1:c6:ad:cd:46:5a:33:80:0f:c2:e2:10:35:76:2d:16:88: 83:2f:21:4c:b6:7e:ba:76:2c:48:1c:1a:21:be:62:a5:8d:e2: a8:7f:eb:81:06:68:dc:61:a8:a5:47:d9:70:3d:1b:3f:f1:30: 5a:e6:50:f1:0e:66:e6:83:a0:c1:54:16:fb:1f:c3:ce:7c:79: d9:a0:35:67:85:3c:39:88:17:9d:e2:73:d5:46:9d:6e:ae:c0: 33:e4:4b:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ7GSB+Yuou1iRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTdjYWMyNjktYjgwZi00NjBiLTgyOTctY2IyYjQzNDNlZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjAai/H/BAHgibdHzzb8ctToyZS1wdo1keJE XujX+TgqSu6cSSXOxlPDWch7JcwgMVsT9mCidOPWVGuS/RI/YyWcCLYUxZOuBIWG zt1uHzNCJpyxk1q/7pzKTOXERtNHgPpvfkuQbXm1LE8oa83ZgtE9NdriYoIMtzgx OPlJRcuakkymArfjPL2PmUVPhJowbpu9bYscpzMSYY5b3Jx1eqPluOJVAjznrovf jPTR5kJa0F4RlC+vH6I/UgupovZ9usePpkEjZt3vQNVq1CU9dUuNZJzKbyQ/H5Lq 056zwmrRf2auP0uPgmLUXupV1/4fQGpYWb1rne7vbQSnf4mChwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKj19XGHRbcdtHV3Kl7phxc7hUD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjhiMzRjNWEtZTRhZS0z N2ZkLWFlZDEtMGVlNjRkMzc3OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmV85PSDSemTRNt8yZo5VzdQ+mJNzgiMl5PpE3jJ8u1J/1fjwW2 4nIDGQF7lNHcTZBiZ3YAD1P3yPa3JySTUYP4mKs6IZL35WPB6Masc13TSrE0Zr0G wRBtPem1WnYs3zVPJ1zvCWVH+sav+Ig6OxYmdBCqeSK/G6pzVit2SfNCqyIHpuUR 5q0u19lSz87SuwpruFUUQWe4aNeJX2YkmFCT55DRxq3NRlozgA/C4hA1di0WiIMv IUy2frp2LEgcGiG+YqWN4qh/64EGaNxhqKVH2XA9Gz/xMFrmUPEOZuaDoMFUFvsf w858edmgNWeFPDmIF53ic9VGnW6uwDPkSyY= -----END CERTIFICATE-----Generated at Sat Sep 12 07:50:58 2026 by rpki-client