$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8fff425-6893-306f-ba22-4aaaefe1142d.roa File: f8fff425-6893-306f-ba22-4aaaefe1142d.roa (raw, json) Hash identifier: MnD2nV3J/dE73hZ+3KIg0OIowVZaQckXlVcucMAZRDQ= Subject key identifier: 32:71:25:E2:07:2F:BB:1C:73:C3:1C:64:8B:F9:C8:2C:E8:9A:F3:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA79C356438F8E001BB210760 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8fff425-6893-306f-ba22-4aaaefe1142d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 210456 IP address blocks: 2001:470:581::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:35:64:38:f8:e0:01:bb:21:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea849bf2-dac9-4359-b6fb-0740447a35d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:fb:66:71:66:8d:89:e0:7a:75:73:58:5c: 19:7f:22:75:6e:94:f4:43:70:b6:62:ab:1e:c9:79: 71:f5:62:ee:2a:86:b9:02:1e:97:b2:dc:45:f6:59: 7d:2e:c1:50:29:62:6d:14:eb:ba:61:38:c1:ca:1b: d0:ea:41:6f:70:db:c7:75:28:46:b8:2f:be:17:a2: 16:6e:63:72:4a:73:22:91:41:3e:14:b0:19:86:7e: a8:11:90:a2:cf:75:5b:59:9a:4c:08:39:a1:b3:c3: 2a:20:95:f8:e5:7d:5a:fe:e4:01:dc:30:ea:b1:dc: 1a:f1:bf:22:3c:d0:d4:91:67:b2:e1:95:88:c9:a0: 7f:0c:07:6d:9f:d2:b2:de:78:59:98:67:2b:e5:b4: e5:2f:7f:6a:33:17:db:6e:8e:2a:c5:6a:bc:e2:21: 9f:4a:9c:87:d0:de:01:a1:6a:24:d3:b6:a9:28:28: 41:ab:b0:98:94:28:70:40:53:b0:68:c8:e3:e9:3f: 95:5e:fc:92:73:f3:5d:79:6d:5f:86:25:fd:17:9f: cd:ca:55:f0:0e:1c:29:74:ce:cc:18:23:3a:b3:fa: cc:c1:b3:5b:cc:33:fc:4b:a0:d9:75:ce:21:9f:ad: 3e:3d:d9:1f:73:56:00:88:fc:d0:e5:ae:89:c1:0e: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:25:E2:07:2F:BB:1C:73:C3:1C:64:8B:F9:C8:2C:E8:9A:F3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8fff425-6893-306f-ba22-4aaaefe1142d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:581::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0d:aa:a2:cc:7a:a7:27:1d:2a:00:0f:56:7b:20:2a:bd:2a: d9:ad:0d:34:fa:da:91:bf:f7:ab:c8:d3:1c:cb:5d:10:19:9f: d2:8b:38:d2:3d:90:59:8d:48:a0:ae:43:99:42:33:85:7b:37: 4f:d6:2b:98:93:54:5d:1d:e0:39:c5:7c:0a:ca:3d:8d:ca:af: c6:47:17:be:c8:a2:c2:2f:fd:bd:5d:ef:93:c3:b4:5b:68:31: 3f:2e:3d:bb:5b:ce:e2:05:3f:8c:40:f1:70:71:61:1b:f0:77: b0:32:eb:ea:8a:90:ba:99:42:4c:f7:98:06:00:36:41:66:3f: b6:56:3b:5a:4d:d7:bb:8e:88:31:d2:94:39:4f:d6:b9:ff:92: 04:4c:f5:79:96:20:11:bb:ca:d9:ed:13:43:96:83:80:31:16: d5:ea:f0:04:07:1c:05:cf:81:2a:c6:3c:75:64:e5:bb:29:64: 73:05:2a:5c:15:dc:47:71:c6:14:d7:4a:14:17:11:90:50:42: fd:98:96:48:1d:3d:82:a5:33:ea:16:14:90:4b:39:8f:2e:75: 3f:8a:06:86:0b:fe:b7:18:0a:ca:94:dc:d1:69:38:f6:eb:ad: 2f:58:5a:2f:99:e7:4f:b6:3b:9f:68:75:48:3c:df:06:b5:7b: b3:a0:57:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnDVkOPjgAbshB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWE4NDliZjItZGFjOS00MzU5LWI2ZmItMDc0MDQ0N2EzNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXX7ZnFmjYngenVzWFwZfyJ1bpT0Q3C2Yqse yXlx9WLuKoa5Ah6XstxF9ll9LsFQKWJtFOu6YTjByhvQ6kFvcNvHdShGuC++F6IW bmNySnMikUE+FLAZhn6oEZCiz3VbWZpMCDmhs8MqIJX45X1a/uQB3DDqsdwa8b8i PNDUkWey4ZWIyaB/DAdtn9Ky3nhZmGcr5bTlL39qMxfbbo4qxWq84iGfSpyH0N4B oWok07apKChBq7CYlChwQFOwaMjj6T+VXvySc/NdeW1fhiX9F5/NylXwDhwpdM7M GCM6s/rMwbNbzDP8S6DZdc4hn60+Pdkfc1YAiPzQ5a6JwQ5N4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJxJeIHL7scc8McZIv5yCzomvMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjhmZmY0MjUtNjg5My0z MDZmLWJhMjItNGFhYWVmZTExNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsNqqLMeqcnHSoAD1Z7ICq9KtmtDTT62pG/96vI0xzLXRAZn9KL ONI9kFmNSKCuQ5lCM4V7N0/WK5iTVF0d4DnFfArKPY3Kr8ZHF77IosIv/b1d75PD tFtoMT8uPbtbzuIFP4xA8XBxYRvwd7Ay6+qKkLqZQkz3mAYANkFmP7ZWO1pN17uO iDHSlDlP1rn/kgRM9XmWIBG7ytntE0OWg4AxFtXq8AQHHAXPgSrGPHVk5bspZHMF KlwV3EdxxhTXShQXEZBQQv2YlkgdPYKlM+oWFJBLOY8udT+KBoYL/rcYCsqU3NFp OPbrrS9YWi+Z50+2O59odUg83wa1e7OgV/k= -----END CERTIFICATE-----Generated at Fri Sep 11 02:52:07 2026 by rpki-client