$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9c2b9a7-ddfe-3229-81f4-b931f4feb214.roa File: f9c2b9a7-ddfe-3229-81f4-b931f4feb214.roa (raw, json) Hash identifier: bRNBNRiRmuasQt7mnIgKyCeMFrD2Nv2cBtCdcH2uLfU= Subject key identifier: C0:BF:24:A3:F1:A4:83:4C:22:4E:83:F4:4E:CE:4D:6B:21:BD:10:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDCFC3289903E4C213FD0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9c2b9a7-ddfe-3229-81f4-b931f4feb214.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 6379 IP address blocks: 2001:470:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:dc:fc:32:89:90:3e:4c:21:3f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e72eff9b-d0e6-4e9f-9b41-453fa380aa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:16:f2:e4:f8:77:6d:8b:32:90:31:d0:0c: 48:c9:97:88:5a:6e:9a:be:95:26:e0:ad:69:39:b4: b9:40:1a:61:95:16:3f:66:24:1f:9a:84:81:92:b3: 1f:47:20:63:f9:98:be:ad:36:3b:8d:72:82:80:76: 62:7e:dd:07:d6:cf:81:3a:b7:f7:ab:bf:7c:e2:d9: e5:32:4f:7c:01:64:e0:da:c1:16:2f:e4:92:30:2f: 25:ea:f4:42:6c:44:d5:e6:c3:00:d9:20:cb:9e:de: bf:60:62:95:e5:85:83:86:0f:bd:cc:ec:15:42:80: 4e:c3:60:88:3d:f3:b8:25:10:39:aa:e4:1f:73:dc: 8b:8f:8e:22:44:f8:20:07:91:7d:e9:b1:89:32:c9: aa:bc:55:05:77:cf:98:08:5d:60:99:a8:89:b2:91: 60:72:51:a7:af:fd:f9:73:43:0b:fd:19:33:80:87: 3e:09:dd:79:e0:8f:7f:8a:45:e3:d3:16:79:dc:ee: 84:a1:5f:c9:60:ff:66:c9:35:9a:ee:5d:ee:20:b7: 31:0f:c0:c4:6c:d9:c7:08:07:88:68:87:08:07:50: cf:e0:c3:c5:cb:a7:f1:fd:24:0c:5b:49:12:34:b1: e1:af:27:9d:9d:f8:ae:fa:28:99:85:a8:4a:a0:0e: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BF:24:A3:F1:A4:83:4C:22:4E:83:F4:4E:CE:4D:6B:21:BD:10:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9c2b9a7-ddfe-3229-81f4-b931f4feb214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:89:d9:a3:6c:44:f8:8b:9d:bc:98:9f:1b:8d:e3:66:7e:93: 37:f9:58:44:46:54:4d:af:ce:77:30:fa:99:a6:7a:31:bc:c4: b7:e0:e3:04:8d:88:15:e2:c7:ad:19:33:e4:29:e7:79:56:b2: fd:42:86:90:47:cd:57:a6:c7:a4:03:a7:18:36:19:4c:0a:ee: 72:56:df:03:96:19:bf:4d:ba:91:47:a2:01:c6:09:06:a4:05: 06:3d:9d:a1:cd:b8:61:b0:36:09:5d:be:f8:f3:e2:6b:03:14: 9c:82:24:b3:7b:bb:73:30:20:4f:d4:f4:cd:ee:7e:c2:79:ff: 21:50:9d:d5:ee:d7:ce:ba:b4:7a:79:dc:6c:8d:3b:22:8f:12: 8f:6b:38:8e:49:68:04:35:e5:14:4a:fa:d7:c4:88:46:38:ca: a8:f5:90:f9:e9:c4:34:32:4d:40:39:c1:c3:11:21:76:fd:01: 35:e2:9a:a9:d3:9d:3d:bd:07:9f:56:a1:b7:66:4b:b2:e9:d8: 78:9f:50:dc:c5:48:5c:62:07:8d:20:59:43:be:d9:54:b8:56: f7:84:dc:aa:3f:1d:5e:8b:84:82:3b:f5:6c:ed:d9:35:8f:5c: 6a:bb:3a:d1:68:e5:7a:71:ec:a9:ed:31:1c:3a:fe:ea:c4:fd: 0e:bf:74:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fdz8MomQPkwhP9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTcyZWZmOWItZDBlNi00ZTlmLTliNDEtNDUzZmEzODBhYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIW8uT4d22LMpAx0AxIyZeIWm6avpUm4K1p ObS5QBphlRY/ZiQfmoSBkrMfRyBj+Zi+rTY7jXKCgHZift0H1s+BOrf3q7984tnl Mk98AWTg2sEWL+SSMC8l6vRCbETV5sMA2SDLnt6/YGKV5YWDhg+9zOwVQoBOw2CI PfO4JRA5quQfc9yLj44iRPggB5F96bGJMsmqvFUFd8+YCF1gmaiJspFgclGnr/35 c0ML/RkzgIc+Cd154I9/ikXj0xZ53O6EoV/JYP9myTWa7l3uILcxD8DEbNnHCAeI aIcIB1DP4MPFy6fx/SQMW0kSNLHhryednfiu+iiZhahKoA6pOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMC/JKPxpINMIk6D9E7OTWshvRAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjljMmI5YTctZGRmZS0z MjI5LTgxZjQtYjkzMWY0ZmViMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABOJ2aNsRPiLnbyYnxuN42Z+kzf5WERGVE2vzncw+pmmejG8xLfg 4wSNiBXix60ZM+Qp53lWsv1ChpBHzVemx6QDpxg2GUwK7nJW3wOWGb9NupFHogHG CQakBQY9naHNuGGwNgldvvjz4msDFJyCJLN7u3MwIE/U9M3ufsJ5/yFQndXu1866 tHp53GyNOyKPEo9rOI5JaAQ15RRK+tfEiEY4yqj1kPnpxDQyTUA5wcMRIXb9ATXi mqnTnT29B59WobdmS7Lp2HifUNzFSFxiB40gWUO+2VS4VveE3Ko/HV6LhII79Wzt 2TWPXGq7OtFo5Xpx7KntMRw6/urE/Q6/dOM= -----END CERTIFICATE-----Generated at Mon Nov 2 00:09:10 2026 by rpki-client