$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa File: fa67fba3-6cc5-3680-b207-88852245826b.roa (raw, json) Hash identifier: rKEGtgt+26Nx4mc/uhTRp8nrQlmRH3uzWi8iapKoo50= Subject key identifier: 0B:E3:9D:57:28:A5:B5:37:F2:F7:00:52:76:D6:BA:BC:16:06:24:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DD877E6ED9B152AD58AC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 15250 IP address blocks: 2001:470:ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d8:77:e6:ed:9b:15:2a:d5:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7ec65729-6a6e-4e70-900c-3cf61081c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:d9:ea:4a:74:09:d8:7e:56:17:55:78:d6: 76:af:29:8c:6a:d9:68:c1:b5:92:3c:07:50:e9:74: 4b:7e:4e:31:6e:34:73:36:f5:3e:62:18:b0:0f:fb: 4c:b9:77:dc:7a:d9:f6:bc:07:c1:a1:f3:1e:c8:f5: c1:c4:2f:6f:da:f4:f9:ba:d9:9a:0c:0b:a0:99:43: 07:ae:ff:be:fe:2b:bb:19:a8:72:97:9f:3a:6c:83: f2:e0:e3:0a:4e:fb:55:42:c5:ba:e5:9d:82:13:78: 83:0d:28:5c:1d:f8:7a:d4:48:e9:7c:a2:df:d6:1a: 89:02:e5:0c:70:27:07:ab:40:c8:1c:9b:ad:83:71: 79:1f:45:ec:fa:29:55:fa:3b:f7:ed:c2:9d:7d:b6: 61:93:c4:3d:44:30:0d:c2:dd:e0:cd:00:74:e8:c6: 72:14:5f:96:b9:dc:50:76:ed:d3:6e:83:a3:74:c1: 56:04:43:03:99:b7:28:e1:e9:94:87:52:8a:b7:7d: 91:61:ac:e3:04:1d:d9:55:77:44:08:47:af:45:ee: b2:c4:b3:5e:8c:e9:23:d7:88:71:2b:bd:ef:03:fb: 43:d9:9d:60:04:df:6d:83:83:35:ce:c3:d0:a0:dd: 29:eb:18:71:25:26:9b:13:03:b4:58:4d:c7:06:c6: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:9D:57:28:A5:B5:37:F2:F7:00:52:76:D6:BA:BC:16:06:24:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ae::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ac:2f:68:f1:fb:9c:8a:02:40:4b:e9:82:b6:33:aa:bc:68: 62:2d:25:80:f4:74:6b:87:c7:a7:e9:b4:c6:17:b7:66:8d:d7: c8:f8:19:a5:aa:1f:9f:c9:9d:b6:0d:51:5d:25:1d:f6:43:22: 3e:20:88:43:46:a9:59:27:21:e9:4a:0e:f9:69:25:d0:87:e7: ba:40:25:eb:7a:ce:2e:41:d0:32:88:4e:a3:41:29:0b:7f:83: 86:44:33:6a:fc:7c:86:df:4a:5c:ad:af:73:6b:67:43:f9:aa: ed:00:fa:24:a0:dd:ee:b2:3a:b4:00:80:e8:f0:fd:cd:7a:23: 6c:a1:83:c7:4b:19:72:59:1e:ff:46:57:cd:94:ef:e5:30:c9: 20:e4:bb:50:82:45:d0:b6:57:3e:be:7a:f2:29:be:46:01:91: c8:05:aa:5f:df:6e:95:8e:31:17:f3:91:66:de:34:00:b2:4b: ea:c4:ba:fe:0f:43:5b:7f:b2:b5:e8:30:1d:51:b1:05:fa:e4: c0:ba:55:07:88:11:1f:f2:c9:ce:11:76:86:11:a5:5c:06:0b: fc:b7:90:23:49:81:b7:81:2d:3b:58:49:4d:1d:22:7a:de:da: f6:52:a3:93:a2:94:ab:14:98:17:68:c8:21:6e:22:e9:8e:07: 4c:e4:31:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fdh35u2bFSrVisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2VjNjU3MjktNmE2ZS00ZTcwLTkwMGMtM2NmNjEwODFjMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x7Z6kp0Cdh+VhdVeNZ2rymMatlowbWSPAdQ 6XRLfk4xbjRzNvU+YhiwD/tMuXfcetn2vAfBofMeyPXBxC9v2vT5utmaDAugmUMH rv++/iu7Gahyl586bIPy4OMKTvtVQsW65Z2CE3iDDShcHfh61EjpfKLf1hqJAuUM cCcHq0DIHJutg3F5H0Xs+ilV+jv37cKdfbZhk8Q9RDANwt3gzQB06MZyFF+WudxQ du3TboOjdMFWBEMDmbco4emUh1KKt32RYazjBB3ZVXdECEevRe6yxLNejOkj14hx K73vA/tD2Z1gBN9tg4M1zsPQoN0p6xhxJSabEwO0WE3HBsYcLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAvjnVcopbU38vcAUnbWurwWBiSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmE2N2ZiYTMtNmNjNS0z NjgwLWIyMDctODg4NTIyNDU4MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKSsL2jx+5yKAkBL6YK2M6q8aGItJYD0dGuHx6fptMYXt2aN18j4 GaWqH5/JnbYNUV0lHfZDIj4giENGqVknIelKDvlpJdCH57pAJet6zi5B0DKITqNB KQt/g4ZEM2r8fIbfSlytr3NrZ0P5qu0A+iSg3e6yOrQAgOjw/c16I2yhg8dLGXJZ Hv9GV82U7+UwySDku1CCRdC2Vz6+evIpvkYBkcgFql/fbpWOMRfzkWbeNACyS+rE uv4PQ1t/srXoMB1RsQX65MC6VQeIER/yyc4RdoYRpVwGC/y3kCNJgbeBLTtYSU0d Inre2vZSo5OilKsUmBdoyCFuIumOB0zkMe4= -----END CERTIFICATE-----Generated at Sun Nov 1 14:51:50 2026 by rpki-client