$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa File: 1c1d9b1b-aae0-33de-9996-50958fe5794a.roa (raw, json) Hash identifier: BcgIxw+g4szXkmD0jJCF4DcOANWptIdvUtSuxkfeh6s= Subject key identifier: D0:DD:B5:5C:99:F9:99:E6:8C:D3:E0:23:1D:73:95:E3:9E:AF:88:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F497F6D59A6BD0DDF178AD250 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 140577 IP address blocks: 2001:470:3bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:6d:59:a6:bd:0d:df:17:8a:d2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9832bb2f-fd4f-4866-aa00-66f11e28b39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:71:62:c1:ff:4d:41:04:32:1f:44:d9:3c: fe:42:f1:7e:1e:f8:10:e9:30:c8:2d:7c:d9:74:aa: 60:5b:33:12:f9:1c:5b:4d:91:6d:dd:dd:4c:10:ce: 1f:35:cc:20:29:72:7a:95:34:1b:e4:51:29:44:15: 2d:1e:9e:42:cc:84:de:f1:b1:28:c4:22:56:79:78: 63:4f:bc:4a:b8:25:37:af:e7:b4:ca:ae:6f:af:81: c5:82:8b:4d:12:f3:3f:1f:37:69:73:ab:b5:ef:3e: 9d:e0:8d:8f:70:ae:a7:66:e0:4a:5d:fb:4b:61:70: 54:80:8b:46:a9:b9:68:af:5b:8a:47:b2:7d:d0:42: f7:2b:00:15:00:3a:a7:7d:c1:cb:52:2e:e6:c4:ff: 18:86:74:12:62:0d:41:a0:d3:de:f2:c6:18:46:61: 66:15:ca:d3:87:66:55:a6:93:ba:6c:6b:d8:99:aa: 66:74:92:ee:81:d1:da:38:1c:b3:74:e3:fa:17:d2: 72:db:5a:f4:c1:3b:c9:1f:d1:19:4b:e4:63:7d:f1: 2e:a3:f0:b5:36:63:48:0a:31:98:ec:4e:5a:c9:91: f5:b7:b4:10:16:fc:f2:ee:71:d8:7d:57:7b:83:29: 30:66:f3:58:06:0d:12:2d:ee:d0:c6:a0:f8:5c:d3: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DD:B5:5C:99:F9:99:E6:8C:D3:E0:23:1D:73:95:E3:9E:AF:88:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d9:d1:42:33:48:a1:92:d8:47:aa:75:4d:29:c7:03:ad:c1: dc:57:19:31:36:16:86:88:f5:40:4e:ac:d7:b3:57:31:b4:64: 69:3e:bb:3e:5b:5a:1b:8e:68:5d:85:b3:62:7a:f5:49:1a:af: 55:aa:2e:34:5d:70:74:f4:95:ba:5c:0d:bd:66:41:3c:03:5e: 27:cd:50:28:46:77:83:d0:47:aa:de:25:dd:c3:15:a4:01:33: c3:5b:90:64:3a:6a:d8:33:e4:a9:28:22:51:91:17:fc:11:7d: f8:a8:56:75:94:b8:34:e1:1d:26:a3:c8:be:b4:82:eb:1b:4f: fa:cf:bb:c9:05:c3:d0:ca:c1:3e:7b:f7:21:36:49:56:ce:64: 59:01:7a:d4:54:52:ed:c5:b6:ce:75:77:9c:a8:dd:28:99:c6: 65:14:44:77:b8:03:6a:60:04:fe:4a:04:99:62:7b:51:c1:1c: 7f:19:f6:15:c0:82:e6:e7:e5:2b:4a:bb:22:c6:93:93:bb:35: 28:91:a2:f4:77:91:37:99:4a:a5:08:7c:94:2f:08:77:3b:e7: 7e:36:83:c5:7b:3d:13:71:44:0d:b3:fb:cf:49:a9:92:20:0e: be:6e:4f:09:3f:6a:ed:39:05:27:80:2d:6f:02:ba:43:7e:1d: ea:cf:7b:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jf21Zpr0N3xeK0lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTgzMmJiMmYtZmQ0Zi00ODY2LWFhMDAtNjZmMTFlMjhiMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMBxYsH/TUEEMh9E2Tz+QvF+HvgQ6TDILXzZ dKpgWzMS+RxbTZFt3d1MEM4fNcwgKXJ6lTQb5FEpRBUtHp5CzITe8bEoxCJWeXhj T7xKuCU3r+e0yq5vr4HFgotNEvM/Hzdpc6u17z6d4I2PcK6nZuBKXftLYXBUgItG qblor1uKR7J90EL3KwAVADqnfcHLUi7mxP8YhnQSYg1BoNPe8sYYRmFmFcrTh2ZV ppO6bGvYmapmdJLugdHaOByzdOP6F9Jy21r0wTvJH9EZS+RjffEuo/C1NmNICjGY 7E5ayZH1t7QQFvzy7nHYfVd7gykwZvNYBg0SLe7QxqD4XNOOiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDdtVyZ+ZnmjNPgIx1zleOer4jRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWMxZDliMWItYWFlMC0z M2RlLTk5OTYtNTA5NThmZTU3OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDZ0UIzSKGS2EeqdU0pxwOtwdxXGTE2FoaI9UBOrNezVzG0ZGk+ uz5bWhuOaF2Fs2J69Ukar1WqLjRdcHT0lbpcDb1mQTwDXifNUChGd4PQR6reJd3D FaQBM8NbkGQ6atgz5KkoIlGRF/wRffioVnWUuDThHSajyL60gusbT/rPu8kFw9DK wT579yE2SVbOZFkBetRUUu3Fts51d5yo3SiZxmUURHe4A2pgBP5KBJlie1HBHH8Z 9hXAgubn5StKuyLGk5O7NSiRovR3kTeZSqUIfJQvCHc75342g8V7PRNxRA2z+89J qZIgDr5uTwk/au05BSeALW8CukN+HerPe1E= -----END CERTIFICATE-----Generated at Sun Sep 27 04:44:12 2026 by rpki-client