$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa File: 2133cab2-2890-3cd0-9194-be449b9dafec.roa (raw, json) Hash identifier: M5EYVTdejOQNkmU9ENsixU6kg01mLV2Ijxju9yf9Brw= Subject key identifier: F7:3A:BD:8D:14:60:22:78:D1:B1:27:B8:C9:CA:E5:6E:51:D5:DB:DF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584ED9C7635A749A215C7B717980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 133380 IP address blocks: 2001:470:326::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:63:5a:74:9a:21:5c:7b:71:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=85428c34-5b82-4998-b0dc-9fba56437061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:f9:e4:c8:db:c1:ff:cc:a0:33:8c:b3:29: 71:ce:a3:11:40:31:9c:fb:16:91:ca:4b:63:d8:70: ca:e6:5a:0d:28:3d:33:17:68:6e:f7:1c:9d:cd:86: f1:e5:fa:44:16:e3:32:95:c9:cf:3e:86:82:6b:a3: a9:5c:31:06:21:0d:29:18:72:c5:8e:e7:d8:b9:70: ec:ee:6e:bb:e6:3b:cc:40:f6:2e:e9:59:e0:41:82: 22:73:dd:bc:1c:e1:94:85:da:04:b9:f6:7f:22:d5: b0:81:a3:49:32:32:17:0e:e5:22:e5:8d:d0:53:0f: 18:03:6e:cf:53:10:fa:3a:0e:c6:8a:26:81:62:68: 59:d6:23:4f:29:6e:7c:8b:54:e1:36:a8:73:1b:55: 6d:cc:5f:47:e4:cd:73:93:46:12:e9:cd:81:d4:a5: 6e:78:41:86:bb:2d:51:57:56:35:5d:7a:b9:63:09: 9f:c3:48:66:e6:27:ec:47:2c:4c:50:a7:27:c7:5b: c9:77:c8:96:cc:c3:26:d4:2f:99:12:a1:2a:f9:81: 25:cc:f3:5d:a0:de:9e:60:6f:c7:f8:2e:af:ec:fc: 8f:f3:fc:c4:29:78:dd:1f:ff:42:92:75:46:91:5e: e8:21:33:d6:41:5c:a1:92:92:e4:35:1b:1a:b1:52: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:BD:8D:14:60:22:78:D1:B1:27:B8:C9:CA:E5:6E:51:D5:DB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2133cab2-2890-3cd0-9194-be449b9dafec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:326::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:af:56:6c:78:3a:af:43:2b:ea:65:e5:7c:4f:6c:28:06:af: 36:59:ae:f1:e7:35:b2:bf:06:f9:6e:6c:2c:0b:8e:f4:2c:f8: a9:fb:82:52:c3:f3:70:44:e3:09:b5:61:bb:92:08:16:23:78: 2f:ee:cd:ac:5b:06:e5:d4:d4:cb:f1:a1:8d:bd:de:cc:de:36: 21:d7:ed:b1:9e:47:79:6a:0a:c4:11:cb:30:e6:69:87:5a:7c: b0:c8:0d:01:2a:ab:e7:93:28:80:fb:b4:be:20:fc:74:ae:ab: c1:9b:7e:30:41:c5:9b:24:03:ea:e6:8f:4f:2a:03:a9:5c:0b: 95:c0:89:f6:95:69:f3:94:dc:08:a0:08:4b:55:ab:78:b3:25: fc:73:95:ad:61:97:fd:47:e9:8d:38:f7:f0:dd:0b:b4:2a:63: 98:25:e9:39:07:c3:a5:50:7f:bc:54:b8:25:cb:7d:19:c1:fe: 59:73:58:dd:c6:ff:08:0b:05:17:6e:24:73:5f:96:7e:eb:6f: 67:36:0e:33:56:94:f4:09:40:0c:42:de:d4:11:a2:48:ca:fe: ee:94:77:d2:05:ba:0c:43:0a:cf:f3:72:17:c5:a1:e6:35:0c: 07:1f:0a:57:b7:d2:53:31:7b:7a:9f:bd:a8:d0:3b:51:d4:7b: 03:9f:b0:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zx2NadJohXHtxeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ODU0MjhjMzQtNWI4Mi00OTk4LWIwZGMtOWZiYTU2NDM3MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKv55Mjbwf/MoDOMsylxzqMRQDGc+xaRyktj 2HDK5loNKD0zF2hu9xydzYbx5fpEFuMylcnPPoaCa6OpXDEGIQ0pGHLFjufYuXDs 7m675jvMQPYu6VngQYIic928HOGUhdoEufZ/ItWwgaNJMjIXDuUi5Y3QUw8YA27P UxD6Og7GiiaBYmhZ1iNPKW58i1ThNqhzG1VtzF9H5M1zk0YS6c2B1KVueEGGuy1R V1Y1XXq5Ywmfw0hm5ifsRyxMUKcnx1vJd8iWzMMm1C+ZEqEq+YElzPNdoN6eYG/H +C6v7PyP8/zEKXjdH/9CknVGkV7oITPWQVyhkpLkNRsasVLtJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPc6vY0UYCJ40bEnuMnK5W5R1dvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjEzM2NhYjItMjg5MC0z Y2QwLTkxOTQtYmU0NDliOWRhZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGivVmx4Oq9DK+pl5XxPbCgGrzZZrvHnNbK/BvlubCwLjvQs+Kn7 glLD83BE4wm1YbuSCBYjeC/uzaxbBuXU1MvxoY293szeNiHX7bGeR3lqCsQRyzDm aYdafLDIDQEqq+eTKID7tL4g/HSuq8GbfjBBxZskA+rmj08qA6lcC5XAifaVafOU 3AigCEtVq3izJfxzla1hl/1H6Y049/DdC7QqY5gl6TkHw6VQf7xUuCXLfRnB/llz WN3G/wgLBRduJHNfln7rb2c2DjNWlPQJQAxC3tQRokjK/u6Ud9IFugxDCs/zchfF oeY1DAcfCle30lMxe3qfvajQO1HUewOfsFw= -----END CERTIFICATE-----Generated at Tue Sep 22 18:25:20 2026 by rpki-client