$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa File: 25b45474-d9f3-30d7-af14-7920e9d69bf9.roa (raw, json) Hash identifier: jvhIgpylwlY/SUvQH4UArIV/KDF79Gdfi5Ty185hCRk= Subject key identifier: 3C:D5:73:80:7D:F4:A1:B0:F0:1B:92:ED:44:05:F6:6C:36:6B:3E:65 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC922106BA3DD892D6E82E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 396106 IP address blocks: 2001:470:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:21:06:ba:3d:d8:92:d6:e8:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=fbe4df9c-7008-410c-88e8-8d40f3fc9a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:3b:5c:22:2d:97:6a:75:e3:4a:e5:c7:d9: d6:e5:20:26:52:38:3d:69:0e:23:2c:c3:5a:8e:eb: 99:62:0d:47:fd:73:81:ba:6f:c0:d1:33:c6:f9:98: 06:dd:90:8f:da:f8:7b:2e:e3:13:f0:26:48:1c:92: b0:af:c0:66:c2:a2:b2:66:d7:c4:cc:db:ac:1d:8f: 19:b0:3f:e3:6c:68:50:41:1f:e2:b9:ff:46:fa:c0: e1:23:e0:34:ff:49:79:f1:fa:a6:f7:92:20:eb:11: fe:c3:0d:17:9c:91:33:e2:de:55:5c:c1:a8:ed:59: a4:57:57:01:1a:62:13:3c:9b:02:e8:c1:ec:e8:79: 08:0b:94:29:26:93:d0:88:43:c6:e7:ee:9d:78:a1: 13:21:ef:cc:27:ec:f3:a2:f3:3b:99:e1:f9:89:e8: da:74:d9:60:0d:4b:c9:38:b3:12:f2:bc:61:11:0b: 71:c0:0c:2a:bb:92:09:fe:ba:94:87:b8:a1:d7:49: 35:ce:b2:ba:02:24:c0:a6:1e:66:4c:e3:1e:d9:bc: 1f:a8:e4:2f:0d:fa:a5:79:a7:62:94:45:fd:ca:e3: 52:ea:a2:2e:70:12:7e:c8:2d:fd:f0:9e:c1:6e:3d: e0:ae:ee:f1:05:6f:41:2e:4d:d3:ae:6f:85:33:3f: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:73:80:7D:F4:A1:B0:F0:1B:92:ED:44:05:F6:6C:36:6B:3E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:3e:71:8f:3a:a9:01:33:3b:31:50:42:65:3e:27:72:aa:90: ce:dc:6b:1b:13:4f:78:db:ae:5d:0c:07:ee:7e:cc:15:87:79: 1f:ad:c1:35:45:22:fc:72:53:26:67:aa:57:86:63:c0:5e:8c: b8:cb:7d:11:f0:de:3e:0c:f2:34:2d:11:09:8a:75:64:1f:cf: 00:68:c7:03:88:14:05:54:ea:94:5c:ab:f6:30:ea:85:7e:b7: d2:19:8c:6b:88:2d:de:b1:b0:1d:e4:4d:cb:b8:8c:d9:4f:ca: 28:2b:1b:be:f9:68:be:2a:79:9f:0d:cf:cc:26:bf:ad:17:32: fa:14:bd:1d:de:61:54:02:38:7b:a5:71:00:19:3e:56:36:0e: f4:ee:53:91:59:a5:c8:71:67:bc:10:4f:29:df:d7:ee:70:4f: 31:e6:16:9b:a1:82:b8:93:ed:37:15:6c:16:69:49:92:60:40: 05:b5:d6:3d:75:66:19:44:4e:7d:49:44:5a:d7:5b:a8:a9:6a: 8c:85:0d:65:13:6a:49:96:76:ee:da:f6:a6:a5:7b:a3:2b:57: 5e:ad:82:15:e7:a8:53:9c:fb:22:15:49:7e:a6:41:95:32:75: 10:a5:d7:2a:24:a4:00:d5:d5:5c:01:a1:79:9c:99:f8:c2:19: a5:52:27:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiEGuj3YktboLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmJlNGRmOWMtNzAwOC00MTBjLTg4ZTgtOGQ0MGYzZmM5YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpw7XCItl2p140rlx9nW5SAmUjg9aQ4jLMNa juuZYg1H/XOBum/A0TPG+ZgG3ZCP2vh7LuMT8CZIHJKwr8BmwqKyZtfEzNusHY8Z sD/jbGhQQR/iuf9G+sDhI+A0/0l58fqm95Ig6xH+ww0XnJEz4t5VXMGo7VmkV1cB GmITPJsC6MHs6HkIC5QpJpPQiEPG5+6deKETIe/MJ+zzovM7meH5iejadNlgDUvJ OLMS8rxhEQtxwAwqu5IJ/rqUh7ih10k1zrK6AiTAph5mTOMe2bwfqOQvDfqleadi lEX9yuNS6qIucBJ+yC398J7Bbj3gru7xBW9BLk3Trm+FMz+gHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzVc4B99KGw8BuS7UQF9mw2az5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjViNDU0NzQtZDlmMy0z MGQ3LWFmMTQtNzkyMGU5ZDY5YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALI+cY86qQEzOzFQQmU+J3KqkM7caxsTT3jbrl0MB+5+zBWHeR+t wTVFIvxyUyZnqleGY8BejLjLfRHw3j4M8jQtEQmKdWQfzwBoxwOIFAVU6pRcq/Yw 6oV+t9IZjGuILd6xsB3kTcu4jNlPyigrG775aL4qeZ8Nz8wmv60XMvoUvR3eYVQC OHulcQAZPlY2DvTuU5FZpchxZ7wQTynf1+5wTzHmFpuhgriT7TcVbBZpSZJgQAW1 1j11ZhlETn1JRFrXW6ipaoyFDWUTakmWdu7a9qale6MrV16tghXnqFOc+yIVSX6m QZUydRCl1yokpADV1VwBoXmcmfjCGaVSJ4g= -----END CERTIFICATE-----Generated at Sat Sep 26 22:37:05 2026 by rpki-client