$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa File: 2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa (raw, json) Hash identifier: 1AtQo6Q45uEbupIkFlfvxV0mi7N6vZ8guUMWS+yhvU4= Subject key identifier: 7F:1F:F5:AE:1D:C6:31:A5:7B:8D:18:CB:D4:96:2A:28:CB:94:13:DE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F130245D70DE7E6AD851D3200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 15577 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:45:d7:0d:e7:e6:ad:85:1d:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=8e2ae777-a98c-49d1-ab77-8ff1d9d6f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:e1:a9:ca:13:41:0e:5e:30:ee:b4:ee:4d: e3:48:2c:09:a0:52:2a:7e:69:c1:51:7b:df:db:1c: f0:41:63:b7:76:5a:a5:47:92:16:eb:9a:1c:96:e0: 8c:e6:40:49:95:94:9e:7b:f2:fc:bc:5a:0e:12:20: af:48:af:e1:bb:02:5d:ba:36:da:11:55:05:ab:a5: bf:db:4a:2c:82:65:04:29:94:7e:08:61:9e:28:2e: 5e:4f:59:d6:3b:57:6e:9a:d7:7e:bd:68:b8:e3:ec: 31:3c:c2:a3:54:47:5b:3f:f6:26:1b:1b:c9:21:68: b8:ce:1b:a2:c3:45:22:ce:4e:ff:45:4e:a9:7b:22: 4c:d8:dc:aa:4f:64:c8:70:76:fb:cb:db:4c:9b:6b: b3:df:79:01:f1:20:93:76:04:6b:f2:1f:57:9e:62: 29:14:c2:e1:55:c6:62:86:91:43:f5:8f:35:c4:4f: 19:b2:80:37:b4:a7:85:68:3e:57:87:08:62:97:9a: 06:78:e5:d5:b3:56:ab:dc:23:1b:cd:c4:3e:e6:73: 15:82:f8:a2:8f:b3:c0:21:06:19:45:9c:fe:7e:9f: e2:d6:35:c8:a3:ee:5d:af:e1:ea:96:e5:ba:25:2e: 2e:2b:63:09:7f:97:b3:e4:8e:1f:ce:f0:3a:9a:89: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1F:F5:AE:1D:C6:31:A5:7B:8D:18:CB:D4:96:2A:28:CB:94:13:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:79:09:8b:1d:0c:61:77:58:ee:a7:77:e6:02:14:da:1d:45: 63:23:f7:3b:02:27:25:70:6e:92:6a:ba:d2:23:68:0d:9b:eb: 2f:20:02:8b:4c:97:f7:53:26:80:9a:a0:0c:c5:4a:09:82:5a: cb:2d:59:fc:63:12:80:17:28:c3:47:be:0b:fd:43:ef:ec:f9: 38:33:de:95:ca:16:f0:48:4c:6f:1a:23:29:80:bc:44:2c:10: e0:bf:d4:9c:18:0d:2d:00:c9:b7:3c:b3:6c:2d:0a:30:b9:35: 63:23:c7:df:19:10:2c:7f:48:64:ee:ff:ec:ac:68:cd:2d:60: 2b:d2:b6:e7:6c:20:84:ee:a3:30:82:e5:bf:5c:a0:07:66:77: bf:e3:db:1e:d5:73:52:23:fb:cf:53:20:fb:9c:11:f4:3b:fd: ea:48:48:18:69:52:62:38:cc:f7:30:47:d6:c5:8f:79:5c:a6: 90:17:c9:15:55:e4:0c:3b:14:c1:55:ef:ec:53:18:85:70:89: fa:82:47:51:e4:a0:75:c2:9a:dc:c4:cf:9d:29:c9:39:1e:01: c9:4d:17:15:00:7c:02:c2:b6:7c:c1:f1:09:25:ac:6a:35:fa: 2f:52:20:43:71:a2:67:da:32:6f:66:93:1d:e8:63:94:7e:01: 9c:7b:fc:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAkXXDefmrYUdMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk OGUyYWU3NzctYTk4Yy00OWQxLWFiNzctOGZmMWQ5ZDZmOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/LhqcoTQQ5eMO607k3jSCwJoFIqfmnBUXvf 2xzwQWO3dlqlR5IW65ocluCM5kBJlZSee/L8vFoOEiCvSK/huwJdujbaEVUFq6W/ 20osgmUEKZR+CGGeKC5eT1nWO1dumtd+vWi44+wxPMKjVEdbP/YmGxvJIWi4zhui w0Uizk7/RU6peyJM2NyqT2TIcHb7y9tMm2uz33kB8SCTdgRr8h9XnmIpFMLhVcZi hpFD9Y81xE8ZsoA3tKeFaD5Xhwhil5oGeOXVs1ar3CMbzcQ+5nMVgviij7PAIQYZ RZz+fp/i1jXIo+5dr+HqluW6JS4uK2MJf5ez5I4fzvA6momGLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8f9a4dxjGle40Yy9SWKijLlBPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmY4OWQ4ZDUtZDZlOC0z MmNlLTgxZjgtMDk0MjM4YjQxMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKx5CYsdDGF3WO6nd+YCFNodRWMj9zsCJyVwbpJqutIjaA2b6y8g AotMl/dTJoCaoAzFSgmCWsstWfxjEoAXKMNHvgv9Q+/s+Tgz3pXKFvBITG8aIymA vEQsEOC/1JwYDS0Aybc8s2wtCjC5NWMjx98ZECx/SGTu/+ysaM0tYCvStudsIITu ozCC5b9coAdmd7/j2x7Vc1Ij+89TIPucEfQ7/epISBhpUmI4zPcwR9bFj3lcppAX yRVV5Aw7FMFV7+xTGIVwifqCR1HkoHXCmtzEz50pyTkeAclNFxUAfALCtnzB8Qkl rGo1+i9SIENxomfaMm9mkx3oY5R+AZx7/PE= -----END CERTIFICATE-----Generated at Sun Sep 27 03:16:53 2026 by rpki-client