$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa File: 3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa (raw, json) Hash identifier: QZegtmroxVt+o43J5lq2rJVr2kUt+PIfmQPWSrdIn+U= Subject key identifier: 55:E3:8D:F7:4C:DD:B8:7E:00:71:33:9A:C4:49:1A:9C:AA:01:02:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC92251334261EA720261AE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 32578 IP address blocks: 2001:470:23e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:25:13:34:26:1e:a7:20:26:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=82a06cdd-99d0-4ffe-8ace-12ec9a728e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:2a:44:a9:4a:40:79:92:d9:69:47:2a:12: 18:28:b9:0c:41:78:3d:0d:29:33:60:2b:46:96:27: b5:d2:19:95:bc:10:19:16:b0:88:86:82:1f:a8:7e: bd:b9:43:c2:6c:a2:e2:f9:15:64:44:56:2a:23:10: f3:b8:db:06:16:79:ff:ae:8c:89:42:7c:73:f9:6b: 75:37:89:ac:d6:19:fe:66:13:06:3d:d0:70:ba:af: 4c:38:c3:7e:bb:1b:ee:35:fb:bb:f2:3e:69:9c:5a: b9:9a:27:a5:66:fe:c3:7d:cd:6c:34:df:25:64:6e: 1b:9f:2e:c6:03:c3:eb:48:9a:1c:3f:c0:5c:69:1e: a9:54:20:26:0a:f5:f4:06:db:10:45:c5:46:65:39: 4e:3c:f2:d4:87:f1:2c:02:13:17:47:af:1c:b4:23: fd:90:fe:6c:4b:89:eb:76:71:72:bd:e9:55:72:05: 27:0b:6c:ad:4d:c6:4f:a7:d5:53:d5:dd:33:3d:57: ab:a4:2e:1e:3a:73:68:f7:0f:4f:4a:76:f3:58:0d: a5:bc:89:34:5a:38:5a:30:a2:97:a0:4d:5b:c0:14: ee:7e:8a:b2:f4:27:77:d7:84:ea:35:0d:eb:eb:a6: 4c:f2:9f:33:74:6f:da:03:f1:7a:31:53:7b:15:3f: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:8D:F7:4C:DD:B8:7E:00:71:33:9A:C4:49:1A:9C:AA:01:02:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9e:cf:3c:27:57:ff:fe:e7:5b:68:81:7a:82:4f:45:16:bf: b2:06:75:fe:3d:64:ae:67:fe:90:87:db:ad:be:e0:ad:19:34: 74:48:18:21:b2:44:53:33:16:8f:66:21:81:fd:4f:d3:68:4e: 9f:2e:b2:a0:24:1a:b7:54:91:38:cf:0d:d1:a1:eb:0f:19:11: 98:7c:4f:06:21:b7:57:23:fc:fe:62:80:ef:22:64:b1:3a:0a: f8:54:de:69:c3:52:75:e3:d1:14:e1:af:d1:97:9f:a1:9d:de: 26:25:b4:b2:f5:eb:cd:f2:98:48:e4:c8:9b:26:25:3c:35:93: a4:f8:31:9e:98:af:d4:5d:eb:92:1d:f7:18:99:af:2b:f8:35: ea:56:71:98:87:ad:7d:71:ba:9a:22:81:a8:a3:7f:28:df:f1: 69:03:85:40:92:21:cb:2f:13:c2:4c:63:ee:20:0c:e6:aa:a5: ef:25:82:43:1f:9f:f6:0f:bd:51:68:c3:28:ae:a0:a3:8f:3d: e9:11:83:f5:ec:c5:d1:52:55:bc:14:6f:d9:da:c2:00:33:98: 98:5a:8c:47:06:30:39:49:53:64:7a:13:63:ba:65:12:31:17: 60:1f:36:63:71:dc:c1:24:f3:47:3b:c2:6a:c0:b6:63:1b:84: 45:a4:68:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiUTNCYepyAmGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ODJhMDZjZGQtOTlkMC00ZmZlLThhY2UtMTJlYzlhNzI4ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDYqRKlKQHmS2WlHKhIYKLkMQXg9DSkzYCtG lie10hmVvBAZFrCIhoIfqH69uUPCbKLi+RVkRFYqIxDzuNsGFnn/royJQnxz+Wt1 N4ms1hn+ZhMGPdBwuq9MOMN+uxvuNfu78j5pnFq5mielZv7Dfc1sNN8lZG4bny7G A8PrSJocP8BcaR6pVCAmCvX0BtsQRcVGZTlOPPLUh/EsAhMXR68ctCP9kP5sS4nr dnFyvelVcgUnC2ytTcZPp9VT1d0zPVerpC4eOnNo9w9PSnbzWA2lvIk0WjhaMKKX oE1bwBTufoqy9Cd314TqNQ3r66ZM8p8zdG/aA/F6MVN7FT/1KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFXjjfdM3bh+AHEzmsRJGpyqAQKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2Q5ZTAzNjUtMTFkOC0z ZDg3LTlmZTEtZTc2ZTIxZmFjOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6ezzwnV//+51togXqCT0UWv7IGdf49ZK5n/pCH262+4K0ZNHRI GCGyRFMzFo9mIYH9T9NoTp8usqAkGrdUkTjPDdGh6w8ZEZh8TwYht1cj/P5igO8i ZLE6CvhU3mnDUnXj0RThr9GXn6Gd3iYltLL1683ymEjkyJsmJTw1k6T4MZ6Yr9Rd 65Id9xiZryv4NepWcZiHrX1xupoigaijfyjf8WkDhUCSIcsvE8JMY+4gDOaqpe8l gkMfn/YPvVFowyiuoKOPPekRg/XsxdFSVbwUb9nawgAzmJhajEcGMDlJU2R6E2O6 ZRIxF2AfNmNx3MEk80c7wmrAtmMbhEWkaMg= -----END CERTIFICATE-----Generated at Wed Sep 23 05:19:10 2026 by rpki-client