$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4327bb39-172a-3170-8255-4926bb68e0d5.roa File: 4327bb39-172a-3170-8255-4926bb68e0d5.roa (raw, json) Hash identifier: GY3zCtD8aNJG98YwKYRfDM1ZKgrHNR33imwfRv9YqkM= Subject key identifier: 92:56:36:21:0E:52:A9:70:2E:D8:54:E2:44:60:B2:25:09:7F:BE:F4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F3CE2BA742E43087269413080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4327bb39-172a-3170-8255-4926bb68e0d5.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 19193 IP address blocks: 2001:470:4ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:ba:74:2e:43:08:72:69:41:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=65f46904-0be2-4c36-8d4c-9ca5842f4b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:06:88:f6:41:d8:15:da:e8:98:7a:a2:7a: 56:e8:7c:d1:30:78:2b:14:a7:a3:40:22:de:24:20: 38:83:26:e1:08:b5:9d:9a:8c:b1:35:63:06:51:0a: 0b:32:c3:8e:97:be:b7:7a:08:0b:16:d7:e6:d2:93: 6f:20:15:a6:00:f1:6d:1c:59:14:55:b5:d0:13:bf: ac:90:97:90:da:fc:f1:b2:e4:2e:be:2a:c5:cd:98: 4d:d4:75:31:b6:94:d7:7f:a4:ed:c4:d2:46:89:18: b7:74:ae:a9:f5:7f:50:e5:2f:03:4d:b5:53:8a:a3: 8f:be:14:6e:48:c1:d3:d4:aa:5c:cd:80:22:3c:a5: d2:0a:09:dc:87:f8:58:e9:55:2e:56:8b:5f:57:81: d6:23:b4:43:a5:8b:94:5b:56:2e:25:1a:8c:4c:58: 97:51:92:77:8f:21:01:17:29:da:6b:09:17:de:b4: 2c:18:95:af:a3:2b:04:57:a4:a1:5d:bd:c6:72:f9: a9:2c:bf:53:36:e3:99:51:a0:51:fe:83:24:72:c7: b4:da:26:ef:be:38:13:38:7a:76:91:49:d2:9e:71: c7:40:a0:7e:e2:5e:21:e0:00:71:85:7f:18:1f:6e: de:70:dd:74:2b:d6:db:21:82:5b:72:4e:54:0b:c5: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:36:21:0E:52:A9:70:2E:D8:54:E2:44:60:B2:25:09:7F:BE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4327bb39-172a-3170-8255-4926bb68e0d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:31:fe:12:08:4c:0d:bf:87:7d:06:0d:73:60:76:76:1a:44: f4:23:90:83:2e:a6:6c:ac:ad:7e:2b:8a:07:92:de:fa:e4:da: 67:07:93:2c:cf:ff:07:76:5c:70:7e:70:8e:ef:ff:3a:c3:58: 14:5d:6e:f0:20:2b:40:20:f9:a6:84:4a:57:13:be:49:93:55: 7d:01:ac:dc:4b:6b:b1:e0:d5:5f:0b:70:f5:b3:f9:2c:2c:65: e7:f9:37:de:b4:e0:7f:32:1b:7b:a9:f8:ee:39:79:fc:f2:f8: e0:0a:af:3c:65:a1:db:8a:d8:a6:71:63:90:3a:77:96:aa:85: 51:b0:be:b3:df:90:c3:22:10:b6:88:a6:24:fd:9b:8b:89:26: 0a:49:1f:0d:f3:9d:63:4b:2a:6f:da:c8:39:a7:5e:6e:a7:3b: 89:07:31:06:e3:c9:cb:dd:36:4d:78:b0:4f:16:e9:83:af:4c: cc:5b:1a:3f:b4:79:92:81:76:a8:53:46:ce:1c:89:58:23:b1: 51:f7:6d:64:98:3d:33:4c:dc:b3:bd:f5:84:68:fb:2c:4c:5b: 72:ee:5b:b6:0f:ba:a1:ef:f4:14:53:1c:62:cf:a9:c8:93:0b: a3:30:d3:c8:ce:f3:e8:ce:59:62:48:0f:5c:26:20:25:69:2d: 2e:f4:ad:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884rp0LkMIcmlBMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NjVmNDY5MDQtMGJlMi00YzM2LThkNGMtOWNhNTg0MmY0YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJkGiPZB2BXa6Jh6onpW6HzRMHgrFKejQCLe JCA4gybhCLWdmoyxNWMGUQoLMsOOl763eggLFtfm0pNvIBWmAPFtHFkUVbXQE7+s kJeQ2vzxsuQuvirFzZhN1HUxtpTXf6TtxNJGiRi3dK6p9X9Q5S8DTbVTiqOPvhRu SMHT1KpczYAiPKXSCgnch/hY6VUuVotfV4HWI7RDpYuUW1YuJRqMTFiXUZJ3jyEB FynaawkX3rQsGJWvoysEV6ShXb3GcvmpLL9TNuOZUaBR/oMkcse02ibvvjgTOHp2 kUnSnnHHQKB+4l4h4ABxhX8YH27ecN10K9bbIYJbck5UC8W7BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJJWNiEOUqlwLthU4kRgsiUJf770MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDMyN2JiMzktMTcyYS0z MTcwLTgyNTUtNDkyNmJiNjhlMGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwx/hIITA2/h30GDXNgdnYaRPQjkIMupmysrX4rigeS3vrk2mcH kyzP/wd2XHB+cI7v/zrDWBRdbvAgK0Ag+aaESlcTvkmTVX0BrNxLa7Hg1V8LcPWz +SwsZef5N9604H8yG3up+O45efzy+OAKrzxloduK2KZxY5A6d5aqhVGwvrPfkMMi ELaIpiT9m4uJJgpJHw3znWNLKm/ayDmnXm6nO4kHMQbjycvdNk14sE8W6YOvTMxb Gj+0eZKBdqhTRs4ciVgjsVH3bWSYPTNM3LO99YRo+yxMW3LuW7YPuqHv9BRTHGLP qciTC6Mw08jO8+jOWWJID1wmICVpLS70rTs= -----END CERTIFICATE-----Generated at Sat Sep 26 15:36:30 2026 by rpki-client