$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45d39843-4e16-3785-b105-7fdfd3ea9827.roa File: 45d39843-4e16-3785-b105-7fdfd3ea9827.roa (raw, json) Hash identifier: WZYLJIFWSBG5VYv7fYHcWeu6MJKB3uEQEu90ioBCC7w= Subject key identifier: F4:B3:D9:74:88:3C:D5:71:84:44:2B:13:F9:B3:B6:8B:A4:44:F2:12 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F130234B2BBD75C0EEA132100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45d39843-4e16-3785-b105-7fdfd3ea9827.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 50607 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:34:b2:bb:d7:5c:0e:ea:13:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=23ea297c-2fe8-4f25-bcbf-a9d327ad2d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:c3:42:c8:e6:8c:2c:e7:b9:83:55:7c:b5: d4:2f:f7:d8:ec:79:8c:18:c0:da:35:f9:39:21:10: 7b:39:d4:53:04:8a:0a:3a:c7:a0:7f:81:6f:46:e6: b7:a0:51:78:73:27:b7:14:49:76:ef:9d:1f:f8:66: 80:a9:ae:14:58:b2:19:eb:5f:f7:a1:2b:1b:da:f1: 73:37:15:c3:91:13:45:74:b7:8a:2a:4b:3c:60:07: 3b:4d:45:6b:5f:eb:c9:d3:d4:d5:a6:da:a0:f2:62: 89:05:1f:7b:14:6f:c7:05:44:4c:7e:e5:29:fe:84: ad:03:5a:99:39:d4:a6:32:9a:2f:0c:b6:67:9e:e7: 83:a7:ef:2d:39:62:9b:39:47:e6:3f:da:71:dd:09: bb:9a:c0:db:9c:3f:2f:b3:25:d8:e6:80:45:48:8c: c2:e1:7a:09:09:a3:56:c1:64:63:5d:83:27:e5:4f: b6:93:c6:ec:d9:45:98:ea:6b:b5:15:c6:10:f7:22: 04:80:af:5a:f1:c8:0f:8d:5a:41:1e:25:78:07:87: c4:61:10:54:c0:17:5f:f7:6e:b8:7b:7a:9e:ab:7d: 47:ec:79:81:50:89:2a:a9:94:7e:26:dc:9b:17:b2: c4:1c:6d:68:49:c3:17:cb:e1:ef:79:a0:fa:3f:fd: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B3:D9:74:88:3C:D5:71:84:44:2B:13:F9:B3:B6:8B:A4:44:F2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45d39843-4e16-3785-b105-7fdfd3ea9827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:94:d7:c7:7b:9d:30:28:78:a6:42:bc:36:db:c1:f4:4b: 2d:7a:3e:40:63:13:5f:f4:ce:10:25:36:b2:0d:1a:09:e5:b2: d3:64:56:74:f5:cb:5e:f7:87:8b:00:71:c3:d2:8e:59:2f:41: 1a:0f:06:4e:f2:a8:45:e6:4c:9d:63:be:0b:ca:50:bc:72:20: 57:aa:b6:1d:69:eb:4d:da:b5:ea:0d:14:5f:6e:72:ec:cf:33: 81:eb:57:f2:3a:e8:da:1b:48:5a:34:af:e4:26:3a:85:30:fa: 8c:6e:a9:44:28:45:da:72:05:7b:44:be:53:90:f0:02:5d:70: 80:ca:e4:c1:e0:aa:14:8c:de:ab:20:51:27:c2:7d:79:4b:17: 88:37:a5:d7:36:5b:cd:18:ca:a5:89:9f:9c:63:39:e8:ab:5c: 5f:2b:59:c2:3b:1b:74:49:21:bf:12:00:79:d3:8f:90:28:88: 0c:38:c0:83:b7:ee:5a:ef:17:d7:89:fb:10:83:e5:6e:f5:17: cc:09:8a:b4:66:16:af:d0:3d:7b:25:af:51:71:1c:c1:b0:49: 06:d2:e1:79:8b:af:44:46:ba:db:be:10:19:78:85:c6:81:9d: 11:e0:c5:94:1e:e6:07:c9:61:3c:91:59:63:1a:12:b8:9a:02: d5:e0:4f:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAjSyu9dcDuoTIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MjNlYTI5N2MtMmZlOC00ZjI1LWJjYmYtYTlkMzI3YWQyZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsozDQsjmjCznuYNVfLXUL/fY7HmMGMDaNfk5 IRB7OdRTBIoKOsegf4FvRua3oFF4cye3FEl2750f+GaAqa4UWLIZ61/3oSsb2vFz NxXDkRNFdLeKKks8YAc7TUVrX+vJ09TVptqg8mKJBR97FG/HBURMfuUp/oStA1qZ OdSmMpovDLZnnueDp+8tOWKbOUfmP9px3Qm7msDbnD8vsyXY5oBFSIzC4XoJCaNW wWRjXYMn5U+2k8bs2UWY6mu1FcYQ9yIEgK9a8cgPjVpBHiV4B4fEYRBUwBdf9264 e3qeq31H7HmBUIkqqZR+JtybF7LEHG1oScMXy+HveaD6P/17FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSz2XSIPNVxhEQrE/mztoukRPISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDVkMzk4NDMtNGUxNi0z Nzg1LWIxMDUtN2ZkZmQzZWE5ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5UlNfHe50wKHimQrw228H0Sy16PkBjE1/0zhAlNrINGgnlstNk VnT1y173h4sAccPSjlkvQRoPBk7yqEXmTJ1jvgvKULxyIFeqth1p603ateoNFF9u cuzPM4HrV/I66NobSFo0r+QmOoUw+oxuqUQoRdpyBXtEvlOQ8AJdcIDK5MHgqhSM 3qsgUSfCfXlLF4g3pdc2W80YyqWJn5xjOeirXF8rWcI7G3RJIb8SAHnTj5AoiAw4 wIO37lrvF9eJ+xCD5W71F8wJirRmFq/QPXslr1FxHMGwSQbS4XmLr0RGutu+EBl4 hcaBnRHgxZQe5gfJYTyRWWMaEriaAtXgT6A= -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:23 2026 by rpki-client