$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa File: 4a870679-debe-348f-a33d-6e54916a83ca.roa (raw, json) Hash identifier: NU0WkX1AYBYSC4dkuop4mYpOlUflxztl1e7q4z2DYnU= Subject key identifier: B5:CC:85:49:0B:15:A6:7F:AE:FC:58:17:81:5A:1C:E6:0B:1F:3E:CC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F454298FE11B266F790E57A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 400587 IP address blocks: 2001:470:3ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:98:fe:11:b2:66:f7:90:e5:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=d7cba5a0-c46b-4b39-8b26-724ca9a14e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:2a:60:0c:df:de:70:6f:0d:4b:43:56:fb: 01:8c:92:c1:00:46:7a:09:7f:29:13:6d:e2:e0:e5: e5:bf:84:61:3a:b9:d3:1f:16:45:3d:7d:05:9e:58: 2c:42:03:57:a6:64:ee:41:60:90:1f:62:80:72:d2: 63:f9:0c:9a:34:a8:f1:49:c1:03:d5:83:76:9a:5c: 5e:04:73:58:47:d1:5d:f5:19:00:85:f2:36:ec:e8: 31:2c:33:6b:12:3e:a9:c5:c5:64:b5:0c:ae:77:ca: 39:fd:5d:ee:16:4e:9c:03:dc:82:86:0d:8f:27:94: 62:96:e8:3b:11:28:1b:52:be:90:22:49:a1:2d:64: bf:0b:f6:4d:9d:08:05:f3:f8:fe:62:7b:90:70:84: 9f:2b:83:16:35:f5:4d:da:ac:8d:21:f7:f1:41:7d: 88:82:8c:d6:d0:87:21:73:68:98:23:f7:53:9a:d8: 56:c6:b4:7e:23:a4:e3:a0:f2:53:df:62:cf:42:1d: 19:34:73:25:39:86:ee:59:f8:96:eb:b5:49:42:f3: ca:9f:04:4f:86:57:ce:98:e5:57:c1:5b:1f:3c:e4: d2:e8:20:7c:1e:d4:be:9e:81:1a:13:4a:71:fe:6a: a7:cd:26:9a:0e:39:14:96:85:86:3e:da:0f:f6:27: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CC:85:49:0B:15:A6:7F:AE:FC:58:17:81:5A:1C:E6:0B:1F:3E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e9:3c:07:a3:5f:46:e6:19:7c:c2:c4:01:9f:70:ee:e7:d3: 3e:ac:73:68:76:40:84:ff:fe:3b:54:9c:f2:2f:48:a5:49:86: df:ca:4b:54:44:ab:fd:98:23:56:45:8d:8a:b2:db:80:07:5d: c2:dc:5e:3c:00:dd:03:29:71:f2:18:ba:3e:1c:f0:ac:d4:87: ca:2a:40:50:72:89:db:70:9d:39:1e:9c:73:26:75:69:14:be: 37:49:d0:f5:18:00:d4:45:de:81:97:e6:f8:a3:ae:53:da:96: 05:50:d2:4a:ff:38:c2:7f:36:21:78:40:8f:19:de:45:f5:fb: f0:5c:04:f4:c4:94:83:19:ee:49:5e:4d:57:3d:9a:76:52:5d: 45:63:b1:64:4a:50:a6:5c:d0:cd:47:23:7a:6b:e7:7a:ae:28: ef:37:8b:3a:40:2f:a2:8d:c4:9f:5b:f3:1a:20:14:7e:19:b3: 8e:d5:98:1b:ff:c5:18:4a:12:22:06:68:cb:4a:18:ea:3c:d6: e0:15:89:3e:fa:28:91:6c:39:86:a8:a4:b3:e6:e5:75:ab:4a: 5a:91:cd:f9:fe:3c:76:77:59:7e:93:a0:17:78:94:74:81:c4: 94:15:93:5f:04:50:ae:e1:37:5c:b9:22:38:43:b8:6f:d0:ca: 67:8b:3c:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9FQpj+EbJm95DlegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZDdjYmE1YTAtYzQ2Yi00YjM5LThiMjYtNzI0Y2E5YTE0ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4qYAzf3nBvDUtDVvsBjJLBAEZ6CX8pE23i 4OXlv4RhOrnTHxZFPX0FnlgsQgNXpmTuQWCQH2KActJj+QyaNKjxScED1YN2mlxe BHNYR9Fd9RkAhfI27OgxLDNrEj6pxcVktQyud8o5/V3uFk6cA9yChg2PJ5Rilug7 ESgbUr6QIkmhLWS/C/ZNnQgF8/j+YnuQcISfK4MWNfVN2qyNIffxQX2IgozW0Ich c2iYI/dTmthWxrR+I6TjoPJT32LPQh0ZNHMlOYbuWfiW67VJQvPKnwRPhlfOmOVX wVsfPOTS6CB8HtS+noEaE0px/mqnzSaaDjkUloWGPtoP9ietDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXMhUkLFaZ/rvxYF4FaHOYLHz7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE4NzA2NzktZGViZS0z NDhmLWEzM2QtNmU1NDkxNmE4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTpPAejX0bmGXzCxAGfcO7n0z6sc2h2QIT//jtUnPIvSKVJht/K S1REq/2YI1ZFjYqy24AHXcLcXjwA3QMpcfIYuj4c8KzUh8oqQFByidtwnTkenHMm dWkUvjdJ0PUYANRF3oGX5vijrlPalgVQ0kr/OMJ/NiF4QI8Z3kX1+/BcBPTElIMZ 7kleTVc9mnZSXUVjsWRKUKZc0M1HI3pr53quKO83izpAL6KNxJ9b8xogFH4Zs47V mBv/xRhKEiIGaMtKGOo81uAViT76KJFsOYaopLPm5XWrSlqRzfn+PHZ3WX6ToBd4 lHSBxJQVk18EUK7hN1y5IjhDuG/QymeLPE0= -----END CERTIFICATE-----Generated at Tue Sep 29 02:53:24 2026 by rpki-client