$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa File: 4d494d5b-2611-3e3d-a138-a33e9251efc9.roa (raw, json) Hash identifier: LCxv22MoV//LLCSaMoF1bHzvzbILjUeCIRXIxjxr7GY= Subject key identifier: E7:86:3F:96:F5:44:77:4A:AB:D8:41:0B:A6:14:F6:D4:1A:12:1E:34 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F498702D03D9219A946F13600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 329510 IP address blocks: 2001:470:445::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:02:d0:3d:92:19:a9:46:f1:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b2b6215b-44bd-49cd-b0bc-d5bf8279a8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:74:14:1d:2d:9e:ca:99:ed:af:ea:8b:f5: d2:69:7b:5e:9f:4d:38:b6:a3:47:01:7e:75:52:b0: 46:3b:de:37:ff:cf:10:d2:40:32:a8:0b:fc:ec:18: 39:88:d7:83:a7:51:50:8f:22:23:21:a0:67:73:ba: f6:70:e7:83:fe:b7:9f:b4:78:f9:5c:66:69:e5:2b: 62:5d:f7:c9:aa:d7:58:e4:ca:33:f3:84:39:0b:5b: 64:01:21:11:ea:9f:60:65:26:ed:9f:8c:09:99:24: d2:a2:79:71:86:bf:22:7a:7b:94:65:16:d0:71:ac: 7b:7e:9e:c9:8d:9d:03:64:df:6c:46:e0:99:6c:54: cc:18:06:89:dc:6f:d6:21:91:0f:ee:53:e9:65:8e: 75:fd:a7:5e:ae:14:81:04:a1:fc:cc:d4:c7:42:37: 92:56:75:de:6e:a7:c9:f2:84:7f:c5:dc:0e:0f:a3: fb:a5:15:fd:31:92:be:8e:2a:37:3f:b5:e6:9c:b2: 6a:69:78:16:b1:29:b6:a6:87:47:11:6b:c6:70:ec: 77:18:4c:0a:f6:7c:d8:04:9e:84:c1:b0:73:d7:a7: 04:ff:2e:bf:81:d7:bc:a9:a4:8e:15:9b:83:b2:05: 17:27:8e:0f:85:dd:17:b6:2d:45:d2:73:90:7e:1a: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:3F:96:F5:44:77:4A:AB:D8:41:0B:A6:14:F6:D4:1A:12:1E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:445::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:a4:96:21:46:97:41:7c:62:cc:65:91:c3:dc:cb:32:37:ae: b0:57:5a:60:89:eb:aa:93:9e:d2:5d:e6:6b:c4:43:83:76:6e: 5e:64:82:4a:f0:4d:ab:ae:5f:e3:87:06:7a:79:92:bc:23:26: 77:15:b9:e4:e3:b8:05:2e:e0:5a:90:88:9a:06:40:60:58:e8: 03:70:e9:ce:23:b8:50:37:69:1f:a2:b2:f2:b1:33:c5:05:aa: 42:af:d9:3a:e4:08:c0:85:79:52:7d:8f:7c:01:05:93:9b:8a: bb:e3:ce:a8:10:24:f7:82:8b:f2:39:6d:9d:23:09:60:6b:cb: bb:2c:3e:f7:15:ba:c1:20:77:c8:eb:7b:8b:cb:ba:3e:b6:33: 2c:92:ae:8c:4c:04:19:35:32:2f:0b:6b:03:fc:b1:67:50:b6: 67:42:ff:3e:48:8b:42:64:dd:ce:0a:70:4e:65:98:e6:0a:bc: 04:4c:5d:7f:46:72:fd:1d:ba:41:57:ef:ee:89:a7:23:b6:43: be:85:06:d2:06:a6:f5:05:82:ff:b8:7f:a7:7e:b2:a5:99:12: e5:7a:25:ad:30:c4:45:ac:5d:e7:2b:93:b3:5e:2a:d2:4f:1c: f3:d3:66:05:a0:22:6d:19:90:aa:48:5f:78:fa:b4:28:f0:3c: ee:ba:57:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhwLQPZIZqUbxNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjJiNjIxNWItNDRiZC00OWNkLWIwYmMtZDViZjgyNzlhOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEN0FB0tnsqZ7a/qi/XSaXten004tqNHAX51 UrBGO943/88Q0kAyqAv87Bg5iNeDp1FQjyIjIaBnc7r2cOeD/reftHj5XGZp5Sti XffJqtdY5Moz84Q5C1tkASER6p9gZSbtn4wJmSTSonlxhr8ienuUZRbQcax7fp7J jZ0DZN9sRuCZbFTMGAaJ3G/WIZEP7lPpZY51/aderhSBBKH8zNTHQjeSVnXebqfJ 8oR/xdwOD6P7pRX9MZK+jio3P7XmnLJqaXgWsSm2podHEWvGcOx3GEwK9nzYBJ6E wbBz16cE/y6/gde8qaSOFZuDsgUXJ44Phd0Xti1F0nOQfhoIUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOeGP5b1RHdKq9hBC6YU9tQaEh40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGQ0OTRkNWItMjYxMS0z ZTNkLWExMzgtYTMzZTkyNTFlZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMCkliFGl0F8YsxlkcPcyzI3rrBXWmCJ66qTntJd5mvEQ4N2bl5k gkrwTauuX+OHBnp5krwjJncVueTjuAUu4FqQiJoGQGBY6ANw6c4juFA3aR+isvKx M8UFqkKv2TrkCMCFeVJ9j3wBBZObirvjzqgQJPeCi/I5bZ0jCWBry7ssPvcVusEg d8jre4vLuj62MyySroxMBBk1Mi8LawP8sWdQtmdC/z5Ii0Jk3c4KcE5lmOYKvARM XX9Gcv0dukFX7+6JpyO2Q76FBtIGpvUFgv+4f6d+sqWZEuV6Ja0wxEWsXecrk7Ne KtJPHPPTZgWgIm0ZkKpIX3j6tCjwPO66V/Y= -----END CERTIFICATE-----Generated at Sun Sep 27 03:19:11 2026 by rpki-client