$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5202a753-e0ad-353b-9fa4-f07e56b580af.roa File: 5202a753-e0ad-353b-9fa4-f07e56b580af.roa (raw, json) Hash identifier: AJ4rClF30/GyJLhy1PdIfZ7QNk+6rHm9/lcH4jSu8nQ= Subject key identifier: CF:33:B1:9A:E7:8B:0E:A2:DC:AE:63:72:20:A3:D2:6B:DE:FF:09:85 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F498800219BF05BDE0D286300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5202a753-e0ad-353b-9fa4-f07e56b580af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400391 IP address blocks: 2001:470:520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:00:21:9b:f0:5b:de:0d:28:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a97a97c4-3104-43c3-8441-cbd5fe4b0a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:43:53:68:19:ea:e5:32:58:7b:25:50:56: a3:76:00:48:7b:ec:63:93:d1:72:38:22:6e:00:89: 10:ca:6b:83:39:4a:06:49:1e:1f:e1:66:85:97:9a: 2a:56:37:e3:12:ea:ca:0d:0a:91:a8:5f:70:c3:ce: 41:fd:9e:b2:db:17:91:d1:3a:13:de:68:55:23:1f: ef:84:67:40:f2:0e:aa:14:a0:57:28:ba:ff:20:4a: dd:7f:8b:1b:b3:79:83:39:c9:26:88:ca:d1:ce:e9: 4a:a9:f1:0b:97:cd:79:77:fe:64:21:6c:2d:f5:b3: 28:5e:86:4c:8d:9a:11:2e:d7:6b:bd:80:14:e5:e1: 96:5d:0d:91:c7:63:f0:ae:da:51:48:db:87:c6:92: 8a:cc:25:34:d3:49:82:5a:bb:70:b7:74:f7:f3:40: 2e:42:f1:db:5c:49:fc:12:9c:11:e4:8b:88:63:59: e5:15:e0:4a:13:0e:51:c4:05:ec:f8:14:cd:96:1a: 8b:59:87:4e:3c:53:f2:0a:0e:cf:fa:75:82:15:78: 46:c2:12:78:ae:94:53:fc:80:ce:18:7f:6e:2b:53: 95:a3:3c:94:9c:03:49:fb:11:fe:3d:7a:ab:ab:ca: a4:51:57:e6:56:19:cd:e7:c6:10:72:9f:9b:a0:d2: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:B1:9A:E7:8B:0E:A2:DC:AE:63:72:20:A3:D2:6B:DE:FF:09:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5202a753-e0ad-353b-9fa4-f07e56b580af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:520::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cc:dd:fd:d8:81:bb:cd:31:29:26:5b:5e:5c:68:dc:72:6c: 73:5d:43:04:1f:3d:08:8e:52:b7:10:fe:fb:fc:e9:31:d7:df: af:0c:f6:b4:f4:d0:9a:82:25:a1:ca:60:38:c1:5c:72:c6:e5: 9d:8e:8e:02:c0:e0:96:af:11:e3:5c:c6:3d:0f:4d:88:4d:fd: b0:54:eb:80:13:08:96:92:20:74:99:71:c4:90:96:06:e5:09: aa:63:c9:6c:28:b8:26:f4:f9:44:8a:fc:3e:28:3a:51:9d:b0: 21:90:bb:9a:9b:d7:45:f7:81:c7:79:8c:04:3e:e7:ec:97:83: 83:dc:8c:76:3d:0b:5b:05:fb:d9:c5:1f:d3:85:92:ec:05:6b: dc:93:0a:c1:a5:16:98:76:b2:5b:1d:4f:47:35:9c:cb:21:ba: 2a:ad:1b:14:58:10:4b:4d:6d:b1:94:65:7d:39:71:5a:8c:0c: ef:48:28:d4:76:76:f0:33:34:cc:4b:99:f8:20:19:84:60:c9: 08:6b:3e:46:9c:59:17:2d:23:31:66:72:97:92:d4:39:83:2c: c7:2a:e1:c6:84:76:b8:66:ab:d0:d3:d1:ca:74:48:96:f1:2c: 52:71:82:80:34:ae:20:49:7c:2c:b1:f1:f2:1e:98:cb:29:11: 90:f5:d6:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiAAhm/Bb3g0oYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk3YTk3YzQtMzEwNC00M2MzLTg0NDEtY2JkNWZlNGIwYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdDU2gZ6uUyWHslUFajdgBIe+xjk9FyOCJu AIkQymuDOUoGSR4f4WaFl5oqVjfjEurKDQqRqF9ww85B/Z6y2xeR0ToT3mhVIx/v hGdA8g6qFKBXKLr/IErdf4sbs3mDOckmiMrRzulKqfELl815d/5kIWwt9bMoXoZM jZoRLtdrvYAU5eGWXQ2Rx2PwrtpRSNuHxpKKzCU000mCWrtwt3T380AuQvHbXEn8 EpwR5IuIY1nlFeBKEw5RxAXs+BTNlhqLWYdOPFPyCg7P+nWCFXhGwhJ4rpRT/IDO GH9uK1OVozyUnANJ+xH+PXqrq8qkUVfmVhnN58YQcp+boNKZQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8zsZrniw6i3K5jciCj0mve/wmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIwMmE3NTMtZTBhZC0z NTNiLTlmYTQtZjA3ZTU2YjU4MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJPM3f3YgbvNMSkmW15caNxybHNdQwQfPQiOUrcQ/vv86THX368M 9rT00JqCJaHKYDjBXHLG5Z2OjgLA4JavEeNcxj0PTYhN/bBU64ATCJaSIHSZccSQ lgblCapjyWwouCb0+USK/D4oOlGdsCGQu5qb10X3gcd5jAQ+5+yXg4PcjHY9C1sF +9nFH9OFkuwFa9yTCsGlFph2slsdT0c1nMshuiqtGxRYEEtNbbGUZX05cVqMDO9I KNR2dvAzNMxLmfggGYRgyQhrPkacWRctIzFmcpeS1DmDLMcq4caEdrhmq9DT0cp0 SJbxLFJxgoA0riBJfCyx8fIemMspEZD11jw= -----END CERTIFICATE-----Generated at Mon Sep 28 06:07:41 2026 by rpki-client