$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa File: 642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa (raw, json) Hash identifier: NRl1rYwT2WlMZP3H+vpAM+BH5igbj8a5BIBMw5LgjnY= Subject key identifier: BE:4B:07:B5:DE:2F:C6:14:4A:6F:77:43:78:35:D3:13:91:64:1E:B4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F130241604F6B7E6A2A954D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 201714 IP address blocks: 2001:470:425::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:41:60:4f:6b:7e:6a:2a:95:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=d09d9de3-8587-418c-b1a3-90fb020b207c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:ad:9a:21:e6:b3:47:e1:56:a9:2b:78:88: cf:eb:2a:e4:d8:cd:b0:ce:bd:6c:ed:b6:0e:1e:d9: 3b:06:de:ab:3b:21:be:e1:ef:df:9f:9a:0b:37:fd: 81:7d:f2:71:61:7e:91:6a:23:b5:3b:40:69:aa:fe: 30:ee:70:6e:80:7f:09:b4:5a:b7:38:30:16:b2:df: 06:78:48:68:27:65:d9:f8:04:34:73:c1:d8:16:80: ed:04:7d:7a:66:6d:67:d0:dc:0e:62:20:1f:95:5c: c8:38:8e:60:fb:cc:53:33:2b:da:b5:8e:cb:82:eb: 14:67:8d:c2:ce:1d:01:db:33:28:fa:84:ed:86:33: 5e:c6:b3:43:51:8d:44:7f:9a:17:1b:9c:66:12:d6: 28:df:11:4a:52:51:76:e0:88:80:e3:3d:31:2d:fd: 20:0e:c5:92:85:3b:e3:3b:57:67:89:1a:da:da:31: 8f:62:16:12:81:8c:a0:75:dc:f3:42:9d:df:cb:e9: 0a:f8:f1:63:65:1c:46:eb:8d:a7:1c:da:6e:1e:71: 49:e6:7f:1f:1d:83:0c:fd:6c:c2:6e:cc:6f:9a:6d: 19:62:ad:da:c2:02:13:dd:9b:c8:f6:2a:08:63:63: 12:f4:8c:b6:fc:bf:f3:30:f6:dd:7c:a3:5b:05:e1: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:07:B5:DE:2F:C6:14:4A:6F:77:43:78:35:D3:13:91:64:1E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/642b34f9-a69c-32bf-9e48-b6cd635e24f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:425::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:da:60:3f:a4:98:bf:5c:a4:bf:c4:f5:27:7a:8e:89:1f:f0: 74:31:c2:4d:e8:b4:71:4c:6d:0d:e1:a9:4c:48:ed:da:d5:0f: 34:d8:ae:c9:6e:88:f2:29:93:28:e8:bc:ce:c8:41:62:75:95: eb:5e:00:89:05:c7:fc:a1:2e:86:29:6f:c3:a5:98:c5:91:1f: 94:b9:95:de:69:4c:a9:d5:b2:c5:b9:f4:10:14:d9:a3:68:ec: c1:cd:3c:56:42:b8:6b:1b:fd:90:e3:40:c7:29:a6:8c:cd:24: 03:21:9f:93:61:16:ad:f4:04:c6:fa:a1:8f:a8:45:c7:c0:17: 31:e0:f3:7e:bc:4b:43:ed:10:f6:5b:c8:1a:49:a2:f7:77:51: ed:73:98:db:91:f5:6b:8e:22:57:2a:ba:12:f5:cb:6c:22:c2: 96:d7:0c:ec:7e:d7:10:de:5f:e4:8b:b1:27:fa:7f:d8:53:28: 3d:37:3e:a6:da:6d:89:da:b9:42:ce:e5:50:90:11:ba:53:20: ca:2a:8f:93:c6:77:d7:ba:9b:b9:f3:08:f5:34:2d:8b:0d:7f: b4:7e:86:e5:7b:e9:04:0d:34:41:c5:b5:dd:f7:8e:35:cc:68: 32:7a:06:62:6d:73:ab:3b:7b:01:c7:ce:d0:4d:00:61:2c:5c: 9b:40:bc:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAkFgT2t+aiqVTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDA5ZDlkZTMtODU4Ny00MThjLWIxYTMtOTBmYjAyMGIyMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr6tmiHms0fhVqkreIjP6yrk2M2wzr1s7bYO Htk7Bt6rOyG+4e/fn5oLN/2BffJxYX6RaiO1O0Bpqv4w7nBugH8JtFq3ODAWst8G eEhoJ2XZ+AQ0c8HYFoDtBH16Zm1n0NwOYiAflVzIOI5g+8xTMyvatY7LgusUZ43C zh0B2zMo+oTthjNexrNDUY1Ef5oXG5xmEtYo3xFKUlF24IiA4z0xLf0gDsWShTvj O1dniRra2jGPYhYSgYygddzzQp3fy+kK+PFjZRxG642nHNpuHnFJ5n8fHYMM/WzC bsxvmm0ZYq3awgIT3ZvI9ioIY2MS9Iy2/L/zMPbdfKNbBeEhrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL5LB7XeL8YUSm93Q3g10xORZB60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQyYjM0ZjktYTY5Yy0z MmJmLTllNDgtYjZjZDYzNWUyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKTaYD+kmL9cpL/E9Sd6jokf8HQxwk3otHFMbQ3hqUxI7drVDzTY rsluiPIpkyjovM7IQWJ1leteAIkFx/yhLoYpb8OlmMWRH5S5ld5pTKnVssW59BAU 2aNo7MHNPFZCuGsb/ZDjQMcppozNJAMhn5NhFq30BMb6oY+oRcfAFzHg8368S0Pt EPZbyBpJovd3Ue1zmNuR9WuOIlcquhL1y2wiwpbXDOx+1xDeX+SLsSf6f9hTKD03 PqbabYnauULO5VCQEbpTIMoqj5PGd9e6m7nzCPU0LYsNf7R+huV76QQNNEHFtd33 jjXMaDJ6BmJtc6s7ewHHztBNAGEsXJtAvMg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:49:31 2026 by rpki-client