$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa File: 65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa (raw, json) Hash identifier: x5ttgcbCE+t8J31sCQLSMAkOFkOyDEAW4pI9ATructc= Subject key identifier: B1:35:C8:61:03:B4:36:CD:9F:BE:B0:CB:21:DC:01:D2:93:C0:71:6A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F130246B80629C64FB6403180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 30886 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:46:b8:06:29:c6:4f:b6:40:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=5f504bf7-c3af-4914-a402-de3292462e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:68:c0:24:f2:99:fa:3d:5f:9e:20:db:b8: 34:21:20:1d:3c:8f:8a:8c:4e:9d:48:a6:20:5a:8a: 9e:15:59:64:1a:b8:c1:2a:e7:6c:24:83:20:f4:18: 84:ac:c0:8c:dc:62:9d:62:f0:ba:28:98:e9:cc:ab: 13:2e:82:20:85:a0:65:58:e8:1c:d9:dd:7b:61:df: 71:f1:c3:ce:59:46:6e:b8:e1:29:1a:6b:e8:23:77: 75:16:e0:e8:f0:1e:b8:bc:4c:1f:2a:6b:11:fb:2b: a7:ce:10:3d:7f:c0:92:cd:e0:99:bc:ba:20:8c:dd: f8:8a:7d:68:35:a5:0b:74:79:f2:b3:d0:2a:1d:a7: 1e:57:d1:80:17:9d:a7:80:06:77:20:0c:52:11:75: 3d:49:26:74:3a:f1:63:e0:db:80:83:75:00:4e:90: 98:d4:e2:eb:11:c7:08:28:e3:84:a4:7a:87:c6:37: 10:44:ea:fa:15:f1:f9:fe:f5:d2:a9:2d:0c:d1:c1: 4a:03:f7:3e:03:b1:60:e7:e4:9e:48:75:2c:a5:e2: d9:9a:13:a5:da:4e:15:32:e9:26:94:aa:6a:2b:b9: b0:da:e5:7a:94:ef:40:c4:fb:51:bd:ef:05:ce:ea: a4:01:fb:92:07:98:ce:13:32:3d:5b:57:89:4a:ee: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:35:C8:61:03:B4:36:CD:9F:BE:B0:CB:21:DC:01:D2:93:C0:71:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b6:68:4c:b4:fe:f9:4b:03:5f:65:ef:8a:27:97:b8:46:9c: 8a:e5:70:fe:3d:2e:2c:7b:f6:50:a3:c5:31:91:73:ec:1e:e7: 90:cd:f6:c4:5b:6b:0e:57:b3:4a:c6:0a:6c:99:a8:82:a6:6b: b0:d5:ec:e9:40:f8:d4:98:53:5d:e7:f0:6c:bd:cc:fd:6d:12: 21:7c:23:2c:48:ec:5f:e4:6c:fe:57:68:f0:29:da:6a:3d:2a: 56:7d:6c:47:e2:e5:a4:ac:45:ce:9a:b5:52:2f:09:a4:7b:48: c4:11:de:dd:89:1b:c6:d7:f5:28:98:a4:f9:9c:89:b9:4b:ee: 01:3d:7f:3f:fd:2d:c0:24:10:81:95:90:da:97:8f:80:f8:93: db:e2:7c:6f:5e:84:3a:92:ed:80:4d:ae:e8:35:f1:85:c9:ee: 0f:91:c2:5e:9d:38:27:f4:c3:6b:bc:60:55:10:35:a1:08:b5: 99:9a:da:73:d7:f0:2b:a1:b5:b5:2c:76:5c:ac:fa:f5:8e:25: 63:f9:ed:46:cd:b5:5f:e0:ac:80:6e:5a:19:6f:fa:15:a5:a1: 54:b1:52:ea:de:b3:65:21:63:49:72:15:38:b5:e9:8d:a7:34: e7:ba:0a:9c:0e:2f:65:99:d1:85:1e:6c:cb:f1:12:60:21:bd: 7a:72:1b:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAka4BinGT7ZAMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NWY1MDRiZjctYzNhZi00OTE0LWE0MDItZGUzMjkyNDYyZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYxowCTymfo9X54g27g0ISAdPI+KjE6dSKYg WoqeFVlkGrjBKudsJIMg9BiErMCM3GKdYvC6KJjpzKsTLoIghaBlWOgc2d17Yd9x 8cPOWUZuuOEpGmvoI3d1FuDo8B64vEwfKmsR+yunzhA9f8CSzeCZvLogjN34in1o NaULdHnys9AqHaceV9GAF52ngAZ3IAxSEXU9SSZ0OvFj4NuAg3UATpCY1OLrEccI KOOEpHqHxjcQROr6FfH5/vXSqS0M0cFKA/c+A7Fg5+SeSHUspeLZmhOl2k4VMukm lKpqK7mw2uV6lO9AxPtRve8FzuqkAfuSB5jOEzI9W1eJSu6GUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLE1yGEDtDbNn76wyyHcAdKTwHFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjVlMWU2ZGItZmJiZC0z NTUzLTkxNDMtNWEyZGRlMTNkNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF62aEy0/vlLA19l74onl7hGnIrlcP49Lix79lCjxTGRc+we55DN 9sRbaw5Xs0rGCmyZqIKma7DV7OlA+NSYU13n8Gy9zP1tEiF8IyxI7F/kbP5XaPAp 2mo9KlZ9bEfi5aSsRc6atVIvCaR7SMQR3t2JG8bX9SiYpPmciblL7gE9fz/9LcAk EIGVkNqXj4D4k9vifG9ehDqS7YBNrug18YXJ7g+Rwl6dOCf0w2u8YFUQNaEItZma 2nPX8CuhtbUsdlys+vWOJWP57UbNtV/grIBuWhlv+hWloVSxUures2UhY0lyFTi1 6Y2nNOe6CpwOL2WZ0YUebMvxEmAhvXpyG3k= -----END CERTIFICATE-----Generated at Mon Sep 21 20:35:53 2026 by rpki-client