$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa File: b87cef54-59d2-3fbd-9311-a1f5b3511952.roa (raw, json) Hash identifier: JP1vximHyGi0JIn6NYN2eYqx5qxHSNYYsVLofRizVtY= Subject key identifier: EE:91:30:91:AA:75:16:8D:E0:7B:67:52:6C:F0:E2:5B:32:B6:23:B4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F480D326DEA1512717FFB0B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 400704 IP address blocks: 2001:470:50f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:32:6d:ea:15:12:71:7f:fb:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=1a90d786-61c3-4e32-be9e-688c261a7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:c7:b3:dc:50:42:e8:f9:dd:76:c3:21:1e: 8f:65:6a:34:82:b2:83:81:ea:e7:60:fb:17:8d:5f: 95:c4:06:d8:b8:6a:dd:06:50:cb:3c:13:13:16:f0: 04:2c:3b:37:e4:d4:00:0c:49:c8:05:b2:89:49:d9: 79:11:b2:60:65:21:f9:f2:d8:d9:ba:39:53:3f:04: 96:e8:74:4c:ca:ee:16:a0:78:37:f0:32:8d:d9:ef: 4e:b9:69:ac:41:bf:81:82:f2:48:b7:c2:fa:ee:7b: d4:73:64:0c:fd:26:06:bc:14:bc:ea:72:fd:34:b5: 88:a0:e4:b9:82:86:ac:c4:96:8c:9b:76:c5:cb:f3: 18:19:ca:73:c4:b8:ce:8d:2e:5b:77:48:d1:7d:e7: b4:17:ec:a0:29:f1:df:d0:b3:da:f6:86:20:61:c0: 80:a7:a2:30:f1:10:0c:7d:7f:93:1a:33:8d:87:3a: e6:5b:39:b9:df:8d:e1:93:d9:0d:53:98:ae:bf:05: 9d:3c:f5:dc:9d:ea:de:5a:a4:36:91:09:f1:70:58: 80:7d:6a:f5:e1:b7:f1:89:8e:91:d3:7c:75:69:f2: 97:b2:24:44:db:18:9b:32:33:13:92:65:f0:48:f0: 2f:cf:30:ee:18:9e:23:65:0c:8e:0b:57:87:49:af: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:91:30:91:AA:75:16:8D:E0:7B:67:52:6C:F0:E2:5B:32:B6:23:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:50f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:2a:59:ec:0f:af:6d:59:23:77:ce:d4:5a:0d:8a:a7:3e:8f: 0a:b5:bd:7c:19:05:31:f0:a4:2b:73:8c:6d:99:42:1b:fc:55: cb:c8:48:2b:09:d4:4e:9b:be:b9:bd:58:4e:35:e6:f5:b0:c6: ed:53:68:59:43:1c:66:2c:4c:bb:16:71:48:7e:02:f5:af:bd: 8b:96:0f:4d:77:e8:b9:1c:4a:32:84:83:16:df:bf:aa:dd:4a: 13:b4:3a:a3:70:74:d3:30:84:52:0b:24:d5:c8:eb:47:65:1a: 06:5b:2c:bd:4b:be:62:f1:d7:b0:04:8b:b9:07:e8:f0:d5:72: dd:0a:27:3b:ca:58:b1:14:22:db:5e:b1:f6:f4:c4:ee:e2:55: 44:29:6f:25:23:ad:58:3a:34:11:7d:bf:50:ee:c1:40:80:e4: db:04:eb:6b:3c:2a:9a:0f:78:70:16:4f:82:e2:fd:09:82:45: ee:35:9f:21:a0:1c:ad:68:e0:f6:1c:1f:c1:77:ac:f3:ae:37: fd:6a:1c:a0:28:d0:20:1b:a1:95:fc:aa:8f:19:d7:f4:33:a4: 40:c3:b1:71:86:31:a7:ca:60:78:54:09:60:34:38:59:2e:33: 47:e7:b3:aa:6f:b2:d7:40:ef:28:63:3f:ad:7e:2c:27:4f:6d: 8b:84:2c:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDTJt6hUScX/7CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MWE5MGQ3ODYtNjFjMy00ZTMyLWJlOWUtNjg4YzI2MWE3MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+vHs9xQQuj53XbDIR6PZWo0grKDgernYPsX jV+VxAbYuGrdBlDLPBMTFvAELDs35NQADEnIBbKJSdl5EbJgZSH58tjZujlTPwSW 6HRMyu4WoHg38DKN2e9OuWmsQb+BgvJIt8L67nvUc2QM/SYGvBS86nL9NLWIoOS5 goasxJaMm3bFy/MYGcpzxLjOjS5bd0jRfee0F+ygKfHf0LPa9oYgYcCAp6Iw8RAM fX+TGjONhzrmWzm5343hk9kNU5iuvwWdPPXcnereWqQ2kQnxcFiAfWr14bfxiY6R 03x1afKXsiRE2xibMjMTkmXwSPAvzzDuGJ4jZQyOC1eHSa+kPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6RMJGqdRaN4HtnUmzw4lsytiO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjg3Y2VmNTQtNTlkMi0z ZmJkLTkzMTEtYTFmNWIzNTExOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALAqWewPr21ZI3fO1FoNiqc+jwq1vXwZBTHwpCtzjG2ZQhv8VcvI SCsJ1E6bvrm9WE415vWwxu1TaFlDHGYsTLsWcUh+AvWvvYuWD0136LkcSjKEgxbf v6rdShO0OqNwdNMwhFILJNXI60dlGgZbLL1LvmLx17AEi7kH6PDVct0KJzvKWLEU Ittesfb0xO7iVUQpbyUjrVg6NBF9v1DuwUCA5NsE62s8KpoPeHAWT4Li/QmCRe41 nyGgHK1o4PYcH8F3rPOuN/1qHKAo0CAboZX8qo8Z1/QzpEDDsXGGMafKYHhUCWA0 OFkuM0fns6pvstdA7yhjP61+LCdPbYuELKs= -----END CERTIFICATE-----Generated at Sat Sep 26 13:38:58 2026 by rpki-client