$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa File: baf6c4ea-efbd-3140-8496-619a7fa81622.roa (raw, json) Hash identifier: dOpaV3qf/FsePL4amTvwGXqfQkJGYFLHb5MYKBPh+o8= Subject key identifier: 4F:38:6C:3A:89:94:E5:83:99:C5:97:51:89:16:AA:0E:7A:20:4E:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F20F7B2A377E6C7D7C3F2C980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 11734 IP address blocks: 2001:470:2ba::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b2:a3:77:e6:c7:d7:c3:f2:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8e06e1c7-b641-4309-8d46-b976616c4018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:5f:0e:ef:b5:d2:5f:02:df:ec:d5:e6:b1: af:4f:30:82:92:7c:39:8f:d4:cd:62:61:4c:72:01: 8b:8f:05:de:a6:f5:bb:be:3d:cc:6c:f0:70:b9:47: fb:ab:61:5b:b6:17:d3:aa:68:ff:d3:d5:5b:4d:cf: f2:27:42:42:0c:d7:71:77:53:86:13:3c:11:d5:99: 55:39:83:0a:f8:d7:71:d7:5c:f4:fd:5a:55:85:db: 28:31:a4:24:7e:39:19:c1:18:32:6e:75:2d:f3:7f: 77:66:e6:0f:ee:20:2d:48:62:25:3d:90:dd:b5:3e: 8e:eb:6c:3d:e9:fa:c8:84:b6:08:e7:6b:9f:e2:7b: 12:a5:39:10:8f:a6:7d:e5:2c:ef:f8:68:a1:30:58: db:3b:2e:3c:52:0b:52:8b:70:d3:80:bc:12:d7:79: 72:3c:1b:f2:c5:6d:08:8c:15:fd:43:a3:b3:48:83: e0:ad:34:73:07:0e:2a:a9:3c:69:7c:a7:bc:d6:15: d9:43:37:12:8f:64:a8:7f:f1:5b:e0:85:2c:0f:a4: 14:83:33:bb:1f:53:75:cb:2d:78:d1:99:9d:cf:34: 4a:05:de:f3:aa:4e:7f:b9:4e:4b:ec:54:fa:0b:4c: 9f:ea:94:43:1f:3f:ae:2f:17:c2:7b:84:af:ed:e1: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:6C:3A:89:94:E5:83:99:C5:97:51:89:16:AA:0E:7A:20:4E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ba::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:75:79:2e:96:80:3f:ca:44:eb:a6:dc:87:b6:aa:39:84:cf: 71:aa:07:42:88:6a:87:2c:cb:21:4e:a8:f4:9c:2e:68:ce:92: 51:45:86:b2:45:05:ca:97:45:31:d7:14:81:60:ba:05:5f:7f: 0d:95:7b:03:97:bc:82:6b:89:4a:50:a9:06:b5:f0:9d:68:77: 27:40:c8:48:db:2f:4d:d2:6d:8c:0a:df:67:02:07:77:d1:30: 80:ae:f0:25:31:d5:3c:eb:47:78:9b:12:c9:cf:b9:f9:b2:7d: 9b:cf:7d:36:6c:0a:9f:e6:c4:26:01:c8:3d:8c:b9:e8:e9:26: d6:01:b1:53:00:b9:8c:91:22:1e:2b:9d:74:49:af:b1:00:36: 57:8f:05:34:49:b5:3b:0f:e1:d6:85:ec:f9:dd:9e:e4:f5:92: 3b:41:b9:5f:9d:ac:53:1a:aa:e3:90:90:8a:4a:f3:40:c2:4c: 30:0f:92:ab:cd:91:7d:8d:9f:cc:00:45:95:be:02:4f:94:8f: 25:7b:9d:2e:36:70:c9:26:ab:9d:38:b9:d2:b8:b6:dc:3e:8c: e6:95:e6:8e:6a:e6:26:57:bf:aa:ab:55:3d:0b:b7:b1:13:59: 33:c7:f4:be:21:eb:93:f2:53:fc:6c:df:4f:b8:af:db:60:e8: 83:74:d2:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g97Kjd+bH18PyyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGUwNmUxYzctYjY0MS00MzA5LThkNDYtYjk3NjYxNmM0MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc5fDu+10l8C3+zV5rGvTzCCknw5j9TNYmFM cgGLjwXepvW7vj3MbPBwuUf7q2FbthfTqmj/09VbTc/yJ0JCDNdxd1OGEzwR1ZlV OYMK+Ndx11z0/VpVhdsoMaQkfjkZwRgybnUt8393ZuYP7iAtSGIlPZDdtT6O62w9 6frIhLYI52uf4nsSpTkQj6Z95Szv+GihMFjbOy48UgtSi3DTgLwS13lyPBvyxW0I jBX9Q6OzSIPgrTRzBw4qqTxpfKe81hXZQzcSj2Sof/Fb4IUsD6QUgzO7H1N1yy14 0ZmdzzRKBd7zqk5/uU5L7FT6C0yf6pRDHz+uLxfCe4Sv7eHzFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE84bDqJlOWDmcWXUYkWqg56IE5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmFmNmM0ZWEtZWZiZC0z MTQwLTg0OTYtNjE5YTdmYTgxNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZ1eS6WgD/KROum3Ie2qjmEz3GqB0KIaocsyyFOqPScLmjOklFF hrJFBcqXRTHXFIFgugVffw2VewOXvIJriUpQqQa18J1odydAyEjbL03SbYwK32cC B3fRMICu8CUx1TzrR3ibEsnPufmyfZvPfTZsCp/mxCYByD2MuejpJtYBsVMAuYyR Ih4rnXRJr7EANlePBTRJtTsP4daF7PndnuT1kjtBuV+drFMaquOQkIpK80DCTDAP kqvNkX2Nn8wARZW+Ak+UjyV7nS42cMkmq504udK4ttw+jOaV5o5q5iZXv6qrVT0L t7ETWTPH9L4h65PyU/xs30+4r9tg6IN00tE= -----END CERTIFICATE-----Generated at Tue Sep 22 20:41:08 2026 by rpki-client