$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa File: bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa (raw, json) Hash identifier: imYFV3P0xrK/zUeMotjX+MUgr6X2TLJaWQNyrOue1x8= Subject key identifier: BF:38:15:A3:78:05:73:D4:D9:80:91:B7:0C:9B:48:F8:D8:32:88:AD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F3CE2A633010BB31DC8876C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 14012 IP address blocks: 2001:470:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a6:33:01:0b:b3:1d:c8:87:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=31e042ce-c675-4075-a70a-f110084faec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:b3:a0:75:67:42:86:6b:d8:b7:7a:46:a7: 91:f2:ea:5e:de:02:d3:de:3f:7b:dc:16:41:07:c3: e8:8c:9e:e8:a2:1f:c7:0b:a5:63:c4:e9:3f:12:d2: c5:0b:32:c4:0f:31:a3:14:af:31:4b:38:13:2c:38: 8a:6e:e4:41:95:1d:6f:bd:96:51:e8:1a:5f:75:bb: 5e:04:e2:86:c8:f9:74:2b:a6:d3:30:b0:01:1d:ab: 29:2a:80:64:db:30:44:42:b8:1d:71:71:c0:7c:6d: 24:bc:44:22:cd:43:cc:d5:5c:4a:7e:7f:0e:b1:e8: 27:3a:d5:fd:cd:7c:5e:ef:c7:36:49:63:2e:b3:76: 37:b0:b2:62:ae:32:ad:34:c6:40:a9:3a:70:9b:e8: ca:0b:81:fa:77:77:f1:bb:3b:a7:35:56:a3:d8:65: 73:2d:f6:f1:10:51:5d:eb:8b:e4:cb:90:c6:02:0c: ef:e4:62:0b:f6:35:78:46:bc:76:33:d2:4e:1d:79: c1:a4:26:ec:2a:18:76:e0:1c:64:88:e9:5d:00:eb: 65:3b:d0:46:89:fd:32:08:af:16:fb:f6:63:67:22: 27:41:15:bd:ae:18:38:fd:11:de:09:23:8f:08:7b: ed:64:7d:e7:46:e2:da:4f:6a:dc:60:ed:1a:9e:bd: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:15:A3:78:05:73:D4:D9:80:91:B7:0C:9B:48:F8:D8:32:88:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:110::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a8:b6:9c:55:8c:db:53:58:59:ad:6f:de:40:14:e2:68:de: 59:92:4f:ed:78:c2:58:45:8c:dd:ed:01:38:98:14:45:7e:f2: 27:6a:f4:94:77:1c:2d:eb:5d:4b:11:4d:79:27:3b:e2:b3:b2: b1:ff:8e:52:a5:72:83:a0:ce:82:b6:02:5b:2c:39:f0:08:ad: 27:f5:b4:2b:f4:ad:5d:01:ff:ba:d6:46:52:a6:18:17:52:aa: 1b:76:d3:86:1f:5d:eb:cb:ef:bc:55:52:77:9b:38:44:42:d1: 54:ae:98:80:35:5a:0b:be:fe:12:20:0b:3b:30:a0:7a:8f:06: 53:ff:a3:52:b4:b1:9f:19:d6:24:75:76:66:6f:76:9f:bf:cc: cb:7d:43:a2:fc:b6:40:4f:bf:08:47:99:2d:24:64:34:d5:14: ce:68:98:ce:11:d2:5f:9f:49:57:da:4f:5b:42:9f:c2:3d:0d: a8:10:5f:6d:16:a3:be:da:b5:d4:20:9a:9e:84:1a:5e:36:d2: 8a:03:ab:27:18:67:85:6c:5a:e2:9d:e4:e7:ad:00:bd:f6:85: 59:2a:55:00:10:c6:17:71:e6:2d:b1:fd:2b:f5:97:86:87:20: e3:ce:25:e6:be:b1:be:49:bc:75:63:3b:eb:cb:55:6a:a2:e1: d9:6b:a6:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884qYzAQuzHciHbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MzFlMDQyY2UtYzY3NS00MDc1LWE3MGEtZjExMDA4NGZhZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX6zoHVnQoZr2Ld6RqeR8upe3gLT3j973BZB B8PojJ7ooh/HC6VjxOk/EtLFCzLEDzGjFK8xSzgTLDiKbuRBlR1vvZZR6Bpfdbte BOKGyPl0K6bTMLABHaspKoBk2zBEQrgdcXHAfG0kvEQizUPM1VxKfn8OsegnOtX9 zXxe78c2SWMus3Y3sLJirjKtNMZAqTpwm+jKC4H6d3fxuzunNVaj2GVzLfbxEFFd 64vky5DGAgzv5GIL9jV4Rrx2M9JOHXnBpCbsKhh24BxkiOldAOtlO9BGif0yCK8W +/ZjZyInQRW9rhg4/RHeCSOPCHvtZH3nRuLaT2rcYO0anr1KvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL84FaN4BXPU2YCRtwybSPjYMoitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1MWRkMDYtN2JlMi0z ZTNjLWI5OTctODFkYzJjMGRiNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGotpxVjNtTWFmtb95AFOJo3lmST+14wlhFjN3tATiYFEV+8idq 9JR3HC3rXUsRTXknO+KzsrH/jlKlcoOgzoK2AlssOfAIrSf1tCv0rV0B/7rWRlKm GBdSqht204YfXevL77xVUnebOERC0VSumIA1Wgu+/hIgCzswoHqPBlP/o1K0sZ8Z 1iR1dmZvdp+/zMt9Q6L8tkBPvwhHmS0kZDTVFM5omM4R0l+fSVfaT1tCn8I9DagQ X20Wo77atdQgmp6EGl420ooDqycYZ4VsWuKd5OetAL32hVkqVQAQxhdx5i2x/Sv1 l4aHIOPOJea+sb5JvHVjO+vLVWqi4dlrpuk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:51:51 2026 by rpki-client