$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c18d1c11-091a-319c-831f-21a10cc90272.roa File: c18d1c11-091a-319c-831f-21a10cc90272.roa (raw, json) Hash identifier: 7KwXFFOGrBZcYhuC0+FWV1cUfxsMX6IA/Jpx/905ilw= Subject key identifier: 38:DC:CE:3A:B5:40:9F:7C:35:31:14:17:C6:DC:F2:72:12:DF:D4:70 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F549D4F0E430D642CA7E85000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c18d1c11-091a-319c-831f-21a10cc90272.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 203273 IP address blocks: 2001:470:276::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4f:0e:43:0d:64:2c:a7:e8:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=690d7962-ca1d-49ec-a43a-ab3e1ed079fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:fb:cd:9e:16:36:37:f7:3d:2f:8f:51:50: 57:1c:70:fd:6f:43:8f:49:bd:41:58:47:ae:fe:64: af:fe:e3:96:8e:29:99:15:24:5e:b9:0c:be:91:6d: 70:fc:d9:51:a5:52:8a:df:70:5d:40:d6:dd:aa:9b: 54:63:20:d1:9d:65:d7:09:63:1f:c1:65:44:73:7f: 0b:4b:4f:9c:e7:6f:76:15:d8:c1:de:9d:1d:97:bf: 49:8d:e1:7a:fe:34:0d:96:49:3c:70:ad:65:fe:48: 3d:6c:90:10:ae:52:7d:65:7f:73:d0:66:c9:6d:eb: e3:eb:27:d2:44:ae:89:96:08:c5:28:8d:74:50:1e: 74:0d:a1:dc:8d:5a:70:c3:3a:f6:2f:39:0d:ac:fa: b2:99:e3:81:44:9e:08:2a:ea:57:2d:a6:f1:98:51: c9:78:5c:fe:ef:93:03:b4:de:c7:15:dd:76:e9:6c: 4c:53:be:6a:c8:53:25:94:fb:c5:90:bb:49:74:c6: a4:7f:22:d1:17:1b:d6:bd:23:1f:9b:b9:c9:64:d8: ae:42:6b:8f:b9:0c:91:ac:11:46:98:29:b0:3e:fe: 65:d6:de:1b:2c:f4:d1:72:dd:bc:57:1f:46:d6:09: 72:36:8e:43:3a:f8:f2:52:64:1b:ce:59:0a:7a:21: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:CE:3A:B5:40:9F:7C:35:31:14:17:C6:DC:F2:72:12:DF:D4:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c18d1c11-091a-319c-831f-21a10cc90272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:276::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b2:73:86:e5:0d:5b:61:c3:26:ab:af:64:7a:0a:68:88:87: 7e:b9:8b:5a:51:83:5f:f9:f7:00:b5:6f:34:4d:15:02:27:e9: 6b:74:ec:95:3a:02:37:ae:b3:c5:ea:2d:6e:35:7e:ec:ce:22: c3:7a:cf:34:92:7a:6d:01:fe:6b:11:1b:6c:d2:4b:86:60:f9: d3:30:75:a1:dd:ff:55:5b:24:88:5c:8e:6c:cf:46:31:dc:50: 0d:48:8b:89:f0:b9:d4:3c:85:1d:c0:fa:13:31:17:42:be:82: 70:c8:77:26:f2:26:ba:e3:0d:37:cf:89:c1:a2:28:23:88:8e: bf:ab:85:f7:8b:d0:a3:92:59:ed:93:13:73:a5:ac:69:47:d8: 01:88:f5:b2:5e:9b:47:9e:be:d0:f6:50:f4:9a:e7:43:fb:5d: 52:10:b5:9c:30:2b:8b:01:69:37:07:43:7c:84:6c:76:6f:9c: 29:b7:22:b5:e1:64:83:1d:31:7e:ff:53:3e:17:4e:36:88:bc: bd:e8:7c:01:13:60:a3:0c:3a:61:3d:9a:11:f7:d8:01:81:63: a9:8c:6f:d3:65:c8:50:4f:8e:93:33:0e:e2:9b:e4:35:53:c7: 38:c1:37:28:73:25:9c:30:75:e7:97:37:b3:c4:09:ad:c2:b1: 46:40:5c:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnU8OQw1kLKfoUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjkwZDc5NjItY2ExZC00OWVjLWE0M2EtYWIzZTFlZDA3OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3v7zZ4WNjf3PS+PUVBXHHD9b0OPSb1BWEeu /mSv/uOWjimZFSReuQy+kW1w/NlRpVKK33BdQNbdqptUYyDRnWXXCWMfwWVEc38L S0+c5292FdjB3p0dl79JjeF6/jQNlkk8cK1l/kg9bJAQrlJ9ZX9z0GbJbevj6yfS RK6JlgjFKI10UB50DaHcjVpwwzr2LzkNrPqymeOBRJ4IKupXLabxmFHJeFz+75MD tN7HFd126WxMU75qyFMllPvFkLtJdMakfyLRFxvWvSMfm7nJZNiuQmuPuQyRrBFG mCmwPv5l1t4bLPTRct28Vx9G1glyNo5DOvjyUmQbzlkKeiFGEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjczjq1QJ98NTEUF8bc8nIS39RwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzE4ZDFjMTEtMDkxYS0z MTljLTgzMWYtMjFhMTBjYzkwMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJ2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeyc4blDVthwyarr2R6CmiIh365i1pRg1/59wC1bzRNFQIn6Wt0 7JU6Ajeus8XqLW41fuzOIsN6zzSSem0B/msRG2zSS4Zg+dMwdaHd/1VbJIhcjmzP RjHcUA1Ii4nwudQ8hR3A+hMxF0K+gnDIdybyJrrjDTfPicGiKCOIjr+rhfeL0KOS We2TE3OlrGlH2AGI9bJem0eevtD2UPSa50P7XVIQtZwwK4sBaTcHQ3yEbHZvnCm3 IrXhZIMdMX7/Uz4XTjaIvL3ofAETYKMMOmE9mhH32AGBY6mMb9NlyFBPjpMzDuKb 5DVTxzjBNyhzJZwwdeeXN7PECa3CsUZAXDQ= -----END CERTIFICATE-----Generated at Sun Oct 11 14:57:27 2026 by rpki-client