$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa File: c1c68e55-3a72-30e3-b490-7849f1da5895.roa (raw, json) Hash identifier: jN1lJKX0J0R3UbQTg9OtlX9snh5uh/NzRuCUouoQrEk= Subject key identifier: 25:7B:05:BD:65:FD:5D:D0:57:F7:7B:82:C4:83:26:D8:CA:FE:E1:0E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDF5C93432648286EE1EC0830 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 43633 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:93:43:26:48:28:6e:e1:ec:08:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=872c614c-567f-411e-a6ed-5ba590b1dbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:b4:40:b6:74:b8:eb:0b:2d:be:4d:55:b0: 71:8c:04:7c:db:c3:6c:68:51:ef:e7:7d:83:9e:45: dd:1a:91:b7:42:6c:a1:d3:01:a3:74:ca:ed:05:5a: 8d:15:0e:86:d6:d5:30:af:24:ef:ae:02:da:2f:52: bb:7e:94:87:18:45:88:eb:29:c5:1d:c7:78:b0:19: 0f:d9:73:83:97:23:e0:32:70:82:81:a2:cb:89:f1: 0c:b9:d3:14:60:b8:f7:25:62:3e:c3:9d:d8:59:61: 9a:78:c5:0a:c0:42:a9:70:21:64:60:7e:fc:cc:44: 9b:f1:f8:e6:8a:cf:c4:52:f2:92:35:e2:eb:62:74: dd:0d:63:d2:7c:11:bf:fc:ef:63:8b:27:ca:31:da: 41:3d:f9:71:7b:b2:e4:68:f9:b1:dc:5c:d9:2a:09: 5e:f4:fb:01:28:9f:3a:30:06:ff:24:16:fb:2b:72: 81:e4:32:d8:23:08:2c:d3:80:e9:ab:3d:ff:dc:35: 44:e1:e2:52:ca:f2:62:6b:0f:74:06:97:f5:bd:04: af:1e:52:e8:ca:1f:77:1b:d6:72:b3:6f:f2:a9:08: 13:78:cc:e6:7d:33:6d:72:fa:4c:d1:ec:cc:cc:3e: fe:e9:bd:05:39:6c:6f:9b:cc:fb:36:43:29:96:97: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:05:BD:65:FD:5D:D0:57:F7:7B:82:C4:83:26:D8:CA:FE:E1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e7:96:cc:ae:88:fc:d9:38:1a:1e:a2:7d:eb:46:a5:d1:27: 85:b0:6e:1f:ba:85:99:22:cd:a5:c7:bb:49:2a:62:20:7a:4a: 9d:21:eb:a2:4f:92:be:fe:80:4b:53:78:c6:7c:ff:63:a9:da: c0:34:e5:9a:62:80:0b:24:e8:02:19:16:74:f9:44:58:44:e4: 67:08:f9:33:8e:a4:18:39:05:7c:da:cb:87:a6:16:64:39:1d: ab:f7:5b:21:4c:ac:3c:9d:6b:08:32:77:c1:ec:64:ba:69:e6: 1e:c7:8d:57:2f:14:80:c8:bf:5f:29:fc:34:9d:ad:88:38:3f: 88:90:95:45:83:7d:d5:e3:66:db:f8:a7:19:a5:01:d7:f1:d0: 5e:fb:4d:bb:c7:74:03:3d:54:ba:db:c3:20:1d:9b:30:bf:e0: 68:51:c6:b9:1e:49:cb:3c:6f:34:ec:f3:4e:1d:f3:83:b3:2e: 1c:b8:fe:c4:cf:78:36:b8:1b:37:e5:c0:60:2d:72:c1:52:da: ac:6a:2b:f9:12:a1:e6:3a:30:05:8f:4a:0a:b7:71:6b:64:2a: af:2e:89:86:10:bf:b3:c5:88:00:fa:f1:96:2d:9b:27:61:9d: cf:e5:89:f1:af:b1:e2:fd:6f:f2:e0:63:54:85:c3:8b:8e:e9: d5:8c:80:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7fXJNDJkgobuHsCDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk ODcyYzYxNGMtNTY3Zi00MTFlLWE2ZWQtNWJhNTkwYjFkYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJq0QLZ0uOsLLb5NVbBxjAR828NsaFHv532D nkXdGpG3Qmyh0wGjdMrtBVqNFQ6G1tUwryTvrgLaL1K7fpSHGEWI6ynFHcd4sBkP 2XODlyPgMnCCgaLLifEMudMUYLj3JWI+w53YWWGaeMUKwEKpcCFkYH78zESb8fjm is/EUvKSNeLrYnTdDWPSfBG//O9jiyfKMdpBPflxe7LkaPmx3FzZKgle9PsBKJ86 MAb/JBb7K3KB5DLYIwgs04Dpqz3/3DVE4eJSyvJiaw90Bpf1vQSvHlLoyh93G9Zy s2/yqQgTeMzmfTNtcvpM0ezMzD7+6b0FOWxvm8z7NkMplpfZLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCV7Bb1l/V3QV/d7gsSDJtjK/uEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzFjNjhlNTUtM2E3Mi0z MGUzLWI0OTAtNzg0OWYxZGE1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/nlsyuiPzZOBoeon3rRqXRJ4Wwbh+6hZkizaXHu0kqYiB6Sp0h 66JPkr7+gEtTeMZ8/2Op2sA05ZpigAsk6AIZFnT5RFhE5GcI+TOOpBg5BXzay4em FmQ5Hav3WyFMrDydawgyd8HsZLpp5h7HjVcvFIDIv18p/DSdrYg4P4iQlUWDfdXj Ztv4pxmlAdfx0F77TbvHdAM9VLrbwyAdmzC/4GhRxrkeScs8bzTs804d84OzLhy4 /sTPeDa4GzflwGAtcsFS2qxqK/kSoeY6MAWPSgq3cWtkKq8uiYYQv7PFiAD68ZYt mydhnc/lifGvseL9b/LgY1SFw4uO6dWMgG4= -----END CERTIFICATE-----Generated at Mon Sep 28 21:04:57 2026 by rpki-client