$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa File: c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa (raw, json) Hash identifier: K1lr2/bJILElXKK+6J7TCUCq0Nx0ZMgHrxB5CnUkVqU= Subject key identifier: C4:2E:DA:B8:F9:AF:B2:D1:94:8D:DF:FF:AD:11:53:6B:08:75:49:21 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F3A17DD2AEE49A3830D1BEC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 40692 IP address blocks: 2001:470:4c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dd:2a:ee:49:a3:83:0d:1b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=41bd3daf-4631-42fb-bcc7-0c87e9227720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:c6:2f:bb:59:dc:71:9d:8a:19:72:18:5f: 17:28:59:06:01:b3:2e:db:36:e2:54:60:5b:4f:5c: a6:62:c1:d9:ef:66:fd:ec:c0:29:90:04:8c:30:d0: c5:4c:91:c2:08:34:cd:93:21:1c:e8:af:93:52:5b: 8e:76:1d:63:34:2e:bb:27:41:62:87:c2:e6:77:1a: 83:cb:2c:b6:f4:28:7b:2c:e8:e1:62:95:48:cd:dc: 79:7a:d1:0f:d2:a2:3b:0d:a4:03:18:b7:47:b6:91: d9:76:11:9b:7b:a0:77:9a:bf:b7:e6:3c:09:4e:0c: 30:49:96:21:0a:de:91:e8:1a:0c:76:0d:64:cb:f6: ff:2c:37:81:3c:6d:74:30:4a:65:63:07:d9:ce:b1: 32:3a:86:c0:70:cd:f2:e7:8d:8d:13:ac:01:ac:62: 7a:fc:dd:3b:62:6d:1b:8b:b3:c9:31:b1:83:25:9d: 99:0f:39:49:23:b3:11:f5:05:7e:33:9e:fa:3c:e5: 38:02:c9:ed:75:21:86:de:43:0b:7a:97:96:b2:01: 5d:50:2c:76:42:df:b4:23:b8:61:21:e4:95:1d:95: 68:75:68:1a:e0:81:1d:6e:89:57:c9:c3:e7:8f:a0: ef:e8:4c:f8:6a:29:2a:e9:c0:cf:d2:92:64:24:10: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:DA:B8:F9:AF:B2:D1:94:8D:DF:FF:AD:11:53:6B:08:75:49:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c40a235e-3849-372a-8b6c-f63f4bf87fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:16:28:cb:4c:fa:7b:58:ab:fd:59:9f:59:97:d6:85:7d:41: 5b:02:ed:0f:56:46:78:a8:13:9d:92:2d:51:e0:ce:c9:3f:0b: cc:d3:25:6d:42:92:09:55:2d:c7:e9:2e:6b:60:c1:23:86:30: 2d:66:60:bf:95:4f:ab:fa:e2:5b:78:0d:8f:fa:6c:ba:44:83: a2:7e:26:da:6e:4b:f6:d0:8f:9e:88:9c:ca:d2:42:41:4d:38: 4f:7b:e2:4b:13:40:cd:0d:f5:87:8e:f5:b3:e7:38:f0:8e:0e: 2a:d4:d8:04:91:aa:5d:bb:64:6a:b4:54:d1:57:8f:d6:2c:59: d6:d8:77:51:fd:ed:3b:db:31:78:c8:22:cf:c2:ef:8f:cd:48: 2a:9e:74:a5:8e:72:2c:ee:e5:4f:84:cd:7f:15:74:d7:1d:8e: d4:21:be:0e:9d:8e:e4:a8:a6:a6:49:1d:09:3c:1c:1f:3f:e9: db:83:e7:5d:c3:a2:48:0c:e5:2f:f3:19:bc:28:cd:53:91:b0: 64:ab:55:af:d9:7e:8d:62:17:76:81:31:ba:8a:f2:5f:01:83: e8:bf:7a:5d:c9:80:f3:5a:61:e3:eb:71:4e:13:be:98:20:be: 26:58:f6:33:27:32:b2:77:ce:a1:31:6e:0d:2a:fe:5b:c1:1b: a9:b1:78:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE86F90q7kmjgw0b7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NDFiZDNkYWYtNDYzMS00MmZiLWJjYzctMGM4N2U5MjI3NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4bGL7tZ3HGdihlyGF8XKFkGAbMu2zbiVGBb T1ymYsHZ72b97MApkASMMNDFTJHCCDTNkyEc6K+TUluOdh1jNC67J0Fih8LmdxqD yyy29Ch7LOjhYpVIzdx5etEP0qI7DaQDGLdHtpHZdhGbe6B3mr+35jwJTgwwSZYh Ct6R6BoMdg1ky/b/LDeBPG10MEplYwfZzrEyOobAcM3y542NE6wBrGJ6/N07Ym0b i7PJMbGDJZ2ZDzlJI7MR9QV+M576POU4AsntdSGG3kMLepeWsgFdUCx2Qt+0I7hh IeSVHZVodWga4IEdbolXycPnj6Dv6Ez4aikq6cDP0pJkJBDaGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQu2rj5r7LRlI3f/60RU2sIdUkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQwYTIzNWUtMzg0OS0z NzJhLThiNmMtZjYzZjRiZjg3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEcWKMtM+ntYq/1Zn1mX1oV9QVsC7Q9WRnioE52SLVHgzsk/C8zT JW1CkglVLcfpLmtgwSOGMC1mYL+VT6v64lt4DY/6bLpEg6J+JtpuS/bQj56InMrS QkFNOE974ksTQM0N9YeO9bPnOPCODirU2ASRql27ZGq0VNFXj9YsWdbYd1H97Tvb MXjIIs/C74/NSCqedKWOcizu5U+EzX8VdNcdjtQhvg6djuSopqZJHQk8HB8/6duD 513DokgM5S/zGbwozVORsGSrVa/Zfo1iF3aBMbqK8l8Bg+i/el3JgPNaYePrcU4T vpggviZY9jMnMrJ3zqExbg0q/lvBG6mxeIk= -----END CERTIFICATE-----Generated at Mon Sep 28 20:18:44 2026 by rpki-client