$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa File: c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa (raw, json) Hash identifier: oZOPlUUlCBPxDpfCE3eKFhcvOrspkPb7r7imwKGslsc= Subject key identifier: 48:FF:FA:C0:BE:E1:44:08:B7:9F:A1:B1:B1:82:66:A1:BF:FF:25:91 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EFE12322380C95D6C0629AD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 396350 IP address blocks: 2001:470:4a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:32:23:80:c9:5d:6c:06:29:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=6e40cf83-2d76-4f87-afc3-d136a651d14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2c:8a:71:2e:39:e1:3c:76:e1:e2:70:84:74: e2:80:28:e7:6d:e6:df:82:b9:81:7a:2c:6b:9d:24: 67:5b:ac:d7:db:64:fb:1d:07:c2:b2:6e:11:10:a1: df:79:ec:8c:0e:1a:0c:0d:e6:fa:6d:48:db:94:c1: 56:45:3d:21:7b:60:7f:fc:79:16:d9:2a:8b:31:9d: 8b:05:7e:a1:5b:c7:1e:dc:fc:32:41:12:f9:67:60: ef:01:ba:8d:f3:f3:ef:cd:52:d6:4a:ad:7d:2c:e4: 7e:a8:97:bc:bd:42:e4:ed:17:9a:48:8c:a3:2e:f6: cf:68:76:a5:87:9f:6b:44:6b:9b:9e:e7:82:5b:da: da:31:40:3a:c2:27:89:f6:71:9b:19:a5:39:76:1f: 3f:88:8c:e9:ea:20:b3:26:ab:8f:3c:c5:dd:63:a9: c9:0c:5f:9d:67:a2:55:f0:ef:07:60:08:1e:d1:02: f6:80:eb:52:81:e4:68:f3:93:05:91:0c:f1:cb:ea: 67:46:6d:a8:46:40:fe:78:65:76:93:76:00:86:56: 98:a3:cf:68:70:70:28:20:28:80:43:01:b4:ab:ad: f1:dc:ec:b5:30:0e:47:fa:1d:47:6e:73:e1:3c:20: da:fa:2c:e2:48:89:8a:e6:d2:81:48:af:c3:22:7b: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:FA:C0:BE:E1:44:08:B7:9F:A1:B1:B1:82:66:A1:BF:FF:25:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5fb6378-ba52-3266-a434-c1fc7a5f07ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:61:05:c3:0f:be:be:8f:14:35:b9:60:17:5e:56:ac:8d:d7: 0b:1e:2d:1b:e7:ba:a5:e1:04:8e:0f:36:ad:61:69:09:ec:70: 9f:7c:fb:04:8c:1f:81:82:c8:42:d5:78:7b:65:2b:a4:12:8c: 26:05:6e:51:2c:3d:3d:b8:11:0a:ae:b1:3c:13:6a:04:74:9c: 92:42:c1:3c:6f:a9:8a:9f:94:57:8b:a0:d3:11:69:4a:59:0d: 7e:69:2e:9f:e2:86:5e:84:c4:1b:fe:bd:71:70:f9:59:2c:58: a6:e9:2a:fa:be:ed:a6:41:57:aa:b1:0b:c4:0d:33:d5:5a:9e: 66:98:d2:72:14:73:bd:57:76:e8:5b:e9:33:eb:f6:83:1b:97: 50:18:bb:5c:4a:a9:50:29:e8:42:3e:0a:b5:3c:12:69:1e:bf: 42:7c:6a:a9:9b:c0:ad:78:bb:f9:60:a0:7b:79:c2:b3:b9:24: 70:17:40:b0:8e:8d:ef:10:33:3b:3f:b8:5b:a2:61:7b:43:7c: 24:43:8a:af:93:af:7f:4c:17:37:6b:da:29:0e:0b:2f:d6:69: bf:d5:8e:6a:fb:5a:d6:ab:c5:3c:a8:f2:ba:5d:d9:12:2f:32: a2:89:20:0a:e8:93:8a:1a:93:0a:4e:20:7a:72:4a:d1:a3:be: b8:f1:48:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7+EjIjgMldbAYprYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NmU0MGNmODMtMmQ3Ni00Zjg3LWFmYzMtZDEzNmE2NTFkMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCyKcS454Tx24eJwhHTigCjnbebfgrmBeixr nSRnW6zX22T7HQfCsm4REKHfeeyMDhoMDeb6bUjblMFWRT0he2B//HkW2SqLMZ2L BX6hW8ce3PwyQRL5Z2DvAbqN8/PvzVLWSq19LOR+qJe8vULk7ReaSIyjLvbPaHal h59rRGubnueCW9raMUA6wieJ9nGbGaU5dh8/iIzp6iCzJquPPMXdY6nJDF+dZ6JV 8O8HYAge0QL2gOtSgeRo85MFkQzxy+pnRm2oRkD+eGV2k3YAhlaYo89ocHAoICiA QwG0q63x3Oy1MA5H+h1HbnPhPCDa+iziSImK5tKBSK/DInvg1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEj/+sC+4UQIt5+hsbGCZqG//yWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVmYjYzNzgtYmE1Mi0z MjY2LWE0MzQtYzFmYzdhNWYwN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALthBcMPvr6PFDW5YBdeVqyN1wseLRvnuqXhBI4PNq1haQnscJ98 +wSMH4GCyELVeHtlK6QSjCYFblEsPT24EQqusTwTagR0nJJCwTxvqYqflFeLoNMR aUpZDX5pLp/ihl6ExBv+vXFw+VksWKbpKvq+7aZBV6qxC8QNM9VanmaY0nIUc71X duhb6TPr9oMbl1AYu1xKqVAp6EI+CrU8Emkev0J8aqmbwK14u/lgoHt5wrO5JHAX QLCOje8QMzs/uFuiYXtDfCRDiq+Tr39MFzdr2ikOCy/Wab/Vjmr7WtarxTyo8rpd 2RIvMqKJIArok4oakwpOIHpyStGjvrjxSF4= -----END CERTIFICATE-----Generated at Tue Sep 22 14:08:36 2026 by rpki-client