$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa File: cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa (raw, json) Hash identifier: NP+TkJ5lD4hiB5XXjJxnkgVQBkpTP1g3xD+SbUSohqk= Subject key identifier: A2:FC:A2:5C:37:DF:0F:41:35:15:46:24:59:DE:A7:79:B4:5E:36:78 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F15CCE11F8ACB0BE7EBEA7E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 215492 IP address blocks: 2001:470:426::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e1:1f:8a:cb:0b:e7:eb:ea:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=d96f8e82-da20-41bf-b715-be7054837963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:e3:99:19:c5:52:d1:7c:51:95:39:12:89: af:d1:46:2e:f0:09:ad:d1:bb:fc:c2:d5:ac:a3:6c: 66:f3:99:f7:17:ae:f8:ba:b3:49:68:85:bf:27:d2: b7:3f:ad:8c:d5:b8:2e:00:5b:a7:3b:f2:04:bd:ed: a5:aa:a9:7a:e3:fe:35:73:22:76:75:f8:91:59:0e: 60:89:be:97:0b:45:d9:e6:c2:ff:58:ae:2d:67:f6: 7e:f5:09:52:44:84:0d:ef:4a:d9:ff:a0:5a:59:33: 47:83:46:35:a5:c6:ff:47:6a:b7:bf:3a:11:40:48: ce:70:5c:62:3e:0e:4f:41:b9:4a:90:d2:20:27:4b: 97:f4:f9:9f:37:7c:b3:6c:d2:a0:39:ab:13:45:ee: 9b:aa:2e:ab:c9:48:0d:95:22:9d:f9:d7:5b:56:39: 61:1b:8f:81:38:f4:45:0a:e2:22:17:7f:78:16:fa: 84:48:a8:4c:81:0b:9b:a5:4c:08:66:9a:cf:f0:17: 1a:c1:20:8c:d2:d9:4a:4a:d7:93:17:e1:7d:3b:a0: 93:b4:5e:18:34:6c:1e:25:d2:55:d7:99:57:b2:35: 02:ad:3c:8f:58:2a:ab:4b:9b:0a:f4:b3:0d:f5:b6: f0:54:6e:57:f0:cf:6a:28:e9:f3:3c:14:e8:d1:5e: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:A2:5C:37:DF:0F:41:35:15:46:24:59:DE:A7:79:B4:5E:36:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:426::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:b5:3b:6a:21:3f:14:2f:3e:a9:66:8f:8a:4c:a6:9b:e6: 12:2b:06:4a:2b:b4:61:09:bf:d6:c9:79:ad:6b:96:00:80:fc: f3:6e:16:78:79:57:98:20:cf:7c:43:f7:62:bc:6e:ca:42:23: 34:a7:49:fb:b6:57:df:b3:8e:bb:91:e7:f4:d0:c2:f7:f0:c8: aa:a5:8a:2f:c5:4c:3f:55:ce:b6:46:f5:89:16:ec:25:cc:3b: 86:0e:24:f7:d3:d1:af:00:6e:2a:2c:e7:9d:0f:7b:5a:9f:85: 5b:f7:7b:9d:a2:00:9b:d1:b9:6e:0d:3c:bc:0b:d6:ad:15:5c: 0c:de:d1:7e:79:66:a6:1b:35:20:88:a5:d2:3b:b6:33:1a:a3: 31:82:f2:01:0a:44:71:ad:d9:a6:aa:5f:5a:9f:5a:23:d1:53: 23:d3:93:35:c0:1c:d8:da:06:ea:2c:e9:2b:80:17:6e:99:b3: 03:73:61:01:0f:0f:dc:4d:c8:ee:12:55:61:0f:39:95:bb:ee: 7b:4f:4f:98:62:fd:33:89:1a:bc:2c:fa:b9:b3:02:e8:74:4c: 69:98:c5:e7:f8:91:5a:12:b6:f8:61:0c:e6:8b:1e:cb:c0:df: 4f:cf:96:b9:a3:2d:b7:83:91:98:b5:dd:d7:ca:5b:3f:4c:28: 29:de:a7:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8VzOEfissL5+vqfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDk2ZjhlODItZGEyMC00MWJmLWI3MTUtYmU3MDU0ODM3OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU/jmRnFUtF8UZU5Eomv0UYu8Amt0bv8wtWs o2xm85n3F674urNJaIW/J9K3P62M1bguAFunO/IEve2lqql64/41cyJ2dfiRWQ5g ib6XC0XZ5sL/WK4tZ/Z+9QlSRIQN70rZ/6BaWTNHg0Y1pcb/R2q3vzoRQEjOcFxi Pg5PQblKkNIgJ0uX9PmfN3yzbNKgOasTRe6bqi6ryUgNlSKd+ddbVjlhG4+BOPRF CuIiF394FvqESKhMgQubpUwIZprP8BcawSCM0tlKSteTF+F9O6CTtF4YNGweJdJV 15lXsjUCrTyPWCqrS5sK9LMN9bbwVG5X8M9qKOnzPBTo0V4qmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKL8olw33w9BNRVGJFnep3m0XjZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JiMjViMWYtZmQzYy0z NTExLWFkN2UtZWI3M2NhNTNjZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAWtTtqIT8ULz6pZo+KTKab5hIrBkortGEJv9bJea1rlgCA/PNu Fnh5V5ggz3xD92K8bspCIzSnSfu2V9+zjruR5/TQwvfwyKqlii/FTD9VzrZG9YkW 7CXMO4YOJPfT0a8Abios550Pe1qfhVv3e52iAJvRuW4NPLwL1q0VXAze0X55ZqYb NSCIpdI7tjMaozGC8gEKRHGt2aaqX1qfWiPRUyPTkzXAHNjaBuos6SuAF26ZswNz YQEPD9xNyO4SVWEPOZW77ntPT5hi/TOJGrws+rmzAuh0TGmYxef4kVoStvhhDOaL HsvA30/PlrmjLbeDkZi13dfKWz9MKCnep1M= -----END CERTIFICATE-----Generated at Mon Sep 21 10:28:07 2026 by rpki-client