$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa File: d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa (raw, json) Hash identifier: 8TB5Yc0kRZL3UO0CI6L/TjhS7RaRxYEfh04d3aRfM90= Subject key identifier: 3F:F3:5B:D0:40:DC:12:02:CC:CB:E2:22:36:5C:1C:48:33:45:8D:69 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EF87CD992750E7D70D5B582C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 394740 IP address blocks: 2001:470:391::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d9:92:75:0e:7d:70:d5:b5:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=6b48e31f-857a-4b28-8fc9-4afb1bff92c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:c6:76:6a:4c:b1:9c:57:7b:39:b7:fd:2b: e7:b7:86:fe:3c:72:f7:c3:5f:e4:6d:7c:c6:bf:f0: df:50:b3:50:17:b8:3b:f2:bf:e4:30:5e:67:cf:98: 11:7f:6b:95:af:b9:ad:32:1f:77:18:35:67:aa:3d: 32:29:0c:43:9e:0b:bd:3b:72:61:b7:4f:9f:a1:34: 42:9a:f6:a7:a0:6e:62:71:24:17:57:fd:29:cb:e2: e6:3c:f2:b9:c2:a8:e0:b6:a3:a8:e7:b1:58:89:98: ba:87:ff:d5:e4:87:ee:84:dc:3c:ae:a6:5a:5f:1b: 81:1f:3a:94:32:dc:77:3a:6b:90:b4:fa:03:90:25: e0:ea:3d:51:82:ee:fc:0e:98:0d:b9:68:da:95:24: ce:e0:8c:d5:d8:28:5a:0f:77:c7:9f:48:3e:29:bc: 8f:b1:7d:af:79:39:e0:ec:7e:2a:66:f7:c9:be:03: a4:76:26:df:20:93:c6:ed:dd:fa:24:2e:c3:35:03: 33:d5:7d:e0:8e:93:db:ba:41:a4:c8:2e:d8:63:1a: 4b:aa:fc:f9:e4:65:54:e8:ae:04:95:25:59:10:81: 0c:1b:d7:91:3c:ac:a7:44:23:73:40:22:68:29:2a: cd:21:72:64:3d:d6:47:65:84:70:82:2d:c7:2e:9a: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:5B:D0:40:DC:12:02:CC:CB:E2:22:36:5C:1C:48:33:45:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:391::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e1:d0:a9:97:72:be:bf:cc:70:65:90:72:d9:5c:21:c9:40: 0e:86:1e:ba:80:fa:c8:56:6e:5d:8e:3b:97:a4:23:22:23:b3: 42:aa:6d:a7:39:12:dd:9d:85:24:5e:c4:77:0c:98:09:c9:66: 74:d1:bb:7e:73:db:6d:53:65:4b:d9:25:0a:d6:12:a3:b1:b0: f3:76:c7:90:90:3d:20:42:c9:ad:e5:3b:95:81:39:99:1f:53: 68:60:45:e0:5b:e8:c6:75:a1:be:3b:ac:26:b7:07:dc:8d:b3: 76:d3:3a:bf:0e:1a:6c:84:6d:06:22:ae:92:96:2f:70:22:c2: a2:91:e5:10:96:2c:f2:f7:d3:8a:0c:a5:f3:90:39:cf:00:d1: cf:6a:76:64:8c:04:28:ed:9d:9d:ff:82:08:c6:1c:bd:ba:05: e9:1b:25:9c:a1:3b:06:60:0f:b3:18:d2:c8:ed:92:00:06:3a: aa:15:de:ac:4c:68:0b:78:0c:d4:75:bc:da:03:91:ca:2b:95: 06:3f:88:c1:70:40:fa:ee:89:7b:02:38:c1:f9:c0:60:d0:ae: 6d:8f:25:5a:18:51:51:07:0e:7a:0c:c3:66:51:b3:06:e9:10: 40:a9:5f:d0:e4:c2:5f:35:ef:53:70:79:45:8e:d7:e5:76:0b: e5:56:7e:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fNmSdQ59cNW1gsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NmI0OGUzMWYtODU3YS00YjI4LThmYzktNGFmYjFiZmY5MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcXGdmpMsZxXezm3/Svnt4b+PHL3w1/kbXzG v/DfULNQF7g78r/kMF5nz5gRf2uVr7mtMh93GDVnqj0yKQxDngu9O3Jht0+foTRC mvanoG5icSQXV/0py+LmPPK5wqjgtqOo57FYiZi6h//V5IfuhNw8rqZaXxuBHzqU Mtx3OmuQtPoDkCXg6j1Rgu78DpgNuWjalSTO4IzV2ChaD3fHn0g+KbyPsX2veTng 7H4qZvfJvgOkdibfIJPG7d36JC7DNQMz1X3gjpPbukGkyC7YYxpLqvz55GVU6K4E lSVZEIEMG9eRPKynRCNzQCJoKSrNIXJkPdZHZYRwgi3HLpqyJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/zW9BA3BICzMviIjZcHEgzRY1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDY0YTQ5ZjgtMWY2Yi0z N2RhLWI5ZDEtZmRlNGU3ZjgwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLh0KmXcr6/zHBlkHLZXCHJQA6GHrqA+shWbl2OO5ekIyIjs0Kq bac5Et2dhSRexHcMmAnJZnTRu35z221TZUvZJQrWEqOxsPN2x5CQPSBCya3lO5WB OZkfU2hgReBb6MZ1ob47rCa3B9yNs3bTOr8OGmyEbQYirpKWL3AiwqKR5RCWLPL3 04oMpfOQOc8A0c9qdmSMBCjtnZ3/ggjGHL26BekbJZyhOwZgD7MY0sjtkgAGOqoV 3qxMaAt4DNR1vNoDkcorlQY/iMFwQPruiXsCOMH5wGDQrm2PJVoYUVEHDnoMw2ZR swbpEECpX9Dkwl8171NweUWO1+V2C+VWfvg= -----END CERTIFICATE-----Generated at Tue Sep 22 23:28:36 2026 by rpki-client