$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa File: d821af19-f830-30b5-968e-4e50cdc1f536.roa (raw, json) Hash identifier: A6H6qQLOd0WDHFKulNNWoBcDZfdj1Dl3hTpi3y9szr0= Subject key identifier: 6D:EC:40:71:2C:F7:2F:B7:8F:E1:EF:FB:C4:0E:11:79:68:00:D9:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F58CD648731AC5D1450A5BA20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 19661 IP address blocks: 2001:470:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:64:87:31:ac:5d:14:50:a5:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=64ee020c-d03e-4a93-9e20-9f1d6977d2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:0b:36:0d:93:99:5f:ec:11:d7:d1:1c:ae: f4:de:fc:0c:ec:22:16:84:86:d6:a7:ee:8e:50:2a: 1f:fe:a0:33:b3:24:83:4b:a6:a1:c3:2b:cc:29:8d: 68:34:05:97:28:c2:3e:ac:c1:04:49:c2:e3:5b:94: 02:c8:63:11:ea:1a:3e:d3:b1:ce:7c:cc:3f:8a:c3: 1b:d8:23:e2:4d:4c:59:b1:55:97:27:9f:f7:82:5d: dd:a9:71:3d:7f:ed:c5:6b:24:67:d5:86:96:9e:a7: 7e:fe:71:c6:36:16:2a:e0:36:f0:d1:8d:2d:e4:fd: 1c:f8:59:6e:e5:38:90:45:c6:16:0a:13:00:ae:35: 6a:66:2e:15:37:69:25:70:85:5d:d7:a8:54:52:d0: 32:fe:85:fe:17:39:45:ea:09:7e:a1:10:f4:56:b7: 5d:71:92:33:f3:c6:0b:65:78:78:62:fa:8c:9e:d4: 42:3d:41:18:c8:18:a2:80:d6:5d:07:86:e8:02:ef: a7:34:13:d8:1d:63:f1:7d:36:e2:bc:c3:83:21:2d: 24:49:22:8c:7c:c9:05:90:ee:8d:d2:b1:c0:63:96: 58:8b:00:97:33:9e:ec:9c:8d:f0:8d:76:d4:23:c0: 14:d2:13:3a:61:6e:8c:51:02:1d:0b:de:58:dd:90: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:40:71:2C:F7:2F:B7:8F:E1:EF:FB:C4:0E:11:79:68:00:D9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c7:a6:c4:77:45:bf:5e:31:a2:b1:5f:a6:1f:10:8d:ce:37: 2a:f7:c9:a6:d7:e5:d8:72:b6:14:50:a7:34:8b:31:ae:65:9b: a4:aa:e6:bc:78:d2:01:d8:36:0e:fa:cb:e3:c4:44:d7:17:0d: 3d:99:fa:e8:9b:45:48:25:f6:1b:9e:b0:1e:c0:e4:de:99:88: bb:0e:f7:e3:9f:0b:35:8c:3f:cd:11:a1:b0:49:95:3b:5a:81: be:5b:22:eb:9b:bf:12:b6:77:8a:92:51:90:ad:bd:83:ac:c4: e8:0a:01:0d:24:b3:05:d1:2c:29:ca:72:e9:47:b0:7f:64:eb: 4c:2e:56:5e:7c:c5:bf:2d:67:2a:23:cf:13:07:e8:ab:99:a3: b0:5a:fc:95:99:8a:3c:66:e2:09:2f:d5:61:0d:99:2c:21:35: f5:ea:3c:5a:5e:30:1e:81:8c:45:73:f9:91:5c:bc:0a:93:60: 28:91:8f:2c:0c:fe:7e:7f:b0:22:b6:9d:1b:ec:79:e7:31:a2: d7:e1:94:94:61:f5:59:2d:a4:db:5d:41:31:fc:55:59:e5:49: 31:57:da:05:f5:9e:94:f6:5f:32:32:ee:d0:55:4e:03:c1:0a: 6d:03:38:f4:6d:6f:4c:11:a9:5c:c9:22:93:56:8f:62:e1:fb: 02:34:d5:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9YzWSHMaxdFFCluiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NjRlZTAyMGMtZDAzZS00YTkzLTllMjAtOWYxZDY5NzdkMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAgLNg2TmV/sEdfRHK703vwM7CIWhIbWp+6O UCof/qAzsySDS6ahwyvMKY1oNAWXKMI+rMEEScLjW5QCyGMR6ho+07HOfMw/isMb 2CPiTUxZsVWXJ5/3gl3dqXE9f+3FayRn1YaWnqd+/nHGNhYq4Dbw0Y0t5P0c+Flu 5TiQRcYWChMArjVqZi4VN2klcIVd16hUUtAy/oX+FzlF6gl+oRD0VrddcZIz88YL ZXh4YvqMntRCPUEYyBiigNZdB4boAu+nNBPYHWPxfTbivMODIS0kSSKMfMkFkO6N 0rHAY5ZYiwCXM57snI3wjXbUI8AU0hM6YW6MUQIdC95Y3ZBuiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3sQHEs9y+3j+Hv+8QOEXloANlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMWFmMTktZjgzMC0z MGI1LTk2OGUtNGU1MGNkYzFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC7HpsR3Rb9eMaKxX6YfEI3ONyr3yabX5dhythRQpzSLMa5lm6Sq 5rx40gHYNg76y+PERNcXDT2Z+uibRUgl9huesB7A5N6ZiLsO9+OfCzWMP80RobBJ lTtagb5bIuubvxK2d4qSUZCtvYOsxOgKAQ0kswXRLCnKculHsH9k60wuVl58xb8t ZyojzxMH6KuZo7Ba/JWZijxm4gkv1WENmSwhNfXqPFpeMB6BjEVz+ZFcvAqTYCiR jywM/n5/sCK2nRvseecxotfhlJRh9VktpNtdQTH8VVnlSTFX2gX1npT2XzIy7tBV TgPBCm0DOPRtb0wRqVzJIpNWj2Lh+wI01YU= -----END CERTIFICATE-----Generated at Sun Oct 4 18:07:06 2026 by rpki-client