$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa File: ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa (raw, json) Hash identifier: ynbwpxrx1zJCxZUodXE9r+TTPkmpNkLc1VrQPkoab0U= Subject key identifier: C7:48:7B:7C:43:3E:1F:82:51:35:12:61:22:EE:33:71:72:69:0F:59 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F1467AC79B9C7AA3887C68080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 15461 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ac:79:b9:c7:aa:38:87:c6:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=8522e609-8cbe-4c0d-a8f0-7d457a5faa60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ef:ae:03:b5:75:f2:ac:c6:f4:59:75:3d:0a: 94:27:cc:d3:e9:8c:dd:7f:c4:74:19:2b:dc:c6:04: 28:a1:8e:50:1b:c8:ed:7d:5c:fc:6a:60:f0:79:5e: 73:3e:e9:ef:ca:9e:a4:1a:14:85:47:2a:8f:28:3e: e2:ac:b3:35:82:10:44:aa:8a:05:6f:53:f5:32:40: 29:4e:9b:cd:d6:dc:a2:da:71:bd:59:d4:81:7f:49: b6:36:70:9d:db:dc:dc:63:89:a3:a6:82:a0:1b:cc: da:70:bc:ef:42:ab:f1:b5:4a:77:40:49:bd:11:49: 4e:b2:f1:ae:95:a8:56:0a:7d:cd:ab:29:59:05:98: bb:77:aa:61:60:22:4d:c8:6a:32:43:7c:ad:76:83: 05:53:f5:f9:9d:c3:83:a8:98:fc:a6:e5:f6:3b:76: da:3f:cc:03:74:e8:80:76:44:ac:2d:1b:78:5d:e5: 3c:49:c9:48:fc:88:69:1c:f3:8c:5a:28:76:68:54: e4:8d:a6:4c:81:4a:8d:f1:dc:72:89:3b:53:9f:ee: d8:bb:b6:14:d6:03:75:41:f2:85:cc:b8:21:1f:dd: d3:78:f3:99:93:5f:3c:4b:95:2c:13:18:9b:6b:e4: 4c:71:29:37:62:3e:91:91:50:9d:61:cf:df:e6:fd: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:7B:7C:43:3E:1F:82:51:35:12:61:22:EE:33:71:72:69:0F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4b:79:5d:ce:20:1d:ce:98:c2:8d:1b:d4:bc:36:7e:4d:80: 4e:33:e3:2b:9f:ba:66:e1:85:4e:d9:c6:18:eb:bd:a6:30:66: 28:32:a8:1c:7a:2f:fc:fa:4e:ce:19:61:59:f2:14:fa:d0:4a: 0b:ac:2d:f5:fb:ad:ff:9d:2b:cb:5e:8f:08:58:22:aa:0f:8d: ab:6e:b2:d3:ba:a7:0d:bb:55:14:9c:3d:80:61:2a:e1:3d:75: 1d:51:83:46:8e:be:15:2a:81:b3:a0:55:a2:65:19:95:0e:5e: 8b:3c:ce:9a:74:03:58:c7:20:58:6c:b9:5f:5b:59:e5:4d:3c: f7:34:19:f6:00:bd:b3:eb:ca:75:c2:63:f0:41:d5:95:5b:11: 3f:b2:00:ef:51:37:6c:44:85:19:10:95:9e:dc:3e:22:ec:cd: c9:1c:0b:05:a7:fb:35:07:dc:37:d1:dc:54:81:3c:67:7d:4c: 5b:dc:e0:48:42:58:85:ac:39:f7:d9:70:e7:3a:6b:9d:98:df: 02:1e:ce:55:70:ff:b2:2d:eb:35:32:f7:34:b2:1a:7a:7f:6f: 3a:04:e9:28:a3:b5:c1:8c:6e:a4:d1:4b:be:92:7f:5e:e5:53: ee:7b:7d:25:ac:f2:4d:9b:75:c1:ba:c6:20:01:65:9e:7d:1c: a2:fd:77:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6x5uceqOIfGgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ODUyMmU2MDktOGNiZS00YzBkLWE4ZjAtN2Q0NTdhNWZhYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u+uA7V18qzG9Fl1PQqUJ8zT6Yzdf8R0GSvc xgQooY5QG8jtfVz8amDweV5zPunvyp6kGhSFRyqPKD7irLM1ghBEqooFb1P1MkAp TpvN1tyi2nG9WdSBf0m2NnCd29zcY4mjpoKgG8zacLzvQqvxtUp3QEm9EUlOsvGu lahWCn3NqylZBZi7d6phYCJNyGoyQ3ytdoMFU/X5ncODqJj8puX2O3baP8wDdOiA dkSsLRt4XeU8SclI/IhpHPOMWih2aFTkjaZMgUqN8dxyiTtTn+7Yu7YU1gN1QfKF zLghH93TePOZk188S5UsExiba+RMcSk3Yj6RkVCdYc/f5v1l5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdIe3xDPh+CUTUSYSLuM3FyaQ9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWNkZjdlMjAtOTc1Ny0z ZmMyLWFkMTItOWZjYzc4Yjc0NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZLeV3OIB3OmMKNG9S8Nn5NgE4z4yufumbhhU7ZxhjrvaYwZigy qBx6L/z6Ts4ZYVnyFPrQSgusLfX7rf+dK8tejwhYIqoPjatustO6pw27VRScPYBh KuE9dR1Rg0aOvhUqgbOgVaJlGZUOXos8zpp0A1jHIFhsuV9bWeVNPPc0GfYAvbPr ynXCY/BB1ZVbET+yAO9RN2xEhRkQlZ7cPiLszckcCwWn+zUH3DfR3FSBPGd9TFvc 4EhCWIWsOffZcOc6a52Y3wIezlVw/7It6zUy9zSyGnp/bzoE6SijtcGMbqTRS76S f17lU+57fSWs8k2bdcG6xiABZZ59HKL9d0Q= -----END CERTIFICATE-----Generated at Wed Sep 23 10:26:18 2026 by rpki-client