$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a1dfea6-8957-3e8a-98f4-e83c64ca009b.roa File: 0a1dfea6-8957-3e8a-98f4-e83c64ca009b.roa (raw, json) Hash identifier: FfL60MmC7SEC7TSKCdkfmq9v0XgknnYoDj5Sn3rxZbc= Subject key identifier: A7:47:98:84:7A:FC:D3:A4:AC:0F:73:08:16:ED:20:3C:AD:25:CE:F8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F3A17D65AFF8803376A332C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a1dfea6-8957-3e8a-98f4-e83c64ca009b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 53356 IP address blocks: 2001:470:3ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d6:5a:ff:88:03:37:6a:33:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=80f8324f-d823-4723-9614-f1fdc51124fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b7:73:14:1b:7e:39:9e:1f:06:d1:86:8d:b6: a4:b8:d1:f9:e9:cf:0f:2c:2b:4c:16:72:16:62:8a: 8a:57:92:ff:ce:63:51:e4:cd:09:4b:5c:47:3c:d3: fe:13:22:12:d6:6f:54:9d:01:8b:b8:87:e0:bc:2d: 6b:7f:1a:81:bd:88:bf:f0:0f:33:df:60:4f:51:0c: 95:d1:b5:b4:f8:b8:67:3a:17:6a:f0:73:f3:13:02: 66:4c:00:f6:5c:e7:87:f1:ca:4a:56:83:4a:50:fb: d6:ca:5e:3c:b0:a0:d7:79:00:62:83:53:47:84:1a: d2:5c:3e:8c:bd:8d:cd:69:25:12:37:da:53:4d:a2: 87:ed:63:79:7d:98:11:92:ca:02:b9:21:a9:04:31: 9e:0e:ae:1c:ce:45:5c:6a:92:fb:ad:c0:72:9b:f4: c7:28:ef:81:34:36:6d:2c:40:61:d7:c1:5f:aa:f1: b9:15:93:4d:c2:03:d9:dc:e8:b8:b8:c4:94:02:97: f0:bb:e5:04:23:b3:6b:f0:79:d0:62:80:a9:d5:23: 97:3d:b7:45:e9:d9:66:43:04:f1:ee:a1:6c:42:56: 2d:2a:ee:5d:d1:cb:9d:7d:cd:f8:20:a8:91:18:7d: 55:21:24:51:a6:85:c2:ae:95:69:54:f4:10:44:84: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:47:98:84:7A:FC:D3:A4:AC:0F:73:08:16:ED:20:3C:AD:25:CE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a1dfea6-8957-3e8a-98f4-e83c64ca009b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:33:78:48:63:30:3c:f8:f9:af:a5:76:41:bf:6d:7e:94:4e: 83:8d:0f:56:f2:81:22:a8:eb:d7:2f:78:98:f7:3a:26:8a:1b: 19:11:1d:53:7d:87:21:29:d3:b1:76:88:a8:be:51:2d:2b:a6: 13:db:13:4a:56:f1:03:d2:ba:04:1d:a2:d1:a4:1f:ac:29:df: d2:d6:b1:f7:11:c7:10:ed:91:95:8c:46:ca:32:7f:a6:52:b6: cf:7c:82:76:3f:46:15:a9:c8:71:80:53:0b:24:c2:d5:d8:31: 84:0e:dc:36:8c:1d:f7:af:2b:b2:6a:0e:09:4c:35:21:8f:9b: 8d:62:f0:8f:b3:d6:90:4e:91:24:ef:7f:29:1d:06:3f:44:c3: 3a:c3:6e:19:6a:d1:e8:41:e9:1b:c8:05:3c:3e:2d:03:57:cf: d7:ab:24:8a:21:ef:06:14:63:81:bc:f5:03:cf:4a:80:c0:58: 67:97:33:a7:96:0e:c3:33:f9:bf:92:87:2f:77:8f:10:e2:8b: b2:4b:9d:e1:46:fe:1d:df:28:78:c4:f4:e4:fb:4c:34:20:4d: e4:0d:bf:5f:af:ef:fa:11:1c:af:40:7e:ff:7f:7a:b5:16:ca: 2e:aa:a2:5f:66:42:84:4c:f1:b7:18:3e:f9:b4:92:74:51:f2: 95:03:02:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE86F9Za/4gDN2ozLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ODBmODMyNGYtZDgyMy00NzIzLTk2MTQtZjFmZGM1MTEyNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbdzFBt+OZ4fBtGGjbakuNH56c8PLCtMFnIW YoqKV5L/zmNR5M0JS1xHPNP+EyIS1m9UnQGLuIfgvC1rfxqBvYi/8A8z32BPUQyV 0bW0+LhnOhdq8HPzEwJmTAD2XOeH8cpKVoNKUPvWyl48sKDXeQBig1NHhBrSXD6M vY3NaSUSN9pTTaKH7WN5fZgRksoCuSGpBDGeDq4czkVcapL7rcBym/THKO+BNDZt LEBh18FfqvG5FZNNwgPZ3Oi4uMSUApfwu+UEI7Nr8HnQYoCp1SOXPbdF6dlmQwTx 7qFsQlYtKu5d0cudfc34IKiRGH1VISRRpoXCrpVpVPQQRIROFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdHmIR6/NOkrA9zCBbtIDytJc74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGExZGZlYTYtODk1Ny0z ZThhLTk4ZjQtZTgzYzY0Y2EwMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMzeEhjMDz4+a+ldkG/bX6UToOND1bygSKo69cveJj3OiaKGxkR HVN9hyEp07F2iKi+US0rphPbE0pW8QPSugQdotGkH6wp39LWsfcRxxDtkZWMRsoy f6ZSts98gnY/RhWpyHGAUwskwtXYMYQO3DaMHfevK7JqDglMNSGPm41i8I+z1pBO kSTvfykdBj9EwzrDbhlq0ehB6RvIBTw+LQNXz9erJIoh7wYUY4G89QPPSoDAWGeX M6eWDsMz+b+Shy93jxDii7JLneFG/h3fKHjE9OT7TDQgTeQNv1+v7/oRHK9Afv9/ erUWyi6qol9mQoRM8bcYPvm0knRR8pUDAnQ= -----END CERTIFICATE-----Generated at Wed Sep 23 11:38:22 2026 by rpki-client