$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa File: 0e0ef29a-9032-32ce-bb82-4792d0881629.roa (raw, json) Hash identifier: /58icBpHYzx63yhpOMNqR99gJyXfBPsxqk7uEUrP5nE= Subject key identifier: 0B:AB:63:90:49:4E:71:89:0C:1E:32:77:19:AB:2D:25:83:A7:51:E7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F480D60D9D4E98D0A56A44B40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 266809 IP address blocks: 2001:470:3b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:60:d9:d4:e9:8d:0a:56:a4:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=afe46452-79be-4672-855e-0f41b9ba70a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:01:53:24:2f:5e:c7:5c:c1:cc:e8:e5:82: 9b:33:a2:0d:27:6e:ec:2f:0c:72:29:ca:66:92:5c: a8:ee:8b:c4:58:3a:27:95:93:66:c8:28:48:59:98: 3f:bd:80:b8:1e:32:0e:0a:8b:92:9a:f3:79:a2:d1: c5:bf:26:2f:d9:d2:57:c0:73:fd:b4:28:ba:c2:f6: bb:f1:3d:5d:11:f0:30:22:d0:bc:3a:75:9f:8c:9f: 66:06:8e:9a:49:31:60:bf:3e:e1:9a:74:b3:87:d5: 62:5e:19:46:dd:fa:c2:e5:ca:f5:24:b1:1b:58:02: 6d:0e:69:ef:22:e7:57:f2:36:a6:fb:8f:b5:73:76: e5:c7:85:76:57:29:47:35:e3:74:87:f6:77:f8:cd: 6d:5b:5b:eb:da:46:03:04:62:1a:fc:5c:07:a1:f6: 94:3e:91:97:ed:48:e0:af:af:f4:43:e6:9e:4e:1e: 9d:a0:13:8c:10:66:e5:b2:ef:41:fe:10:ad:f6:7c: 46:bd:26:ac:cd:e5:2b:87:31:00:09:da:65:45:cb: d8:6b:d4:13:e3:68:73:9d:11:98:94:cd:2f:19:42: be:70:cb:26:11:e2:a4:43:e7:7c:94:73:eb:6f:48: be:7f:4f:53:c7:3f:6a:a9:b8:82:04:10:32:50:6a: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:63:90:49:4E:71:89:0C:1E:32:77:19:AB:2D:25:83:A7:51:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:da:38:1e:37:d2:92:34:14:45:5d:c7:df:48:f5:d1:79:c2: 25:79:d5:ac:2c:17:7b:1d:95:89:54:a2:4a:e8:2d:39:c7:09: af:2e:46:54:f6:d2:39:43:7a:2c:bf:0d:cd:82:c9:3a:95:86: e1:d9:5a:0b:d4:cf:ed:a2:b0:26:e8:7a:92:7a:d2:a0:ca:f8: 19:5b:67:f5:76:12:06:cd:ab:ed:c0:81:7f:a6:24:44:92:8b: 2d:17:5c:fb:6c:fd:c2:52:b1:c2:28:67:9b:f0:08:ce:7f:09: 76:3a:c9:10:d0:34:e2:2e:f0:61:9b:44:95:b8:1f:f2:75:4a: 03:40:b7:e5:10:d2:7e:a4:be:0b:46:72:1b:fe:13:7d:ea:42: 9c:d3:1d:c1:9c:b6:7e:45:c9:53:61:01:13:76:25:e8:f8:86: a2:89:2b:de:f5:da:7f:49:40:e4:d2:6c:f6:93:9d:95:8e:d2: 51:bd:2d:a6:10:ea:2f:c6:0c:6a:d9:ea:04:ef:4f:a1:36:a8: 41:f8:2c:c6:f4:49:a7:5d:5b:23:00:30:4d:af:2b:70:44:38: b0:2f:02:44:a5:8d:e8:4e:dc:c3:d6:1a:22:fe:5f:72:5b:89: b5:d7:a3:a8:89:52:82:d4:a4:04:63:d2:7a:d1:b7:85:15:f5: af:6c:13:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDWDZ1OmNClakS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWZlNDY0NTItNzliZS00NjcyLTg1NWUtMGY0MWI5YmE3MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKABUyQvXsdcwczo5YKbM6INJ27sLwxyKcpm klyo7ovEWDonlZNmyChIWZg/vYC4HjIOCouSmvN5otHFvyYv2dJXwHP9tCi6wva7 8T1dEfAwItC8OnWfjJ9mBo6aSTFgvz7hmnSzh9ViXhlG3frC5cr1JLEbWAJtDmnv IudX8jam+4+1c3blx4V2VylHNeN0h/Z3+M1tW1vr2kYDBGIa/FwHofaUPpGX7Ujg r6/0Q+aeTh6doBOMEGblsu9B/hCt9nxGvSaszeUrhzEACdplRcvYa9QT42hznRGY lM0vGUK+cMsmEeKkQ+d8lHPrb0i+f09Txz9qqbiCBBAyUGrSWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAurY5BJTnGJDB4ydxmrLSWDp1HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGUwZWYyOWEtOTAzMi0z MmNlLWJiODItNDc5MmQwODgxNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFraOB430pI0FEVdx99I9dF5wiV51awsF3sdlYlUokroLTnHCa8u RlT20jlDeiy/Dc2CyTqVhuHZWgvUz+2isCboepJ60qDK+BlbZ/V2EgbNq+3AgX+m JESSiy0XXPts/cJSscIoZ5vwCM5/CXY6yRDQNOIu8GGbRJW4H/J1SgNAt+UQ0n6k vgtGchv+E33qQpzTHcGctn5FyVNhARN2Jej4hqKJK9712n9JQOTSbPaTnZWO0lG9 LaYQ6i/GDGrZ6gTvT6E2qEH4LMb0SaddWyMAME2vK3BEOLAvAkSljehO3MPWGiL+ X3JbibXXo6iJUoLUpARj0nrRt4UV9a9sE/g= -----END CERTIFICATE-----Generated at Sun Sep 27 09:54:47 2026 by rpki-client