$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4db4b5ae-5101-3365-a714-23248a71eed7.roa File: 4db4b5ae-5101-3365-a714-23248a71eed7.roa (raw, json) Hash identifier: zvXZPs7sYnKrA305a/Nm8bs1oLnEUNfh5no5+HGjvt8= Subject key identifier: 27:29:23:AD:EF:FD:FC:87:D8:C4:7F:04:C6:77:18:6E:49:77:3C:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F130237BC13D6B499C8B130F0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4db4b5ae-5101-3365-a714-23248a71eed7.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 41568 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:37:bc:13:d6:b4:99:c8:b1:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=2037b0ae-2ee3-4461-87e6-eae45baeeb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:7b:e1:bd:8c:53:cd:96:74:94:db:e7:37: 4a:2c:26:ca:29:74:9a:43:0b:66:29:07:f4:ef:34: cf:52:e0:39:de:cb:57:b5:a7:9c:32:f7:f3:72:8d: b2:14:19:e1:82:ce:92:6c:2f:59:37:8a:5e:68:ba: e2:7d:61:2e:b9:b9:75:00:d9:33:03:56:17:a6:da: 17:6d:02:b6:56:05:9d:34:dd:20:79:f0:b2:77:e4: a4:c3:93:7e:98:81:14:c6:76:11:83:38:18:59:6f: 5d:a6:a2:1c:af:d5:09:0b:8c:fe:9e:15:0e:36:91: a8:0d:1a:34:c3:a9:50:04:f8:2b:0f:14:16:d7:8f: 21:ad:e4:18:35:b0:89:4a:00:27:67:42:92:81:3a: 81:c5:ca:1c:11:ed:3e:a2:ec:d1:e3:21:b4:cf:54: 01:0c:aa:ec:18:5d:e7:df:0d:a0:a5:88:3f:b2:f8: c1:c5:7f:cc:15:ea:ff:52:04:15:a1:66:84:00:49: f3:fd:ad:40:c9:ba:f6:8a:9b:e4:b4:6f:4a:fa:fe: 9f:34:12:87:a5:fd:61:fe:39:a7:ff:1f:81:1c:a8: 40:35:ff:54:ac:6e:b4:b2:92:ef:82:b6:74:ae:76: ae:99:2b:0b:e6:6a:62:a2:0c:7f:ad:3b:35:88:13: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:23:AD:EF:FD:FC:87:D8:C4:7F:04:C6:77:18:6E:49:77:3C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4db4b5ae-5101-3365-a714-23248a71eed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6b:fb:21:4a:96:33:f6:e9:fa:ee:c0:95:db:62:5b:4b:9c: de:11:57:c8:11:cd:b8:e6:aa:8e:f9:02:dc:23:8a:fb:65:2a: 67:06:31:40:a5:e6:e4:ba:79:0e:44:26:6d:3e:29:e9:b9:e6: 8f:05:f3:a2:93:69:74:ab:66:a9:99:b0:c4:79:f0:fe:4d:cd: e5:26:a5:f3:e9:61:fa:93:8e:23:1c:cd:74:1d:fc:c6:7f:17: c3:46:59:8c:af:f5:15:17:f0:3d:ff:d3:29:18:7b:09:81:64: a0:d7:91:96:fa:70:9a:fe:65:ee:50:91:fc:a4:4a:77:4c:14: b6:43:f9:7a:53:c2:cf:b6:0d:fd:35:14:b6:a4:0c:09:ca:5f: 0e:93:e9:03:61:c6:b7:2f:59:ce:a3:55:90:3f:03:70:2d:7c: 49:ce:3f:2a:10:b0:a2:83:0b:83:9d:76:a4:26:a3:77:11:f9: 62:93:83:bf:48:a8:47:29:58:38:aa:cd:7e:94:3f:74:73:3c: 8b:c0:80:8e:28:32:00:11:2c:e1:c3:94:53:f1:52:bb:32:79: f2:4a:cc:27:73:d8:72:04:af:36:99:78:50:21:62:9e:ca:66: ac:7a:d1:5b:e4:da:5f:24:3f:37:5f:6f:8b:28:e4:d9:58:79: df:70:ab:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAje8E9a0mcixMPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MjAzN2IwYWUtMmVlMy00NDYxLTg3ZTYtZWFlNDViYWVlYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLl74b2MU82WdJTb5zdKLCbKKXSaQwtmKQf0 7zTPUuA53stXtaecMvfzco2yFBnhgs6SbC9ZN4peaLrifWEuubl1ANkzA1YXptoX bQK2VgWdNN0gefCyd+Skw5N+mIEUxnYRgzgYWW9dpqIcr9UJC4z+nhUONpGoDRo0 w6lQBPgrDxQW148hreQYNbCJSgAnZ0KSgTqBxcocEe0+ouzR4yG0z1QBDKrsGF3n 3w2gpYg/svjBxX/MFer/UgQVoWaEAEnz/a1Aybr2ipvktG9K+v6fNBKHpf1h/jmn /x+BHKhANf9UrG60spLvgrZ0rnaumSsL5mpiogx/rTs1iBM5hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCcpI63v/fyH2MR/BMZ3GG5JdzwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGRiNGI1YWUtNTEwMS0z MzY1LWE3MTQtMjMyNDhhNzFlZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1r+yFKljP26fruwJXbYltLnN4RV8gRzbjmqo75AtwjivtlKmcG MUCl5uS6eQ5EJm0+Kem55o8F86KTaXSrZqmZsMR58P5NzeUmpfPpYfqTjiMczXQd /MZ/F8NGWYyv9RUX8D3/0ykYewmBZKDXkZb6cJr+Ze5QkfykSndMFLZD+XpTws+2 Df01FLakDAnKXw6T6QNhxrcvWc6jVZA/A3AtfEnOPyoQsKKDC4OddqQmo3cR+WKT g79IqEcpWDiqzX6UP3RzPIvAgI4oMgARLOHDlFPxUrsyefJKzCdz2HIErzaZeFAh Yp7KZqx60Vvk2l8kPzdfb4so5NlYed9wq/k= -----END CERTIFICATE-----Generated at Wed Sep 30 15:25:41 2026 by rpki-client