$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68a60c6b-283c-3f7f-a006-1a1560ef4ee0.roa File: 68a60c6b-283c-3f7f-a006-1a1560ef4ee0.roa (raw, json) Hash identifier: JyQh09juZ2IRrH6zxC9Pw+Zz/LOBVS70XODIeuCWoRI= Subject key identifier: A4:23:FB:1B:08:AB:DB:67:C7:0C:68:33:68:17:CF:56:71:7F:11:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F4987B884D2CF74825235A940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68a60c6b-283c-3f7f-a006-1a1560ef4ee0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 402003 IP address blocks: 2001:470:4ba::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b8:84:d2:cf:74:82:52:35:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8187b985-46ae-4071-b498-04d480b9918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:ed:9a:0b:10:02:17:92:5d:2b:56:c9:97: 90:db:2e:f4:25:44:6d:fa:4c:8c:6a:f0:fb:b3:30: d0:c2:6b:6b:5d:21:3f:19:fb:30:72:05:09:43:08: f3:e1:47:ad:d4:d8:3e:48:ea:58:a3:9a:71:3d:94: a4:38:09:c9:90:ef:d0:30:ba:30:e1:0a:fd:83:73: e9:7a:56:f3:02:72:e7:10:e4:e3:45:96:9d:de:cf: 3a:bd:9a:40:26:40:51:ab:09:d1:72:e3:15:61:2c: ca:0b:6b:72:31:00:4f:11:5b:c5:8e:45:22:b0:58: 40:1c:f0:af:71:29:85:23:ca:24:0c:21:0c:bc:5e: 40:b9:a4:d7:1f:8d:79:07:19:7f:30:69:15:57:8f: 85:c7:f2:a9:e0:7b:f2:c6:89:38:9c:31:3f:66:73: 83:f7:cf:95:c6:f9:21:6f:ae:63:cc:2b:4f:b3:67: ff:89:be:59:81:94:09:14:12:5e:d6:be:c8:15:60: 44:ac:df:72:b5:a7:0d:e5:d7:28:58:97:6e:4d:bd: c5:e3:2f:3f:55:5f:96:7a:ff:fa:70:3f:22:37:76: 90:4a:cc:63:e3:dd:bf:3a:9d:ac:12:19:05:17:f9: 7f:1e:d0:61:25:87:86:d9:03:9c:a5:7d:9b:78:8e: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:FB:1B:08:AB:DB:67:C7:0C:68:33:68:17:CF:56:71:7F:11:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68a60c6b-283c-3f7f-a006-1a1560ef4ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4ba::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:53:8b:89:9b:35:fd:6b:e0:b0:2f:ba:cc:d1:cb:52:98:0b: 30:c2:56:78:99:e6:b8:fc:e5:b9:35:c7:19:12:00:e3:52:78: 6d:06:3b:e4:c4:53:e9:3a:35:0a:4b:4f:11:ab:30:99:f6:be: 4b:df:fa:77:3d:f1:ab:c4:1c:75:df:fe:24:36:1c:96:0f:b4: 64:9c:94:5a:a5:b0:69:36:e4:fe:76:4c:3e:d9:be:87:ec:46: 2b:bc:17:e6:b5:d6:ed:9e:da:e1:84:f5:1b:d1:78:5f:67:ce: 5a:44:36:03:c1:25:d6:d6:2a:b5:57:25:74:85:f0:c8:37:9e: 20:1c:97:a8:4d:bc:3e:8e:03:37:4d:8b:d3:b2:bc:aa:17:23: c5:4b:4e:09:41:d4:df:0f:a4:f0:15:a3:77:58:f8:5c:d7:a5: 4a:ee:b4:9b:a7:9f:c5:b2:62:2f:9a:27:ed:64:79:48:40:24: 60:a7:51:ad:ac:96:3f:0e:8a:7f:c2:e0:c4:17:73:49:43:f7: 3f:e9:e5:70:ca:1e:86:d3:b3:e0:99:58:67:8d:34:b9:49:26: 5e:de:d0:a1:44:d7:a8:fc:b7:dd:7b:82:c1:0f:ee:71:ce:2f: b7:52:69:52:3f:c2:4a:dd:db:69:06:77:d1:33:d3:6c:04:1a: c0:d5:9e:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh7iE0s90glI1qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODE4N2I5ODUtNDZhZS00MDcxLWI0OTgtMDRkNDgwYjk5MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjontmgsQAheSXStWyZeQ2y70JURt+kyMavD7 szDQwmtrXSE/GfswcgUJQwjz4Uet1Ng+SOpYo5pxPZSkOAnJkO/QMLow4Qr9g3Pp elbzAnLnEOTjRZad3s86vZpAJkBRqwnRcuMVYSzKC2tyMQBPEVvFjkUisFhAHPCv cSmFI8okDCEMvF5AuaTXH415Bxl/MGkVV4+Fx/Kp4Hvyxok4nDE/ZnOD98+Vxvkh b65jzCtPs2f/ib5ZgZQJFBJe1r7IFWBErN9ytacN5dcoWJduTb3F4y8/VV+Wev/6 cD8iN3aQSsxj492/Op2sEhkFF/l/HtBhJYeG2QOcpX2beI6usQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQj+xsIq9tnxwxoM2gXz1ZxfxH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjhhNjBjNmItMjgzYy0z ZjdmLWEwMDYtMWExNTYwZWY0ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAS6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtTi4mbNf1r4LAvuszRy1KYCzDCVniZ5rj85bk1xxkSAONSeG0G O+TEU+k6NQpLTxGrMJn2vkvf+nc98avEHHXf/iQ2HJYPtGSclFqlsGk25P52TD7Z vofsRiu8F+a11u2e2uGE9RvReF9nzlpENgPBJdbWKrVXJXSF8Mg3niAcl6hNvD6O AzdNi9OyvKoXI8VLTglB1N8PpPAVo3dY+FzXpUrutJunn8WyYi+aJ+1keUhAJGCn Ua2slj8Oin/C4MQXc0lD9z/p5XDKHobTs+CZWGeNNLlJJl7e0KFE16j8t917gsEP 7nHOL7dSaVI/wkrd22kGd9Ez02wEGsDVnn0= -----END CERTIFICATE-----Generated at Sat Sep 26 10:36:07 2026 by rpki-client