$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa File: 849d0b80-affe-33e0-9086-fe6017b00431.roa (raw, json) Hash identifier: oEruPyq80EjbjrdxnwgZTyQsUgZUxosYT9+dPoqJTt8= Subject key identifier: B0:AA:82:93:20:E9:7C:2E:AE:29:81:DD:EB:F8:59:23:98:FE:00:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F49876C54005D289C194D5E90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401929 IP address blocks: 2001:470:531::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:6c:54:00:5d:28:9c:19:4d:5e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=067722c9-148a-48f4-bcd7-83d4773618d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:b2:04:bc:59:e5:aa:bc:93:7e:26:8b:7a: 4b:85:3f:1a:76:ad:6e:2a:b8:ff:89:31:30:30:6e: 77:50:34:f3:30:b8:8e:24:8e:8b:8a:22:79:8f:2e: 3f:8f:2b:e4:be:36:77:35:f9:7d:7c:00:3d:70:62: bb:12:89:a1:85:41:fc:4e:cf:24:c9:df:68:01:ee: 9c:da:3f:dc:e9:f3:5f:4a:e1:b1:15:7a:29:81:3d: cb:04:e2:c2:cd:21:16:88:7b:f1:68:17:04:7e:7c: 57:28:be:f6:0d:a2:53:db:3b:b4:6f:47:59:2b:dc: 1b:3a:06:af:36:09:4e:58:da:82:c6:35:ed:8e:66: d4:4d:06:90:56:20:b5:6d:61:7a:c0:d7:c7:84:58: 92:c7:fc:fc:3e:df:46:37:3e:8d:f8:a5:ea:36:5c: fa:d5:aa:26:66:8f:5d:87:ef:58:90:1a:1b:55:fc: 04:0d:e6:14:13:7c:a2:8c:e5:32:44:f9:6d:30:6b: b3:b2:f0:43:75:25:04:46:4a:d1:9c:b3:7c:7f:66: 67:9b:a5:57:27:8f:41:ce:84:1d:e7:b7:37:36:c7: 31:1d:df:02:43:f3:37:0f:6e:ff:dd:17:a2:29:8e: c7:be:87:f4:0a:9a:c0:e7:ca:af:ef:8d:bb:12:34: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AA:82:93:20:E9:7C:2E:AE:29:81:DD:EB:F8:59:23:98:FE:00:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:531::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:64:49:ac:96:8f:e7:06:a4:54:2a:05:78:0c:a9:03:59:ab: d5:dd:e6:f1:47:54:4e:af:a5:5a:3c:73:cc:87:ca:fa:d9:6b: 64:b9:dc:58:83:76:e3:4b:5b:d8:cf:4c:57:2e:13:47:b9:fe: b6:03:ce:ba:f0:1d:09:94:44:0b:e3:04:2e:06:18:5a:88:b1: 16:17:58:8a:cc:4d:17:05:88:43:5e:a1:3f:64:3b:dc:b3:ea: 6e:1c:68:63:cf:ed:e1:af:3a:57:c6:2c:a7:be:66:b2:01:e7: 43:22:54:a2:74:62:99:30:67:22:17:39:00:7c:54:17:a0:b7: 95:26:73:15:18:a5:c4:cf:75:44:10:24:fc:ce:13:93:d6:67: 44:98:2c:d0:45:cb:5f:30:32:e0:25:19:21:c7:5f:11:86:3f: 4d:99:4b:a8:d7:35:94:34:eb:38:c0:d3:ec:95:38:e8:e3:43: fe:e6:e6:24:7a:bc:d6:8a:db:0a:79:d9:f9:63:87:fa:0a:7f: 6f:66:ae:4e:94:4f:62:63:e2:1f:a8:d6:72:24:76:c5:24:d9: 7e:0b:09:c8:0c:4c:d1:b1:8a:13:20:72:bd:34:6a:2d:b9:62: e3:2e:cd:00:2e:55:05:40:06:52:b4:97:ac:cb:7f:36:47:56: 2a:2b:fe:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh2xUAF0onBlNXpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDY3NzIyYzktMTQ4YS00OGY0LWJjZDctODNkNDc3MzYxOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ayBLxZ5aq8k34mi3pLhT8adq1uKrj/iTEw MG53UDTzMLiOJI6LiiJ5jy4/jyvkvjZ3Nfl9fAA9cGK7EomhhUH8Ts8kyd9oAe6c 2j/c6fNfSuGxFXopgT3LBOLCzSEWiHvxaBcEfnxXKL72DaJT2zu0b0dZK9wbOgav NglOWNqCxjXtjmbUTQaQViC1bWF6wNfHhFiSx/z8Pt9GNz6N+KXqNlz61aomZo9d h+9YkBobVfwEDeYUE3yijOUyRPltMGuzsvBDdSUERkrRnLN8f2Znm6VXJ49BzoQd 57c3NscxHd8CQ/M3D27/3ReiKY7Hvof0CprA58qv7427EjQO5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLCqgpMg6XwurimB3ev4WSOY/gBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ5ZDBiODAtYWZmZS0z M2UwLTkwODYtZmU2MDE3YjAwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMFkSayWj+cGpFQqBXgMqQNZq9Xd5vFHVE6vpVo8c8yHyvrZa2S5 3FiDduNLW9jPTFcuE0e5/rYDzrrwHQmURAvjBC4GGFqIsRYXWIrMTRcFiENeoT9k O9yz6m4caGPP7eGvOlfGLKe+ZrIB50MiVKJ0YpkwZyIXOQB8VBegt5UmcxUYpcTP dUQQJPzOE5PWZ0SYLNBFy18wMuAlGSHHXxGGP02ZS6jXNZQ06zjA0+yVOOjjQ/7m 5iR6vNaK2wp52fljh/oKf29mrk6UT2Jj4h+o1nIkdsUk2X4LCcgMTNGxihMgcr00 ai25YuMuzQAuVQVABlK0l6zLfzZHVior/kA= -----END CERTIFICATE-----Generated at Sat Sep 26 07:38:51 2026 by rpki-client