$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa File: 85f9682d-7d53-3d36-93a1-3376b5c05034.roa (raw, json) Hash identifier: n/JnqxSWpEP5VH0PhBVp0Zi98GcNjOfOWzAdDmRAZyo= Subject key identifier: 24:42:BF:D6:70:F0:3A:FF:E7:2D:B6:12:54:91:B6:9E:13:17:2B:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F2ABD257A723CE8ACF32E0380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 15267 IP address blocks: 2001:470:345::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:25:7a:72:3c:e8:ac:f3:2e:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=60b09f6a-74ae-4fec-96f3-1f1dbee65727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:aa:55:e7:0a:7c:d3:d0:e1:cd:a1:36:9f: 2d:24:f1:db:83:c2:c9:40:17:3f:09:bb:4c:fe:48: 73:6a:29:57:2b:25:b7:d3:e9:31:5d:59:4e:cc:fe: 95:13:49:73:4c:f5:78:d4:cf:d8:70:1f:21:47:83: 4c:d5:26:6e:1c:96:28:24:55:0a:4b:a4:a5:ba:3d: 1d:df:ef:29:b8:32:cd:b6:fb:7c:fa:d3:88:0d:1f: bc:0c:f5:7b:b3:23:ad:4c:b6:a2:d2:50:bc:dc:f0: cf:c1:30:64:27:a1:26:8f:97:6a:75:6f:ca:1f:23: 2f:8b:5e:5c:25:44:58:3a:af:ed:fd:10:21:56:02: f0:e3:98:bb:1a:a0:c0:28:d2:70:4e:0d:42:0f:8e: f3:24:f8:81:e8:50:89:d0:b6:1b:35:d1:f5:53:83: 50:86:0e:57:29:e4:11:11:af:4e:17:e4:a6:2a:b7: 12:de:c5:f3:2b:90:bd:ff:bf:49:71:88:1f:61:5a: b9:77:1e:b9:36:e1:84:74:fb:53:c2:d2:06:dc:85: d0:cb:e2:ae:c1:0c:e6:29:af:87:a0:da:e1:c1:49: 68:9a:1e:62:b3:56:28:f8:1e:db:4b:65:72:cf:e8: 78:21:d9:8c:3f:f8:15:9f:a3:90:97:c9:fe:d5:c5: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:BF:D6:70:F0:3A:FF:E7:2D:B6:12:54:91:B6:9E:13:17:2B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85f9682d-7d53-3d36-93a1-3376b5c05034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:345::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:83:8f:05:63:f7:e9:7b:a0:2c:56:9e:91:d5:3d:e6:38:6b: 85:ec:cc:cb:c5:c4:44:21:db:e5:07:01:f7:79:5d:6d:98:a1: 90:b5:f6:07:3e:0b:9c:bf:fa:a1:d8:52:c8:71:de:7c:29:e1: 54:d6:5c:62:27:0c:8d:85:2b:d0:5f:60:f2:2d:1c:86:72:e0: 77:86:fa:1e:97:e0:34:37:e4:5f:5e:6a:ed:cb:9d:1c:8f:fe: d7:45:1a:43:38:d8:23:53:b2:d8:25:a8:60:3a:bf:75:a9:09: 12:ed:fe:c3:da:80:08:58:8e:a3:6e:1a:6a:bd:78:d4:46:d3: 88:55:e2:eb:0c:f1:c0:a7:14:9f:f1:52:f6:31:51:20:e5:8a: 73:31:98:7b:36:1a:d8:4d:5d:21:a0:cc:11:ff:c9:32:53:01: ae:fe:21:ff:87:23:56:9f:fb:c4:72:99:73:cc:5b:18:33:66: de:fd:6f:31:24:82:0b:e2:45:02:5e:83:3b:9b:48:31:e5:56: 76:0e:34:cd:10:04:04:7a:0e:41:74:7b:77:7a:b9:6a:c4:19: f6:f1:59:4b:53:d3:33:ef:d4:51:ae:80:43:d3:80:55:c4:24: e0:2e:7e:cd:5e:dd:a8:c0:be:89:ee:17:07:a5:36:86:ce:a7: be:1d:d0:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvSV6cjzorPMuA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NjBiMDlmNmEtNzRhZS00ZmVjLTk2ZjMtMWYxZGJlZTY1NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN+qVecKfNPQ4c2hNp8tJPHbg8LJQBc/CbtM /khzailXKyW30+kxXVlOzP6VE0lzTPV41M/YcB8hR4NM1SZuHJYoJFUKS6Sluj0d 3+8puDLNtvt8+tOIDR+8DPV7syOtTLai0lC83PDPwTBkJ6Emj5dqdW/KHyMvi15c JURYOq/t/RAhVgLw45i7GqDAKNJwTg1CD47zJPiB6FCJ0LYbNdH1U4NQhg5XKeQR Ea9OF+SmKrcS3sXzK5C9/79JcYgfYVq5dx65NuGEdPtTwtIG3IXQy+KuwQzmKa+H oNrhwUlomh5is1Yo+B7bS2Vyz+h4IdmMP/gVn6OQl8n+1cVitQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRCv9Zw8Dr/5y22ElSRtp4TFyv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVmOTY4MmQtN2Q1My0z ZDM2LTkzYTEtMzM3NmI1YzA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6DjwVj9+l7oCxWnpHVPeY4a4XszMvFxEQh2+UHAfd5XW2YoZC1 9gc+C5y/+qHYUshx3nwp4VTWXGInDI2FK9BfYPItHIZy4HeG+h6X4DQ35F9eau3L nRyP/tdFGkM42CNTstglqGA6v3WpCRLt/sPagAhYjqNuGmq9eNRG04hV4usM8cCn FJ/xUvYxUSDlinMxmHs2GthNXSGgzBH/yTJTAa7+If+HI1af+8RymXPMWxgzZt79 bzEkggviRQJegzubSDHlVnYONM0QBAR6DkF0e3d6uWrEGfbxWUtT0zPv1FGugEPT gFXEJOAufs1e3ajAvonuFwelNobOp74d0Ls= -----END CERTIFICATE-----Generated at Sun Sep 27 02:56:26 2026 by rpki-client