$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa File: 86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa (raw, json) Hash identifier: IKutQHpm8bJ16UuMMj403+4ea8JI+7zC5v6Dkr5eB0w= Subject key identifier: 99:E2:DD:52:91:B4:0B:91:4D:E5:2A:1C:AF:54:2A:A7:E0:70:1C:A8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F268CFCE1B500747DA53372E0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 399672 IP address blocks: 2001:470:568::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8c:fc:e1:b5:00:74:7d:a5:33:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=439f0f17-27cb-42df-9ebf-4fcf24e6fed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:56:2b:7c:30:35:13:3d:d0:f2:3d:ca:47: b0:fb:f1:c3:3d:2e:59:5f:de:a6:cd:9b:a4:13:be: 6d:10:e3:2a:9b:f4:42:f2:4a:a0:d8:b2:b9:f0:e3: af:de:ec:ed:24:28:66:91:be:20:bd:ad:7d:bc:7b: 62:0d:bc:78:cc:94:94:30:c2:d0:31:ee:bf:b3:3b: 79:f2:aa:a9:4f:26:5e:57:3a:62:a1:67:c1:df:40: 14:54:68:58:c0:e0:aa:4d:f7:c6:50:42:2e:31:a2: 96:0a:0c:7c:ea:9a:47:26:fe:1b:4a:d0:c7:0d:f9: c5:d6:03:25:e6:63:36:c8:4d:c7:15:be:98:ca:d6: 4c:2a:50:6b:bf:c2:0f:47:00:54:6c:96:21:e3:2f: 5f:40:56:22:f9:42:26:aa:9f:c0:c2:73:02:ed:cc: 6d:70:0c:c2:35:ea:9e:81:23:ba:3c:c3:c2:cc:18: 22:95:08:cc:82:68:9f:99:35:ed:6b:6b:a7:94:e8: a0:53:4f:16:43:85:3c:a1:1c:ee:df:7c:d5:96:f2: 2a:38:7d:ee:c9:27:06:a9:9c:23:b4:b5:34:7d:79: 5d:ec:60:1f:ff:a0:11:17:07:8d:c0:4c:a9:0c:42: 42:de:c8:38:e9:9c:3e:71:c0:b5:26:20:d1:6a:0c: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:DD:52:91:B4:0B:91:4D:E5:2A:1C:AF:54:2A:A7:E0:70:1C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:568::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f9:7f:70:68:27:7a:21:79:b1:9e:bc:da:2b:79:e5:06:76: 1c:d8:85:f4:38:fc:93:71:2d:00:2b:11:47:8c:a2:4e:4d:ea: a9:ad:ff:e1:e5:a8:30:65:3d:2b:ac:9c:8a:db:d3:a6:29:55: 01:20:3a:5f:c7:7e:c3:a5:ae:1c:5f:0f:38:3c:07:45:29:c3: 00:e9:d0:e8:8d:a7:0a:e8:59:f2:35:41:e0:29:c0:c4:ad:46: 2c:c6:28:62:15:52:07:b4:48:b9:d0:f8:3b:fc:cc:7c:bc:75: 65:bb:bd:75:a1:78:c2:77:dc:92:6f:da:fa:a2:31:d2:e3:f3: 6f:59:0b:c9:91:53:2f:9e:9a:1a:b3:0b:72:9b:f4:18:92:91: 6d:07:9f:ef:57:4f:1b:82:95:40:cf:a6:25:c6:8b:5e:18:a1: 39:fb:1e:ff:3a:66:ea:c4:89:9f:b9:71:53:d9:e2:09:16:22: be:f2:4f:81:ac:0d:df:14:90:8f:10:1d:21:80:c3:9b:13:52: cb:97:db:ca:cc:b5:62:b7:ba:5e:a7:b4:5a:67:30:c4:3e:3a: b3:da:c5:bb:f4:8e:eb:30:06:ce:46:6b:da:54:8f:b7:e3:e4: 25:d9:0e:c0:00:b2:a4:a3:fc:a0:45:93:e4:b2:57:54:c3:c0: a1:a8:62:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8mjPzhtQB0faUzcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk NDM5ZjBmMTctMjdjYi00MmRmLTllYmYtNGZjZjI0ZTZmZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJdWK3wwNRM90PI9ykew+/HDPS5ZX96mzZuk E75tEOMqm/RC8kqg2LK58OOv3uztJChmkb4gva19vHtiDbx4zJSUMMLQMe6/szt5 8qqpTyZeVzpioWfB30AUVGhYwOCqTffGUEIuMaKWCgx86ppHJv4bStDHDfnF1gMl 5mM2yE3HFb6YytZMKlBrv8IPRwBUbJYh4y9fQFYi+UImqp/AwnMC7cxtcAzCNeqe gSO6PMPCzBgilQjMgmifmTXta2unlOigU08WQ4U8oRzu33zVlvIqOH3uyScGqZwj tLU0fXld7GAf/6ARFweNwEypDEJC3sg46Zw+ccC1JiDRagxL1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJni3VKRtAuRTeUqHK9UKqfgcByoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODZjMmQzZmItMTkyNC0z YjE5LWFhMGMtNjZhODEyYzYzM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADb5f3BoJ3ohebGevNoreeUGdhzYhfQ4/JNxLQArEUeMok5N6qmt /+HlqDBlPSusnIrb06YpVQEgOl/HfsOlrhxfDzg8B0UpwwDp0OiNpwroWfI1QeAp wMStRizGKGIVUge0SLnQ+Dv8zHy8dWW7vXWheMJ33JJv2vqiMdLj829ZC8mRUy+e mhqzC3Kb9BiSkW0Hn+9XTxuClUDPpiXGi14YoTn7Hv86ZurEiZ+5cVPZ4gkWIr7y T4GsDd8UkI8QHSGAw5sTUsuX28rMtWK3ul6ntFpnMMQ+OrPaxbv0juswBs5Ga9pU j7fj5CXZDsAAsqSj/KBFk+SyV1TDwKGoYg8= -----END CERTIFICATE-----Generated at Sun Sep 27 10:32:19 2026 by rpki-client