$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa File: 8a14b687-8752-306a-bdfa-f859c47ad39e.roa (raw, json) Hash identifier: zG1SuvZcf2Kd3eZOGueInPArYxIG6cT+BME/mj7lC3w= Subject key identifier: B0:D6:E7:2F:C6:39:11:D1:6F:BE:AB:B0:02:B3:F3:4F:F4:1E:79:3A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F3E47DCF6673077C3D976DE40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16832 IP address blocks: 2001:470:2e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:dc:f6:67:30:77:c3:d9:76:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=0d6035c5-ae73-4477-9049-a223fffb1432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:20:19:55:46:b5:e3:ec:73:61:f6:bd:6c: ae:cf:08:1c:f8:85:a3:7f:06:0f:73:b8:b5:87:08: 9e:b7:cd:c5:60:a7:ab:22:57:02:f3:f5:cf:30:45: 0a:bd:a9:d1:24:29:72:e7:cf:35:f2:06:61:a7:e7: 3d:ec:fb:e1:97:e5:56:fc:52:98:3b:a0:a1:5d:94: b2:26:8b:4b:57:bf:b5:5c:cd:b7:b0:41:bc:6d:66: 98:c2:0d:91:47:cd:e4:7a:68:27:82:bf:03:90:59: 34:0e:24:fe:2e:5d:0b:bd:90:6c:8b:f0:65:3e:a0: 38:49:07:46:10:a3:71:62:74:9f:c4:34:66:22:ba: 3e:5a:92:3a:c2:0e:38:aa:de:08:29:c8:01:ea:17: ba:2d:34:e6:c5:f4:6c:59:53:9f:f9:d9:1b:e2:91: 16:ce:85:3a:e5:a4:94:e5:09:b2:67:37:a0:92:bb: 99:05:51:c6:e3:d6:1c:e1:6e:f1:8a:7d:ac:33:9a: e8:5d:44:cd:07:3f:69:5a:39:05:13:22:8e:a8:75: 99:50:2e:e3:1c:0b:15:1b:e3:df:8d:05:16:de:5c: f6:84:c8:99:35:a2:46:1f:4d:74:aa:b9:7e:73:60: c7:cf:5f:26:16:e6:59:bc:87:ea:8c:f9:34:eb:30: 6e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D6:E7:2F:C6:39:11:D1:6F:BE:AB:B0:02:B3:F3:4F:F4:1E:79:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:88:e6:9f:d7:27:77:80:10:51:06:0c:bb:cc:80:25:21:b1: 9d:11:57:dd:b2:5e:38:b0:a8:24:81:0e:52:ff:66:3c:01:72: a1:a4:b8:ba:ff:d2:42:9b:92:aa:35:01:cf:7b:e8:70:18:c8: 9d:ae:3b:6f:0e:9c:fa:61:55:ef:7a:74:ad:da:24:32:ab:fb: fc:94:0a:ea:70:6d:3c:65:5e:10:49:7c:91:99:7d:8e:f9:b3: 02:e4:45:a0:93:7f:4d:3c:01:5b:0a:c3:de:8a:3a:6f:2b:ab: 41:ec:7b:24:bb:4b:be:2b:c0:2f:2b:6b:5c:81:3f:1e:20:49: 0f:0a:ca:f6:c1:5a:5c:40:b1:ae:6b:5a:5f:bf:b4:e9:b0:cc: c3:03:1f:42:bd:bb:55:4b:bd:b7:9b:a6:50:52:d3:b7:1e:b6: 44:9f:40:6c:ae:96:46:86:20:38:df:54:2f:ca:4d:11:e4:b3: 9f:fe:22:0a:36:d0:a8:17:df:e8:86:1f:70:44:18:d0:74:69: 39:01:3b:97:a4:c5:a9:5c:07:81:c3:17:b6:0b:23:c7:e7:89: 0d:a2:c8:9d:96:a5:5a:8d:5f:9d:17:b6:e3:32:39:ce:95:8e: 8e:63:f7:66:47:1d:d7:64:f5:6b:f1:8e:86:9e:53:27:42:30: 83:66:b4:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+R9z2ZzB3w9l23kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MGQ2MDM1YzUtYWU3My00NDc3LTkwNDktYTIyM2ZmZmIxNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkgGVVGtePsc2H2vWyuzwgc+IWjfwYPc7i1 hwiet83FYKerIlcC8/XPMEUKvanRJCly58818gZhp+c97Pvhl+VW/FKYO6ChXZSy JotLV7+1XM23sEG8bWaYwg2RR83kemgngr8DkFk0DiT+Ll0LvZBsi/BlPqA4SQdG EKNxYnSfxDRmIro+WpI6wg44qt4IKcgB6he6LTTmxfRsWVOf+dkb4pEWzoU65aSU 5QmyZzegkruZBVHG49Yc4W7xin2sM5roXUTNBz9pWjkFEyKOqHWZUC7jHAsVG+Pf jQUW3lz2hMiZNaJGH010qrl+c2DHz18mFuZZvIfqjPk06zBu4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDW5y/GORHRb76rsAKz80/0Hnk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGExNGI2ODctODc1Mi0z MDZhLWJkZmEtZjg1OWM0N2FkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABiI5p/XJ3eAEFEGDLvMgCUhsZ0RV92yXjiwqCSBDlL/ZjwBcqGk uLr/0kKbkqo1Ac976HAYyJ2uO28OnPphVe96dK3aJDKr+/yUCupwbTxlXhBJfJGZ fY75swLkRaCTf008AVsKw96KOm8rq0HseyS7S74rwC8ra1yBPx4gSQ8KyvbBWlxA sa5rWl+/tOmwzMMDH0K9u1VLvbebplBS07cetkSfQGyulkaGIDjfVC/KTRHks5/+ Igo20KgX3+iGH3BEGNB0aTkBO5ekxalcB4HDF7YLI8fniQ2iyJ2WpVqNX50XtuMy Oc6Vjo5j92ZHHddk9WvxjoaeUydCMINmtF8= -----END CERTIFICATE-----Generated at Sat Sep 26 07:50:59 2026 by rpki-client