$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa File: 9a00f132-1002-3836-92ff-a14a40c528fc.roa (raw, json) Hash identifier: mR5xgBNEDYr/1k8ACV7M0hAUMiqWqJEUfcI3OzIsMWk= Subject key identifier: 1C:18:9B:E2:7D:41:B6:37:4B:D6:79:D2:43:52:13:B8:CF:B6:3B:1B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F14679E5C0D21682BFE8BB820 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 28773 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9e:5c:0d:21:68:2b:fe:8b:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=59d06e2f-e284-4a73-91a6-ee2053973fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:63:08:12:7f:ad:eb:0b:6e:3e:33:4b:b5: 62:07:49:e3:68:cd:35:8d:1c:f3:9e:bc:14:41:60: bc:61:23:69:d0:8b:53:82:f7:85:96:6d:97:2f:10: c4:4e:14:76:70:e7:93:a2:c6:e3:71:db:fa:2c:60: f5:7f:f3:c0:bb:44:d0:ac:51:83:2b:3d:1f:1d:d2: 63:9d:e6:11:c6:11:75:c6:7c:cd:09:a0:e1:3e:80: 2f:cc:de:4f:9a:e6:5e:67:c1:0a:cb:80:d1:54:e9: 88:8e:51:d5:9b:81:eb:62:51:bc:3a:6d:6f:c3:63: 99:37:00:6c:1b:fc:85:24:d8:2e:b0:4d:3c:69:6b: 52:95:0f:ed:59:36:b0:c9:95:86:2e:94:c8:c9:d3: 10:81:b6:76:dd:05:bc:28:55:62:27:03:88:c6:c4: 70:84:9e:cc:92:00:36:68:f6:a1:28:38:6c:3d:99: ba:44:fd:ad:59:0e:90:ba:54:06:fc:1d:3b:1c:f7: d9:82:74:5e:08:68:ac:d5:89:75:2e:0b:9f:cc:c1: a3:01:f1:44:1a:69:98:59:b0:2d:4e:af:a8:b4:8f: 68:3f:73:c9:86:c0:19:c7:43:d0:38:a2:87:78:5c: b2:b3:3a:65:75:11:31:13:29:a0:8a:c3:ca:31:13: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:9B:E2:7D:41:B6:37:4B:D6:79:D2:43:52:13:B8:CF:B6:3B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a00f132-1002-3836-92ff-a14a40c528fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:24:cb:b8:5a:98:38:c9:f2:f1:a5:0a:3e:de:79:0f:50:c2: 7c:3e:98:7d:4c:ce:83:f1:d1:3e:c1:e2:8a:a6:8e:ad:77:bc: 75:8b:91:fb:de:d4:1d:a8:3f:f8:57:67:38:34:c0:72:d4:5b: a8:ae:e2:4d:0c:1a:fa:39:a4:e9:7d:f2:88:5a:54:bf:2b:51: b7:c6:32:b4:ae:5d:3e:7d:e6:e9:4a:7f:61:04:bc:51:fe:4d: a2:b0:5d:b9:11:8a:3e:e7:f1:d4:b7:1c:fb:a1:42:a5:57:5e: b6:e8:05:2e:a2:67:e6:a3:ce:31:7e:3f:0f:00:e4:f3:59:e6: 04:07:0e:a0:f8:a3:e7:53:40:1b:eb:77:38:f9:53:3a:c2:6d: 2d:8e:e6:ee:29:88:c7:a4:ba:23:53:fd:89:c6:3e:82:e4:79: 34:5a:89:a8:3b:98:98:d3:2e:67:3e:df:69:ec:f6:2e:9b:f8: 01:8c:4b:ef:ba:be:97:81:07:cb:97:3c:ef:54:e5:73:be:2c: 35:1a:1e:5e:a1:a3:f4:e5:0b:e1:5c:ff:65:40:d4:cb:1a:42: a2:6b:c5:b1:c4:b1:7d:63:0d:2a:a9:53:40:39:d0:96:2c:31: f8:cf:22:e0:89:e8:61:24:b2:19:0e:4e:de:37:9e:d6:07:c7: e9:b6:fe:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ55cDSFoK/6LuCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NTlkMDZlMmYtZTI4NC00YTczLTkxYTYtZWUyMDUzOTczZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDVjCBJ/resLbj4zS7ViB0njaM01jRzznrwU QWC8YSNp0ItTgveFlm2XLxDEThR2cOeTosbjcdv6LGD1f/PAu0TQrFGDKz0fHdJj neYRxhF1xnzNCaDhPoAvzN5PmuZeZ8EKy4DRVOmIjlHVm4HrYlG8Om1vw2OZNwBs G/yFJNgusE08aWtSlQ/tWTawyZWGLpTIydMQgbZ23QW8KFViJwOIxsRwhJ7MkgA2 aPahKDhsPZm6RP2tWQ6QulQG/B07HPfZgnReCGis1Yl1LgufzMGjAfFEGmmYWbAt Tq+otI9oP3PJhsAZx0PQOKKHeFyyszpldRExEymgisPKMROSJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwYm+J9QbY3S9Z50kNSE7jPtjsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWEwMGYxMzItMTAwMi0z ODM2LTkyZmYtYTE0YTQwYzUyOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoky7hamDjJ8vGlCj7eeQ9Qwnw+mH1MzoPx0T7B4oqmjq13vHWL kfve1B2oP/hXZzg0wHLUW6iu4k0MGvo5pOl98ohaVL8rUbfGMrSuXT595ulKf2EE vFH+TaKwXbkRij7n8dS3HPuhQqVXXrboBS6iZ+ajzjF+Pw8A5PNZ5gQHDqD4o+dT QBvrdzj5UzrCbS2O5u4piMekuiNT/YnGPoLkeTRaiag7mJjTLmc+32ns9i6b+AGM S++6vpeBB8uXPO9U5XO+LDUaHl6ho/TlC+Fc/2VA1MsaQqJrxbHEsX1jDSqpU0A5 0JYsMfjPIuCJ6GEkshkOTt43ntYHx+m2/qE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:44:56 2026 by rpki-client