$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa File: a9a48928-2461-3b39-a10f-1672d3db066b.roa (raw, json) Hash identifier: xtgPT2hG4+eq7NTiRTPgcPF6cbeNFhfpXJdBkPvxxOc= Subject key identifier: 89:85:3D:74:81:5A:9C:D2:35:33:CF:84:3E:34:08:D4:A2:A7:37:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F23C27E33E8376EBC3A201480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396354 IP address blocks: 2001:470:33f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:7e:33:e8:37:6e:bc:3a:20:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=702e075b-a9ce-4775-bbdc-af4040edf3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:74:d3:2b:a8:e8:64:19:9e:10:0d:46:f5: 2e:b2:3a:27:9d:64:18:55:13:fd:f5:76:05:d1:08: a4:81:dd:3a:5e:55:81:64:72:bd:04:64:21:67:e0: 6c:6d:10:7b:4a:52:2c:6c:53:dd:1e:21:81:e4:9e: b4:1d:b4:ea:a5:16:c7:f8:80:d2:34:8d:92:67:d3: 46:d9:62:bb:0c:4d:1c:04:07:92:08:24:7e:bc:17: b2:be:ec:c7:11:2d:16:57:bd:15:81:d7:db:bb:c4: aa:44:95:86:43:b0:7b:d6:ad:8d:6c:b6:07:e6:64: 7d:ae:04:da:1a:b7:8a:44:85:39:f7:37:e6:66:ad: 3d:cd:a0:41:75:94:62:f0:a8:87:da:45:61:c6:05: b5:2c:26:c7:bd:06:b6:e5:09:3f:74:c1:d3:d5:a9: a0:61:a6:49:3e:27:e0:02:69:c6:6d:6a:61:1d:f0: df:75:2f:56:a0:08:04:cd:73:30:cc:53:93:87:17: 99:05:f6:9f:8a:41:84:5c:19:1d:62:65:bb:0e:04: 34:7a:90:4d:5b:70:57:e7:02:b5:91:cf:71:ca:e3: e5:93:03:0e:80:11:2a:d1:c7:dd:d0:c7:4f:85:21: 95:28:4d:07:ca:3b:bc:54:f6:3b:80:70:6e:27:3d: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:3D:74:81:5A:9C:D2:35:33:CF:84:3E:34:08:D4:A2:A7:37:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:33f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fd:9e:36:6f:77:bb:7b:23:52:66:b4:0d:9c:8e:b1:a1:82: 7e:be:94:66:10:ed:07:3c:27:de:0b:83:eb:21:0c:ec:2c:88: d2:a3:7a:0e:3d:23:16:a7:04:05:8d:05:11:12:f3:0a:70:fa: f5:86:b1:77:c0:ec:df:c7:56:a4:70:46:c4:4a:cf:13:ff:42: fc:1a:b4:22:12:29:b5:d4:d1:bf:f7:cd:4c:b9:97:0d:42:88: c4:c7:8f:31:3c:31:ed:23:81:31:13:d0:59:bb:1c:d4:c0:00: 7a:e9:58:3c:99:0c:f8:71:88:f6:92:86:e8:3c:6e:3a:f5:01: 44:a9:f7:0f:bc:ed:7c:ee:f5:ef:d0:31:b5:67:54:2b:01:40: ab:00:8c:f1:ff:df:e7:4e:24:8d:52:bc:21:e8:c0:77:09:11: 48:29:75:fa:1a:fe:f0:9f:96:27:4d:a8:91:54:16:3c:a1:1e: 5b:3c:95:2e:7a:0e:ff:62:85:e9:83:23:49:3b:e3:c7:f5:d0: d3:a1:77:a9:d0:4c:10:02:00:c4:e5:d1:26:fd:9c:18:04:02: 03:41:fb:5b:06:d6:55:e9:39:b1:6d:b5:97:dc:db:f7:06:36: 7a:31:f8:f6:58:6f:b0:b3:54:ab:fb:ca:33:31:98:ea:23:f0: 2e:13:0f:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwn4z6DduvDogFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NzAyZTA3NWItYTljZS00Nzc1LWJiZGMtYWY0MDQwZWRmM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6R00yuo6GQZnhANRvUusjonnWQYVRP99XYF 0Qikgd06XlWBZHK9BGQhZ+BsbRB7SlIsbFPdHiGB5J60HbTqpRbH+IDSNI2SZ9NG 2WK7DE0cBAeSCCR+vBeyvuzHES0WV70Vgdfbu8SqRJWGQ7B71q2NbLYH5mR9rgTa GreKRIU59zfmZq09zaBBdZRi8KiH2kVhxgW1LCbHvQa25Qk/dMHT1amgYaZJPifg AmnGbWphHfDfdS9WoAgEzXMwzFOThxeZBfafikGEXBkdYmW7DgQ0epBNW3BX5wK1 kc9xyuPlkwMOgBEq0cfd0MdPhSGVKE0Hyju8VPY7gHBuJz3AlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImFPXSBWpzSNTPPhD40CNSipzfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTlhNDg5MjgtMjQ2MS0z YjM5LWExMGYtMTY3MmQzZGIwNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHX9njZvd7t7I1JmtA2cjrGhgn6+lGYQ7Qc8J94Lg+shDOwsiNKj eg49IxanBAWNBRES8wpw+vWGsXfA7N/HVqRwRsRKzxP/QvwatCISKbXU0b/3zUy5 lw1CiMTHjzE8Me0jgTET0Fm7HNTAAHrpWDyZDPhxiPaShug8bjr1AUSp9w+87Xzu 9e/QMbVnVCsBQKsAjPH/3+dOJI1SvCHowHcJEUgpdfoa/vCflidNqJFUFjyhHls8 lS56Dv9ihemDI0k748f10NOhd6nQTBACAMTl0Sb9nBgEAgNB+1sG1lXpObFttZfc 2/cGNnox+PZYb7CzVKv7yjMxmOoj8C4TD2s= -----END CERTIFICATE-----Generated at Mon Sep 28 18:13:46 2026 by rpki-client