$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa File: c9af9823-5dab-30b5-a5bd-62c799398a5e.roa (raw, json) Hash identifier: Nyjglc5NYntYrZ4EDr+vvZUZnyKI+JJpz6MwTfYpxVc= Subject key identifier: D9:F0:6E:99:47:7E:9E:8D:AE:7F:1E:3F:9E:E2:19:40:56:A7:62:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F51D2C3E5C9C89F65B262E280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 57332 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c3:e5:c9:c8:9f:65:b2:62:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=6b2b2633-8ce5-4231-948b-eaf345ae5ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:5d:30:4b:40:d3:d2:86:7b:ba:28:95:97: 13:76:67:1b:d6:53:16:db:5d:b9:1a:18:7a:5d:4a: e7:fe:f2:83:12:bc:67:2d:24:00:bd:5b:1c:d4:13: 7c:6c:f7:7a:00:3d:f2:3b:83:0e:e8:f0:2f:d6:1f: df:ad:01:b6:de:f9:03:1f:90:70:48:5f:fe:28:8c: 03:93:15:64:12:02:73:68:c2:67:d9:13:84:bf:1a: ef:61:e3:41:97:4b:ba:a5:86:d8:d1:dc:70:80:2b: c0:70:b6:88:ad:ea:98:3d:6a:51:7c:79:a4:63:ec: f1:16:6e:92:4f:1a:84:52:f0:f8:6a:75:87:97:39: 29:6e:0d:80:64:32:bf:fa:ea:f9:1d:4e:ff:61:f8: 6e:79:2a:24:a0:76:2e:ec:de:a1:f6:9e:46:23:66: c6:e8:87:67:17:d7:36:92:59:61:27:74:6c:e0:84: f3:0c:31:0a:3a:6f:a5:36:77:5a:1b:b8:83:22:73: 8e:f3:de:16:e3:02:91:11:d2:af:25:98:3b:49:71: 30:8a:01:59:68:28:50:e3:13:1a:e9:bd:65:f5:ca: 44:49:5a:1b:c5:22:a1:ac:1f:af:c1:30:63:e6:4a: 10:ce:06:dc:ac:f9:33:b9:ce:58:8d:1b:18:27:48: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F0:6E:99:47:7E:9E:8D:AE:7F:1E:3F:9E:E2:19:40:56:A7:62:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9af9823-5dab-30b5-a5bd-62c799398a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c1:01:3f:e3:a4:33:cb:28:1a:c9:ea:a3:bb:98:85:8c:c1: 83:a4:5e:f1:c8:21:7b:ad:71:75:59:35:df:d8:20:18:f4:3a: ea:ce:27:a3:f6:2b:03:de:1f:10:e8:9c:36:94:eb:be:1e:f4: f4:62:02:53:e5:c7:12:5d:e9:44:d7:91:75:e8:8c:fa:78:bd: 14:9b:a4:f9:ee:77:00:91:f0:2e:3c:54:15:54:b5:4b:09:55: 7a:35:80:49:53:b0:d1:b9:d7:a3:ab:f1:a2:94:ae:4d:d8:29: 67:68:ca:92:a4:08:2a:61:9d:c0:ee:2c:1f:09:41:c8:3a:2d: 86:6b:47:0e:47:95:f4:12:4d:93:85:3c:2a:18:8e:a5:dc:bc: 50:82:2f:8d:c0:99:ee:f6:fe:fb:2f:6e:d2:0c:3d:ae:f0:85: 5a:28:d1:c2:63:31:d2:79:ce:6e:ad:d1:cc:82:d8:ee:67:f3: c0:79:bd:74:03:ca:c0:8c:83:db:8e:40:79:ac:f9:53:e8:05: c5:1a:f5:3a:f6:51:1f:ab:3c:80:40:77:20:ee:37:7b:de:92: 78:51:05:4f:c5:a2:f0:a8:1e:08:a7:75:0b:fa:42:be:74:9c: 1c:4c:fc:d6:eb:e4:45:a5:9e:96:b9:3b:93:54:78:4c:cf:f6: cb:17:19:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9R0sPlycifZbJi4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NmIyYjI2MzMtOGNlNS00MjMxLTk0OGItZWFmMzQ1YWU1ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXRdMEtA09KGe7oolZcTdmcb1lMW2125Ghh6 XUrn/vKDErxnLSQAvVsc1BN8bPd6AD3yO4MO6PAv1h/frQG23vkDH5BwSF/+KIwD kxVkEgJzaMJn2ROEvxrvYeNBl0u6pYbY0dxwgCvAcLaIreqYPWpRfHmkY+zxFm6S TxqEUvD4anWHlzkpbg2AZDK/+ur5HU7/YfhueSokoHYu7N6h9p5GI2bG6IdnF9c2 kllhJ3Rs4ITzDDEKOm+lNndaG7iDInOO894W4wKREdKvJZg7SXEwigFZaChQ4xMa 6b1l9cpESVobxSKhrB+vwTBj5koQzgbcrPkzuc5YjRsYJ0jWlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNnwbplHfp6Nrn8eP57iGUBWp2J5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzlhZjk4MjMtNWRhYi0z MGI1LWE1YmQtNjJjNzk5Mzk4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAErBAT/jpDPLKBrJ6qO7mIWMwYOkXvHIIXutcXVZNd/YIBj0OurO J6P2KwPeHxDonDaU674e9PRiAlPlxxJd6UTXkXXojPp4vRSbpPnudwCR8C48VBVU tUsJVXo1gElTsNG516Or8aKUrk3YKWdoypKkCCphncDuLB8JQcg6LYZrRw5HlfQS TZOFPCoYjqXcvFCCL43Ame72/vsvbtIMPa7whVoo0cJjMdJ5zm6t0cyC2O5n88B5 vXQDysCMg9uOQHms+VPoBcUa9Tr2UR+rPIBAdyDuN3veknhRBU/FovCoHgindQv6 Qr50nBxM/Nbr5EWlnpa5O5NUeEzP9ssXGTg= -----END CERTIFICATE-----Generated at Tue Sep 29 15:46:43 2026 by rpki-client