$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce8f9e6-70a4-353b-9732-30397394a2c1.roa File: cce8f9e6-70a4-353b-9732-30397394a2c1.roa (raw, json) Hash identifier: gx5T4fKu8EDVKl0fDI06+Svqa6joYduWm41CuHqI5pk= Subject key identifier: D1:B5:F5:25:13:9C:5F:51:74:22:26:40:B9:A2:55:0B:C8:BF:5F:9D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F49747F40446C8A19F431D800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce8f9e6-70a4-353b-9732-30397394a2c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399951 IP address blocks: 2001:470:532::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7f:40:44:6c:8a:19:f4:31:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d156c920-4f41-4643-b496-a42cea814b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:a7:e5:e2:13:ab:2d:1f:1d:5a:83:8f:04: 5e:c3:e7:af:c3:d3:40:b8:93:16:82:35:62:c9:64: fd:fa:91:ed:f1:c5:c0:b8:2f:43:02:ae:8b:63:de: f4:3e:f6:13:9d:a6:13:59:72:e1:44:6b:35:73:7d: 92:2d:d2:92:b0:14:e5:ba:ed:c6:de:85:c7:a5:10: 5a:3b:47:06:aa:53:6f:c6:34:da:d5:8c:56:1f:75: 94:df:4f:9a:0c:87:ff:6f:a0:d5:68:66:21:5a:71: 4d:bb:39:cc:f5:11:a4:9c:a9:93:9a:f6:63:4a:e6: 0e:53:d7:eb:73:aa:4c:79:bd:23:60:34:d0:2c:d0: 7f:e3:aa:cd:87:7a:eb:83:86:ab:e8:cc:cb:29:55: bd:42:1a:24:d4:fa:a6:1a:17:20:e3:5e:da:be:c4: 0a:73:33:fd:58:fc:1c:21:28:48:9b:1d:af:4f:36: f6:53:de:37:5c:67:2d:db:df:4f:fa:01:32:5d:c8: 08:4c:9a:2a:07:74:13:76:05:2d:88:55:26:22:91: 08:07:51:79:d9:c7:71:26:ad:07:23:9a:2a:35:23: cd:0e:64:39:b9:dd:5b:32:a3:de:78:33:49:fb:52: 8d:7b:1d:41:c7:69:b4:70:49:96:17:eb:06:59:a4: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:F5:25:13:9C:5F:51:74:22:26:40:B9:A2:55:0B:C8:BF:5F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce8f9e6-70a4-353b-9732-30397394a2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:532::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:06:41:8d:55:81:b8:52:91:11:5f:68:2e:bc:01:b8:11:aa: ec:0e:dd:d9:38:29:09:7d:96:38:a1:94:12:5c:ca:7c:20:64: 40:80:51:99:a6:d7:8a:52:86:05:49:1e:0b:2e:39:a3:f6:6a: 76:ac:66:59:9b:35:5e:7c:f7:5a:52:5e:69:ba:ae:b6:4a:7d: a2:7e:c4:83:da:d7:46:39:db:cf:34:73:d5:6e:da:8a:24:a1: 78:52:67:51:0d:eb:60:6e:e1:a3:32:88:d5:db:a0:03:29:5f: 81:6c:5e:93:ec:02:a6:28:2f:1f:d2:6b:de:ea:97:51:61:dc: 6b:03:9e:0f:c7:0d:d4:fc:e8:eb:e1:e1:2d:89:a4:59:de:29: 87:38:41:b3:ca:66:4a:76:5d:da:46:52:4b:67:42:59:57:4c: 64:e0:66:44:66:23:2a:50:34:79:23:a0:2b:14:a0:cd:e7:a6: ad:de:d9:c9:ab:f1:f3:5e:e2:f6:2a:1b:37:9a:6c:15:49:65: 4b:9e:0a:db:41:38:ad:18:ff:83:9c:d3:91:c4:e8:81:d1:2b: b7:5c:f3:5e:54:f5:f4:a6:6e:02:1b:37:1b:ed:a5:11:c7:54: b1:1b:0a:4e:06:7a:44:20:5e:1d:a6:20:10:88:22:0f:d3:25: 3d:99:db:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdH9ARGyKGfQx2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDE1NmM5MjAtNGY0MS00NjQzLWI0OTYtYTQyY2VhODE0Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQCn5eITqy0fHVqDjwRew+evw9NAuJMWgjVi yWT9+pHt8cXAuC9DAq6LY970PvYTnaYTWXLhRGs1c32SLdKSsBTluu3G3oXHpRBa O0cGqlNvxjTa1YxWH3WU30+aDIf/b6DVaGYhWnFNuznM9RGknKmTmvZjSuYOU9fr c6pMeb0jYDTQLNB/46rNh3rrg4ar6MzLKVW9Qhok1PqmGhcg417avsQKczP9WPwc IShImx2vTzb2U943XGct299P+gEyXcgITJoqB3QTdgUtiFUmIpEIB1F52cdxJq0H I5oqNSPNDmQ5ud1bMqPeeDNJ+1KNex1Bx2m0cEmWF+sGWaTaeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNG19SUTnF9RdCImQLmiVQvIv1+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2NlOGY5ZTYtNzBhNC0z NTNiLTk3MzItMzAzOTczOTRhMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYGQY1VgbhSkRFfaC68AbgRquwO3dk4KQl9ljihlBJcynwgZECA UZmm14pShgVJHgsuOaP2anasZlmbNV5891pSXmm6rrZKfaJ+xIPa10Y52880c9Vu 2ookoXhSZ1EN62Bu4aMyiNXboAMpX4FsXpPsAqYoLx/Sa97ql1Fh3GsDng/HDdT8 6Ovh4S2JpFneKYc4QbPKZkp2XdpGUktnQllXTGTgZkRmIypQNHkjoCsUoM3npq3e 2cmr8fNe4vYqGzeabBVJZUueCttBOK0Y/4Oc05HE6IHRK7dc815U9fSmbgIbNxvt pRHHVLEbCk4GekQgXh2mIBCIIg/TJT2Z2y4= -----END CERTIFICATE-----Generated at Tue Sep 29 04:17:39 2026 by rpki-client