$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd426907-a03d-3cad-9f6c-9f96105b1b99.roa File: cd426907-a03d-3cad-9f6c-9f96105b1b99.roa (raw, json) Hash identifier: 3hoph7wVFVLlDoOrMwPKJfWey1Mp60+GpQY834fY1+0= Subject key identifier: F1:98:4E:0E:9B:D5:52:B5:9A:DF:03:E8:7E:0D:DA:D5:21:11:76:A0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F4974BC56D41084266F93A900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd426907-a03d-3cad-9f6c-9f96105b1b99.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11178 IP address blocks: 2001:470:533::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bc:56:d4:10:84:26:6f:93:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87d4de48-0ae5-4c30-a3d6-92b3fd54582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:f0:60:d0:aa:79:7b:a7:0a:a6:80:f1:4a: e6:80:94:97:bb:46:ec:d4:5b:2f:a0:20:86:ac:4b: f0:74:2c:62:a2:6a:50:32:a3:6f:99:87:d8:bf:dc: 01:d5:24:61:0b:4c:93:a1:fd:7c:01:d4:21:55:76: cc:ab:ab:89:ba:d8:17:36:5d:a5:4f:4d:28:3f:d6: e8:58:e9:19:69:b3:2c:b4:49:d0:68:91:0b:e5:d6: 8e:5f:3e:4d:07:f9:30:1b:1b:55:00:4e:7d:92:71: 3f:96:2b:8b:ac:1c:9d:fc:62:c5:7b:45:3b:af:91: 5e:3d:c5:8a:05:14:05:92:81:23:d5:41:22:9e:85: 7a:ea:ba:a6:81:bc:02:f5:6c:e3:62:4d:15:90:77: e9:92:da:ea:2b:7d:f7:dc:19:f0:38:00:76:6e:e0: 79:56:fc:b8:44:bd:f7:23:b0:e6:83:ce:74:47:28: 38:f9:fb:8b:1a:8e:47:1c:da:65:a2:c3:e1:6a:eb: 6d:2a:b7:61:2c:ea:6c:35:01:f2:19:1a:46:73:a0: 94:ea:70:24:16:a1:14:1d:f0:b8:eb:2b:5d:2b:62: 97:7b:2a:ab:e6:e3:eb:e7:e5:06:d2:de:0a:28:33: 61:3a:1b:35:e2:66:93:c7:d7:c0:bc:15:05:bf:73: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:98:4E:0E:9B:D5:52:B5:9A:DF:03:E8:7E:0D:DA:D5:21:11:76:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd426907-a03d-3cad-9f6c-9f96105b1b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:533::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:20:ea:89:44:12:d0:02:9a:6e:9f:d7:d2:86:13:61:f3:71: b4:51:c9:11:5b:d6:00:a3:ad:29:65:86:a7:5d:28:9f:47:7b: ae:49:d1:db:cf:41:fe:12:91:aa:4c:4d:90:43:28:d6:56:70: 5e:10:94:e6:dc:65:ca:c5:73:3d:fc:3b:b8:f5:23:fe:a8:40: c1:71:89:75:83:12:54:c1:8e:13:ff:83:f9:a0:36:77:a9:40: f2:73:61:36:0a:fd:43:17:16:96:92:72:44:62:3a:35:90:d5: 4c:07:5a:fd:19:6c:44:02:14:ca:68:4d:21:e4:ef:48:f2:43: 1f:ae:30:c1:45:d7:4e:2e:c5:2b:cd:20:08:d1:f0:d7:70:a3: b2:d9:be:6f:a9:ec:36:94:09:ff:52:61:16:da:98:bb:88:b0: 12:bd:7c:f1:df:4a:76:49:7a:21:48:f0:2d:08:43:b8:90:72: bf:fe:75:69:a3:f8:6b:31:0b:23:3b:a9:9d:a3:2f:20:db:4f: 18:39:9f:1d:0b:8a:93:ad:c8:62:1d:b0:a1:05:2c:ad:79:b2: 6d:fe:b0:b9:66:67:25:57:05:85:44:17:8a:37:19:b3:c9:f0: 06:8c:75:9c:ca:62:88:b4:d6:72:7e:f4:7a:2d:df:bd:08:a0: 41:f7:21:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdLxW1BCEJm+TqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdkNGRlNDgtMGFlNS00YzMwLWEzZDYtOTJiM2ZkNTQ1ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDjwYNCqeXunCqaA8UrmgJSXu0bs1FsvoCCG rEvwdCxiompQMqNvmYfYv9wB1SRhC0yTof18AdQhVXbMq6uJutgXNl2lT00oP9bo WOkZabMstEnQaJEL5daOXz5NB/kwGxtVAE59knE/liuLrByd/GLFe0U7r5FePcWK BRQFkoEj1UEinoV66rqmgbwC9WzjYk0VkHfpktrqK3333BnwOAB2buB5Vvy4RL33 I7Dmg850Ryg4+fuLGo5HHNplosPhauttKrdhLOpsNQHyGRpGc6CU6nAkFqEUHfC4 6ytdK2KXeyqr5uPr5+UG0t4KKDNhOhs14maTx9fAvBUFv3Ns8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGYTg6b1VK1mt8D6H4N2tUhEXagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2Q0MjY5MDctYTAzZC0z Y2FkLTlmNmMtOWY5NjEwNWIxYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALsg6olEEtACmm6f19KGE2HzcbRRyRFb1gCjrSllhqddKJ9He65J 0dvPQf4SkapMTZBDKNZWcF4QlObcZcrFcz38O7j1I/6oQMFxiXWDElTBjhP/g/mg NnepQPJzYTYK/UMXFpaSckRiOjWQ1UwHWv0ZbEQCFMpoTSHk70jyQx+uMMFF104u xSvNIAjR8Ndwo7LZvm+p7DaUCf9SYRbamLuIsBK9fPHfSnZJeiFI8C0IQ7iQcr/+ dWmj+GsxCyM7qZ2jLyDbTxg5nx0LipOtyGIdsKEFLK15sm3+sLlmZyVXBYVEF4o3 GbPJ8AaMdZzKYoi01nJ+9Hot370IoEH3IYI= -----END CERTIFICATE-----Generated at Sat Oct 3 15:47:34 2026 by rpki-client