$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa File: d0044e76-f3b1-3724-9750-1131ab4b8be3.roa (raw, json) Hash identifier: jAr9mLPzOq3C9Mo282W8oOw3LPcOgTec1YLQGM+Zc7Q= Subject key identifier: 0C:F3:61:0A:8C:FF:C3:79:F7:0F:C2:69:E4:CE:DA:F8:5E:E7:68:94 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F4989FB3042A1736CD01A9580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22018 IP address blocks: 2001:470:421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:fb:30:42:a1:73:6c:d0:1a:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c95039d-5d28-452f-ac8b-ff2058963d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:e2:83:5f:4e:d8:2d:04:81:08:c1:4d:ab: 3c:d7:a2:95:38:f1:89:55:8e:24:0c:b9:99:ed:90: 21:88:32:71:21:d5:77:67:16:0b:a3:29:54:b7:fa: 5d:a1:e3:47:38:f1:09:6c:ce:0f:86:7c:07:08:04: 1c:21:8c:92:7b:e4:82:db:3b:57:da:95:22:8c:87: f2:19:30:d4:7e:53:5a:7d:47:7d:a4:bd:f0:e8:37: 55:c0:f9:d1:65:1a:90:e1:22:1b:55:f4:03:84:9a: 3c:0a:96:41:f2:93:96:88:5b:d8:00:ee:e1:1d:80: af:71:db:a6:ef:a0:05:b5:da:7c:c5:ec:f9:9b:8c: e1:bc:e7:e6:be:0a:65:c7:1f:5f:c9:8b:13:ce:87: 3b:b0:95:fb:00:e4:fe:57:e3:35:b4:ec:aa:64:c8: dc:f1:70:b8:3a:20:f0:af:c7:1b:df:0a:3f:ea:2b: bb:98:11:89:0e:76:c8:0f:20:64:74:5e:45:76:b5: 6f:db:5c:d0:29:f2:c9:68:63:50:22:ef:da:02:3a: 00:b9:a5:23:12:18:56:b8:46:a8:bf:58:b3:30:bb: 6f:d0:90:0a:54:74:cf:df:23:3f:e9:33:d7:3d:2f: bd:f1:ca:ff:9e:87:ae:0a:5b:e4:eb:40:ba:30:e1: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F3:61:0A:8C:FF:C3:79:F7:0F:C2:69:E4:CE:DA:F8:5E:E7:68:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:421::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:45:14:1a:26:c6:82:a6:c1:c7:cb:58:cb:43:1f:28:fc: c3:1b:00:b4:23:77:aa:65:bf:77:64:6c:dd:86:93:08:eb:c0: 06:b9:8a:c1:67:9e:25:d9:33:4f:85:a7:54:63:81:4c:6d:0b: 4a:5b:fe:a4:7a:2d:dd:11:5c:8f:5d:c0:3d:e4:cd:2e:2b:34: 40:59:65:14:9c:55:2e:7f:53:85:3d:d1:7d:9b:b9:87:ec:60: e7:44:1c:09:da:d0:16:de:72:87:7a:c7:87:0a:c2:81:dc:a8: 96:4f:4e:cf:bc:bb:7c:c4:75:8f:8c:a2:2f:8d:5b:7f:49:0a: 9d:76:3b:17:d5:b4:1a:76:a0:77:eb:65:58:a5:4e:5c:4a:93: 1d:8e:e8:7a:4e:59:17:a7:a6:31:89:45:cb:7e:c5:a4:78:62: 7c:4e:eb:ff:e7:ac:87:06:f3:82:8b:5a:be:41:e1:b8:46:49: a0:4c:be:9f:4d:74:c0:5f:98:d0:da:b6:88:ba:70:d0:7a:5a: 5e:d4:fd:a5:19:1f:4b:81:0c:e1:5a:52:35:98:52:95:12:fa: 23:c9:f8:dd:3b:83:9b:d9:75:95:72:89:43:01:58:5b:01:26: 31:dc:b3:9d:f8:fd:2e:a3:47:f3:c0:c7:7e:5f:08:72:9d:65: 57:17:15:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JifswQqFzbNAalYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM5NTAzOWQtNWQyOC00NTJmLWFjOGItZmYyMDU4OTYzZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ybig19O2C0EgQjBTas816KVOPGJVY4kDLmZ 7ZAhiDJxIdV3ZxYLoylUt/pdoeNHOPEJbM4PhnwHCAQcIYySe+SC2ztX2pUijIfy GTDUflNafUd9pL3w6DdVwPnRZRqQ4SIbVfQDhJo8CpZB8pOWiFvYAO7hHYCvcdum 76AFtdp8xez5m4zhvOfmvgplxx9fyYsTzoc7sJX7AOT+V+M1tOyqZMjc8XC4OiDw r8cb3wo/6iu7mBGJDnbIDyBkdF5FdrVv21zQKfLJaGNQIu/aAjoAuaUjEhhWuEao v1izMLtv0JAKVHTP3yM/6TPXPS+98cr/noeuClvk60C6MOFfbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzzYQqM/8N59w/CaeTO2vhe52iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNDRlNzYtZjNiMS0z NzI0LTk3NTAtMTEzMWFiNGI4YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZMRRQaJsaCpsHHy1jLQx8o/MMbALQjd6plv3dkbN2GkwjrwAa5 isFnniXZM0+Fp1RjgUxtC0pb/qR6Ld0RXI9dwD3kzS4rNEBZZRScVS5/U4U90X2b uYfsYOdEHAna0Bbecod6x4cKwoHcqJZPTs+8u3zEdY+Moi+NW39JCp12OxfVtBp2 oHfrZVilTlxKkx2O6HpOWRenpjGJRct+xaR4YnxO6//nrIcG84KLWr5B4bhGSaBM vp9NdMBfmNDatoi6cNB6Wl7U/aUZH0uBDOFaUjWYUpUS+iPJ+N07g5vZdZVyiUMB WFsBJjHcs534/S6jR/PAx35fCHKdZVcXFeY= -----END CERTIFICATE-----Generated at Sun Sep 27 01:20:34 2026 by rpki-client