$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa File: d005a599-09d8-3026-ab5a-a41e08c768f2.roa (raw, json) Hash identifier: EshEtgiJQ7pMwMVH8m7MzxMyvKjQj5/NsomVX9VugKc= Subject key identifier: AC:62:DF:92:86:8D:3A:83:63:6F:87:63:F3:43:B3:6F:C6:B0:1A:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F4972E2059A2162483B2E2580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400950 IP address blocks: 2001:470:1b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e2:05:9a:21:62:48:3b:2e:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74d8ec4d-58ae-44f9-840a-2424de2a5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:d4:97:aa:62:ed:7b:43:74:92:8f:8e:6b: 85:e0:61:bb:cf:75:ab:02:12:ba:95:65:a0:65:e2: 9f:a3:4b:a9:24:72:09:cb:73:12:b8:84:69:ee:44: 6d:20:dc:c3:f2:97:5f:27:34:c5:ea:90:48:42:a2: 64:57:bd:1d:86:cd:13:b1:f7:28:84:c3:d3:26:6d: e5:ee:7b:17:e5:1b:08:64:c6:b3:d3:ee:10:3e:e5: fa:ca:3a:18:e7:6c:57:82:85:d7:fd:9e:f6:87:e8: d3:f6:c8:49:ef:49:66:a5:8d:85:cb:b7:72:40:97: 33:04:75:42:46:82:ed:f1:86:c5:d4:95:3e:9a:f4: 48:23:db:ef:3c:fa:cb:db:b3:a7:46:84:38:1a:55: 6b:ba:bb:e2:8d:10:88:23:2a:2f:0a:14:35:90:ad: 8e:ae:90:0e:d2:8f:f8:4a:e0:60:9e:5d:01:2a:5a: 8b:d3:0a:f5:15:47:06:53:26:58:2d:71:79:46:f1: 49:09:8d:59:d9:5d:13:c7:fa:65:32:89:34:7b:96: 4d:4a:fb:70:31:2e:4d:eb:54:80:a0:32:79:cd:4e: 29:4a:e1:00:96:a9:04:c6:6c:11:fd:c2:37:7f:7c: 5f:4d:62:f1:39:01:a2:72:5a:fd:42:e4:e4:74:77: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:62:DF:92:86:8D:3A:83:63:6F:87:63:F3:43:B3:6F:C6:B0:1A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ab:61:b5:d4:05:06:5b:85:32:2b:d1:b6:f5:d4:50:20:e5: 3d:4e:f4:0d:54:e9:2e:9b:52:e1:4b:6d:7a:05:23:d7:cb:9c: fe:90:b9:b6:0b:0d:88:48:47:ea:99:6b:24:de:85:4b:07:88: 8f:d2:cc:e4:b0:e2:de:28:e7:f4:c5:89:97:d8:a8:79:a6:9e: f0:43:17:d2:96:89:4b:5d:a7:76:ed:26:44:de:8a:4c:8a:00: 57:9d:a2:05:23:65:fe:f2:38:8e:bb:08:fb:40:45:ff:f2:a6: 02:b0:40:34:05:36:88:21:58:87:4c:bd:20:91:cc:3d:41:4f: 8a:de:e2:cb:11:e1:f1:fd:b2:b2:53:0d:45:ee:24:fc:41:7c: d7:c1:5c:66:8d:ea:0e:59:72:57:66:8a:78:68:8a:7d:4a:34: a5:d9:e1:47:56:b6:8e:6f:fc:25:ad:b7:eb:bd:79:2f:3e:bb: 7c:9c:6b:57:9a:69:06:96:53:ba:d0:8a:3f:6f:71:12:4e:62: 80:32:3c:5c:62:07:b5:c7:df:d7:68:7c:36:75:34:51:f4:7a: c0:7c:18:42:22:08:9b:7a:a9:85:8d:fe:87:1e:2c:35:b1:1c: 0c:d2:74:9e:90:70:8d:c2:2a:98:d5:50:73:63:f9:5c:86:0a: cd:b4:7f:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcuIFmiFiSDsuJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzRkOGVjNGQtNThhZS00NGY5LTg0MGEtMjQyNGRlMmE1Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFTUl6pi7XtDdJKPjmuF4GG7z3WrAhK6lWWg ZeKfo0upJHIJy3MSuIRp7kRtINzD8pdfJzTF6pBIQqJkV70dhs0TsfcohMPTJm3l 7nsX5RsIZMaz0+4QPuX6yjoY52xXgoXX/Z72h+jT9shJ70lmpY2Fy7dyQJczBHVC RoLt8YbF1JU+mvRII9vvPPrL27OnRoQ4GlVrurvijRCIIyovChQ1kK2OrpAO0o/4 SuBgnl0BKlqL0wr1FUcGUyZYLXF5RvFJCY1Z2V0Tx/plMok0e5ZNSvtwMS5N61SA oDJ5zU4pSuEAlqkExmwR/cI3f3xfTWLxOQGiclr9QuTkdHdg0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKxi35KGjTqDY2+HY/NDs2/GsBoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNWE1OTktMDlkOC0z MDI2LWFiNWEtYTQxZTA4Yzc2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGyrYbXUBQZbhTIr0bb11FAg5T1O9A1U6S6bUuFLbXoFI9fLnP6Q ubYLDYhIR+qZayTehUsHiI/SzOSw4t4o5/TFiZfYqHmmnvBDF9KWiUtdp3btJkTe ikyKAFedogUjZf7yOI67CPtARf/ypgKwQDQFNoghWIdMvSCRzD1BT4re4ssR4fH9 srJTDUXuJPxBfNfBXGaN6g5Zcldminhoin1KNKXZ4UdWto5v/CWtt+u9eS8+u3yc a1eaaQaWU7rQij9vcRJOYoAyPFxiB7XH39dofDZ1NFH0esB8GEIiCJt6qYWN/oce LDWxHAzSdJ6QcI3CKpjVUHNj+VyGCs20f+g= -----END CERTIFICATE-----Generated at Tue Sep 29 08:18:38 2026 by rpki-client