$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa File: d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa (raw, json) Hash identifier: JQyqVVDo5OhrJH1yuEUwH2UtZNPQxT5zxp+LZmAblB0= Subject key identifier: CD:73:D9:2B:34:10:6B:1E:06:2B:09:D8:84:D2:88:35:17:01:BD:A0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F1467A95767EBDE84EE48F4C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 196975 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a9:57:67:eb:de:84:ee:48:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a9dd933f-68cf-4da0-a1b3-c47d0d6b8838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:f7:f0:50:d9:08:b6:d5:ef:31:22:ae:19: 97:8e:d2:ab:48:11:fa:c3:44:7e:79:33:93:96:75: 45:96:27:d3:1c:cb:7d:f0:44:d7:45:f9:cc:8f:67: 5a:a2:1c:b0:2f:75:5c:ae:86:20:b3:78:2e:1e:26: 57:b9:d7:cf:c1:5a:99:7f:85:ad:a2:2d:ae:29:29: dc:0c:c8:a5:2b:66:78:64:e5:c1:30:d3:43:e4:4a: 19:a9:23:7e:51:a5:66:fe:37:ce:e3:6f:97:b5:a1: 95:9c:83:ff:89:10:3c:b4:78:ab:22:be:23:b8:27: 72:66:ff:03:f8:fc:7f:9c:c0:fd:56:e5:7b:90:56: ca:ac:d6:59:a6:b5:29:b0:f2:8f:50:f8:ff:71:b9: 16:5d:5d:eb:8f:76:57:ea:92:6c:50:0f:00:df:ad: 4d:a0:01:31:80:3b:8e:e9:66:f4:c7:ed:41:d5:3a: 89:76:8c:97:5f:19:b6:44:4c:2b:6c:33:01:5b:9f: 05:86:70:ff:56:d0:64:46:fb:0b:e4:c5:00:3d:f7: 65:c2:b4:f0:dc:b2:eb:a8:bb:18:dd:44:49:14:38: da:b7:8b:30:7e:35:46:0b:3d:0a:95:6b:1d:09:c9: 6a:b7:98:d7:16:d0:33:8e:12:b4:48:4e:c6:80:67: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:73:D9:2B:34:10:6B:1E:06:2B:09:D8:84:D2:88:35:17:01:BD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0a0ba55-63e9-345b-8c4f-fa2ca0f06512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:37:6f:36:6f:16:45:6e:36:98:2d:ca:69:84:6c:92:ef:57: 97:7f:b8:0a:19:09:25:a9:7e:6a:4a:fb:11:3c:db:14:cd:42: 3e:08:cf:ab:ff:70:22:3b:39:6c:68:a5:5b:ee:b1:7d:7c:75: f8:fa:f3:12:31:83:c8:0c:6b:70:7e:be:1a:71:11:7a:cc:c8: a5:ea:c3:3b:36:82:26:96:73:43:47:fd:40:d7:bb:8a:0e:40: 4b:5e:62:31:65:f7:a1:13:cb:52:90:3f:0b:e3:76:77:37:5e: 93:43:70:e4:af:54:51:35:97:b7:ff:f7:1a:43:26:58:a3:d8: 65:9b:51:97:f6:3e:31:8a:65:62:8a:98:55:7d:16:79:2d:73: fc:d7:ba:a9:46:f6:87:fc:42:34:be:14:ea:ef:7e:07:1b:50: 08:84:16:8e:e6:ac:43:b4:90:6c:16:16:ad:a9:2e:a7:0b:e8: d6:52:b9:5a:cb:c1:20:03:69:c4:3a:bc:77:c9:cb:c5:c8:ff: 9c:cd:b0:91:88:66:2d:94:d0:db:14:6b:26:c8:a3:86:7f:04: b3:9e:d4:c9:98:ca:1f:80:04:5e:48:1c:09:92:1b:7c:b3:0d: 53:10:ef:4d:5b:5d:fb:e9:6e:c5:85:04:2d:2b:b9:06:bd:47: 94:d1:64:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6lXZ+vehO5I9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTlkZDkzM2YtNjhjZi00ZGEwLWExYjMtYzQ3ZDBkNmI4ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE/38FDZCLbV7zEirhmXjtKrSBH6w0R+eTOT lnVFlifTHMt98ETXRfnMj2daohywL3VcroYgs3guHiZXudfPwVqZf4Wtoi2uKSnc DMilK2Z4ZOXBMNND5EoZqSN+UaVm/jfO42+XtaGVnIP/iRA8tHirIr4juCdyZv8D +Px/nMD9VuV7kFbKrNZZprUpsPKPUPj/cbkWXV3rj3ZX6pJsUA8A361NoAExgDuO 6Wb0x+1B1TqJdoyXXxm2REwrbDMBW58FhnD/VtBkRvsL5MUAPfdlwrTw3LLrqLsY 3URJFDjat4swfjVGCz0KlWsdCclqt5jXFtAzjhK0SE7GgGcc6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM1z2Ss0EGseBisJ2ITSiDUXAb2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDBhMGJhNTUtNjNlOS0z NDViLThjNGYtZmEyY2EwZjA2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALk3bzZvFkVuNpgtymmEbJLvV5d/uAoZCSWpfmpK+xE82xTNQj4I z6v/cCI7OWxopVvusX18dfj68xIxg8gMa3B+vhpxEXrMyKXqwzs2giaWc0NH/UDX u4oOQEteYjFl96ETy1KQPwvjdnc3XpNDcOSvVFE1l7f/9xpDJlij2GWbUZf2PjGK ZWKKmFV9Fnktc/zXuqlG9of8QjS+FOrvfgcbUAiEFo7mrEO0kGwWFq2pLqcL6NZS uVrLwSADacQ6vHfJy8XI/5zNsJGIZi2U0NsUaybIo4Z/BLOe1MmYyh+ABF5IHAmS G3yzDVMQ701bXfvpbsWFBC0ruQa9R5TRZBE= -----END CERTIFICATE-----Generated at Fri Sep 25 06:37:17 2026 by rpki-client