$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4514f8b-3962-3c2a-a041-f83a66c5d54e.roa File: d4514f8b-3962-3c2a-a041-f83a66c5d54e.roa (raw, json) Hash identifier: XLdRCPATLLE2Q6nmrJ11DbnjiDiIdRICkoPTUkEtX+k= Subject key identifier: C1:8C:21:A8:DC:EB:19:C7:11:63:F4:56:23:A4:92:C6:C2:8E:3B:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F497459039308C6C3406ADD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4514f8b-3962-3c2a-a041-f83a66c5d54e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53506 IP address blocks: 2001:470:502::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:59:03:93:08:c6:c3:40:6a:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=baaeb953-557d-4ba8-830e-d286800ee8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:77:42:d1:f2:36:68:fd:7a:83:d6:a5:10: 86:97:03:73:46:0f:80:95:85:98:22:f0:9d:57:23: 8d:28:8f:35:1d:12:70:ed:0c:fa:84:57:a0:ea:67: 3d:66:32:6a:8c:f1:1d:c7:38:83:12:a2:be:2a:b7: 76:05:ad:dc:34:84:03:16:9c:ea:69:39:1e:e7:b6: 44:f2:7d:4f:8c:02:22:a0:d5:18:28:0a:7e:82:d2: 2a:fe:92:c4:d4:98:3d:0c:c4:b5:65:12:96:1c:a9: 6d:11:a9:06:28:7d:c9:84:bc:6c:9e:5f:58:9e:cd: eb:98:1b:57:32:4d:07:98:82:5a:5f:85:90:7c:67: 2e:21:5b:bd:6e:0d:fe:ca:5a:5c:4a:f0:6e:74:59: f9:24:1a:7e:f9:f0:58:e3:e3:39:7f:c5:9d:ae:db: 4e:7c:58:5d:4e:5a:95:85:3c:b4:8a:f4:46:77:0e: e0:2e:3e:66:b4:48:69:51:7a:c7:79:94:03:1f:1b: 75:46:a3:32:c2:de:fb:90:da:fc:c0:3c:76:4a:b9: f6:83:53:85:25:e4:84:c0:eb:e0:b3:72:67:e8:1f: fe:9a:8f:37:48:f6:8f:c3:51:8f:39:38:94:ba:63: c5:61:e9:19:76:d5:a1:9f:d8:9c:05:71:40:f9:d8: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8C:21:A8:DC:EB:19:C7:11:63:F4:56:23:A4:92:C6:C2:8E:3B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4514f8b-3962-3c2a-a041-f83a66c5d54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:502::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4f:19:bb:6f:30:e0:63:51:7c:e0:6c:1f:22:6a:d8:0b:af: 81:fe:d1:74:dd:25:c0:7e:d8:6c:56:ef:79:9c:b8:81:7f:c1: b3:97:35:3c:36:5e:57:be:8b:99:42:21:e6:f9:ec:36:63:bf: 16:a6:3c:94:0d:20:78:ac:fd:c4:cc:f9:f5:04:aa:6f:d1:c2: 63:1b:89:43:42:58:53:31:48:a0:b6:41:7f:cb:0c:30:36:c1: 9b:25:56:2d:79:4c:a7:a7:b4:33:56:43:1c:2d:45:e7:94:88: 92:2f:3c:80:fb:8a:c7:45:19:6a:bb:94:2f:70:fc:c2:65:4c: b1:38:3a:4e:5f:fa:8e:58:76:c6:4a:66:db:ab:0c:e9:40:3e: 4f:fd:b8:8d:cf:22:fd:a5:27:f3:2c:0a:d5:64:c0:40:89:72: 2c:f6:71:12:77:65:3b:7c:11:c1:d5:58:ff:9b:f5:78:78:65: 6a:6a:22:7f:72:69:d4:9c:85:97:5c:48:46:43:72:74:7b:09: 62:f1:f7:ed:f9:70:5f:a7:a0:5d:0e:08:d2:77:a9:b8:74:8e: d2:62:26:79:fd:5b:0b:af:68:37:04:62:57:34:ab:dd:88:e4: f6:6a:ac:60:ab:6f:70:85:43:25:2d:f1:e3:72:f7:25:19:b2: 49:fc:b1:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdFkDkwjGw0Bq3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmFhZWI5NTMtNTU3ZC00YmE4LTgzMGUtZDI4NjgwMGVlOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTl3QtHyNmj9eoPWpRCGlwNzRg+AlYWYIvCd VyONKI81HRJw7Qz6hFeg6mc9ZjJqjPEdxziDEqK+Krd2Ba3cNIQDFpzqaTke57ZE 8n1PjAIioNUYKAp+gtIq/pLE1Jg9DMS1ZRKWHKltEakGKH3JhLxsnl9Yns3rmBtX Mk0HmIJaX4WQfGcuIVu9bg3+ylpcSvBudFn5JBp++fBY4+M5f8WdrttOfFhdTlqV hTy0ivRGdw7gLj5mtEhpUXrHeZQDHxt1RqMywt77kNr8wDx2Srn2g1OFJeSEwOvg s3Jn6B/+mo83SPaPw1GPOTiUumPFYekZdtWhn9icBXFA+diqoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGMIajc6xnHEWP0ViOkksbCjjt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDQ1MTRmOGItMzk2Mi0z YzJhLWEwNDEtZjgzYTY2YzVkNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdPGbtvMOBjUXzgbB8iatgLr4H+0XTdJcB+2GxW73mcuIF/wbOX NTw2Xle+i5lCIeb57DZjvxamPJQNIHis/cTM+fUEqm/RwmMbiUNCWFMxSKC2QX/L DDA2wZslVi15TKentDNWQxwtReeUiJIvPID7isdFGWq7lC9w/MJlTLE4Ok5f+o5Y dsZKZturDOlAPk/9uI3PIv2lJ/MsCtVkwECJciz2cRJ3ZTt8EcHVWP+b9Xh4ZWpq In9yadSchZdcSEZDcnR7CWLx9+35cF+noF0OCNJ3qbh0jtJiJnn9WwuvaDcEYlc0 q92I5PZqrGCrb3CFQyUt8eNy9yUZskn8sU4= -----END CERTIFICATE-----Generated at Mon Sep 28 10:55:29 2026 by rpki-client