$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa File: f704858e-1e87-30e0-a323-96a5ce440924.roa (raw, json) Hash identifier: VFET7aQb7T3XSTgI5sdLmhFxFMGYF73oUKeuNMEvA+M= Subject key identifier: 38:55:0C:1B:43:81:DB:23:28:C0:67:28:3A:52:94:6D:C4:73:B8:FA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F51D2C6798B525389897A3880 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 49984 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c6:79:8b:52:53:89:89:7a:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=873aca91-5afc-4673-a314-d8b30c3ca51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:7d:cf:d7:88:bf:05:c2:42:79:67:a0:a5: ab:2d:9e:75:02:46:a9:33:74:f6:c5:57:02:52:85: 9e:62:46:77:18:64:9d:13:ac:28:c9:fc:c8:7f:7a: 58:fd:a3:74:d4:d0:86:40:6d:f2:75:60:0d:82:54: 3a:51:e3:65:90:a7:42:11:e1:65:97:63:dd:11:44: c9:bc:0a:9b:59:cf:1d:46:7c:92:70:57:de:cc:4f: 95:4c:23:4b:fd:63:8c:01:64:a3:f7:13:9c:7c:7b: b4:7c:68:a9:42:ea:c9:cd:70:2f:31:17:ee:11:44: d8:20:51:19:c0:2c:64:5e:8d:0d:59:7d:cd:9b:29: fc:b5:e6:ef:91:1d:ac:33:7c:01:62:fb:79:56:5e: eb:84:66:22:e9:65:e9:3d:23:6d:be:5c:77:dd:44: 4c:9f:dd:dc:78:0d:0d:c5:d1:31:52:94:c4:11:3d: 88:7f:eb:fe:62:6e:0c:4d:e3:77:5c:d3:98:2a:62: 74:97:c2:a3:c6:98:0e:89:c4:82:c7:c8:d2:0c:6c: 64:fe:f9:0f:04:70:a6:d4:98:82:07:f9:ee:f6:d6: 70:9f:10:d6:e5:35:c8:54:37:78:2f:50:3c:19:84: 33:ea:21:3a:0d:94:4d:8f:06:98:60:1b:23:e2:f0: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:0C:1B:43:81:DB:23:28:C0:67:28:3A:52:94:6D:C4:73:B8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9d:16:7e:87:88:3f:82:6f:4a:e1:a4:3c:ef:57:90:bf:2e: 3d:e5:bb:4b:5e:e5:1d:4c:22:a0:04:ca:e7:a8:57:7b:7e:45: 5e:62:d6:79:72:a7:5e:28:3c:88:2b:00:bd:8e:0f:ee:94:bf: 51:8b:c1:97:4d:63:4f:11:dd:91:7f:79:8f:95:a5:15:c2:41: 81:71:4a:d1:0a:54:c0:29:06:90:bb:1a:ef:2f:6a:56:5e:53: 92:6d:30:04:84:d8:dd:b9:ab:52:da:b0:89:a9:19:9c:e4:c9: 44:70:24:56:d2:3a:f0:59:03:b3:95:c2:0c:0a:4d:4a:41:6d: 17:57:77:ba:0f:92:b6:ef:75:8f:fe:de:09:33:e6:0b:c2:bd: d1:39:52:50:33:d7:2e:ca:9e:5b:76:c2:62:0d:c1:f9:d0:4e: ef:6a:ad:9a:00:f5:52:37:77:e2:62:46:13:18:59:c5:32:76: 8c:32:24:81:b7:51:1f:a1:6d:20:af:dc:f6:95:16:0f:e1:6e: a5:a6:8b:7a:cc:ca:68:3d:1d:98:e7:00:db:f4:57:11:3e:b2: 31:d3:d3:d1:e1:07:b8:06:a4:56:a2:87:e6:14:c9:26:61:da: dd:61:7b:70:25:0d:56:45:c8:d0:be:fd:b7:d7:d4:72:3f:da: 97:14:c8:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9R0sZ5i1JTiYl6OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODczYWNhOTEtNWFmYy00NjczLWEzMTQtZDhiMzBjM2NhNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1R9z9eIvwXCQnlnoKWrLZ51AkapM3T2xVcC UoWeYkZ3GGSdE6woyfzIf3pY/aN01NCGQG3ydWANglQ6UeNlkKdCEeFll2PdEUTJ vAqbWc8dRnyScFfezE+VTCNL/WOMAWSj9xOcfHu0fGipQurJzXAvMRfuEUTYIFEZ wCxkXo0NWX3Nmyn8tebvkR2sM3wBYvt5Vl7rhGYi6WXpPSNtvlx33URMn93ceA0N xdExUpTEET2If+v+Ym4MTeN3XNOYKmJ0l8KjxpgOicSCx8jSDGxk/vkPBHCm1JiC B/nu9tZwnxDW5TXIVDd4L1A8GYQz6iE6DZRNjwaYYBsj4vB4WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhVDBtDgdsjKMBnKDpSlG3Ec7j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjcwNDg1OGUtMWU4Ny0z MGUwLWEzMjMtOTZhNWNlNDQwOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+dFn6HiD+Cb0rhpDzvV5C/Lj3lu0te5R1MIqAEyueoV3t+RV5i 1nlyp14oPIgrAL2OD+6Uv1GLwZdNY08R3ZF/eY+VpRXCQYFxStEKVMApBpC7Gu8v alZeU5JtMASE2N25q1LasImpGZzkyURwJFbSOvBZA7OVwgwKTUpBbRdXd7oPkrbv dY/+3gkz5gvCvdE5UlAz1y7Knlt2wmINwfnQTu9qrZoA9VI3d+JiRhMYWcUydowy JIG3UR+hbSCv3PaVFg/hbqWmi3rMymg9HZjnANv0VxE+sjHT09HhB7gGpFaih+YU ySZh2t1he3AlDVZFyNC+/bfX1HI/2pcUyMA= -----END CERTIFICATE-----Generated at Sat Oct 3 12:51:42 2026 by rpki-client