$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa File: 0f23d348-804c-30ea-982b-3bdcb6611b68.roa (raw, json) Hash identifier: +Vkm4IkVeh1gl5DrBnroftubrNF3fDR/TwUoIeZjD5o= Subject key identifier: 5F:6E:2B:B2:5E:42:2A:89:46:28:4F:8A:B9:45:5F:82:6E:15:D5:BD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E51E9F400BCC2D88887458240 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 30860 IP address blocks: 2001:470:38e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:f4:00:bc:c2:d8:88:87:45:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=04e1e856-1c7a-4312-b906-2a7d2c536076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:be:c1:e1:76:ae:b6:10:a5:a1:fc:cc:04: ab:1f:8d:6e:06:ad:f0:7c:55:4e:e3:8f:4f:bb:ff: 10:a3:50:37:e9:58:d5:38:0b:da:c7:62:1f:16:11: d1:be:8e:81:fe:36:7b:46:1c:fd:c9:92:36:f1:0f: f3:f2:8d:af:a1:27:ba:f8:98:13:5e:91:f2:cd:f4: 09:74:57:12:4a:b9:57:de:42:90:82:14:ff:37:f8: 41:47:49:c8:d0:4d:8b:42:1c:2f:89:26:54:8d:28: 6b:21:cf:e5:fb:58:04:02:22:55:8f:ea:b4:18:3e: ed:88:5b:78:76:e8:7b:21:13:de:d4:63:a3:a6:13: 49:5c:76:29:45:7a:d6:28:29:ad:a8:41:cd:c9:6b: 50:22:f7:5a:73:67:ab:95:17:34:cb:9d:70:77:5a: f5:23:d4:eb:4e:db:82:84:58:f5:1a:a2:47:f7:1d: 1e:02:b1:97:4a:97:53:e8:bb:10:e6:4c:09:65:94: 06:47:19:0f:48:5d:81:88:b1:c9:8e:69:f8:b5:e4: b4:2d:26:a4:8a:ff:9a:66:f7:0d:9e:fb:46:b9:20: e7:73:45:9a:11:0a:82:c5:ba:a4:be:72:83:b1:0d: 7f:e7:a0:d8:1b:ba:bb:af:71:d5:44:fc:f6:20:b0: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:2B:B2:5E:42:2A:89:46:28:4F:8A:B9:45:5F:82:6E:15:D5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f23d348-804c-30ea-982b-3bdcb6611b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:38e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:49:ef:21:5c:57:92:23:65:07:3c:c8:57:4f:f3:84:40: 4a:0b:b2:b8:29:c7:d7:b8:1f:86:6b:af:1f:1c:8c:65:e4:3b: b9:d5:e2:23:97:44:69:e6:4f:86:64:c7:64:e1:7f:f7:df:ee: 51:68:ab:ed:71:ec:f6:e1:91:f2:7d:8c:cd:ff:c6:c5:cb:c8: 5a:aa:ec:4a:01:36:31:21:c0:f5:04:30:04:dc:3a:99:ea:97: cf:40:e6:b7:29:bb:9e:40:ad:34:81:9c:74:f7:ec:61:51:18: 94:a4:b4:d8:24:35:f6:5d:53:ae:ca:76:aa:f3:37:ac:c6:8f: 06:5a:62:46:0d:7e:02:7b:7a:29:a7:a6:18:cf:c7:66:b1:43: 88:75:4b:23:d8:01:c9:f4:90:ce:b4:94:9f:be:b7:22:29:7e: 81:e7:57:9f:f8:83:9a:1c:e8:18:54:2e:60:85:6c:9b:48:63: a3:d8:b7:11:9c:41:a4:e7:96:bd:1e:04:6b:2b:2f:4a:e5:bc: 81:f7:da:66:20:dd:20:cc:1d:e4:1a:a0:d7:80:67:4c:8d:db: fd:a9:b5:e6:23:78:48:9b:b6:57:7b:7f:dc:67:ec:c1:63:aa: 60:d2:d0:90:bc:be:47:c3:54:0a:b7:82:83:28:2a:9f:62:00: d2:83:a5:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5R6fQAvMLYiIdFgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk MDRlMWU4NTYtMWM3YS00MzEyLWI5MDYtMmE3ZDJjNTM2MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUe+weF2rrYQpaH8zASrH41uBq3wfFVO449P u/8Qo1A36VjVOAvax2IfFhHRvo6B/jZ7Rhz9yZI28Q/z8o2voSe6+JgTXpHyzfQJ dFcSSrlX3kKQghT/N/hBR0nI0E2LQhwviSZUjShrIc/l+1gEAiJVj+q0GD7tiFt4 duh7IRPe1GOjphNJXHYpRXrWKCmtqEHNyWtQIvdac2erlRc0y51wd1r1I9TrTtuC hFj1GqJH9x0eArGXSpdT6LsQ5kwJZZQGRxkPSF2BiLHJjmn4teS0LSakiv+aZvcN nvtGuSDnc0WaEQqCxbqkvnKDsQ1/56DYG7q7r3HVRPz2ILCzXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9uK7JeQiqJRihPirlFX4JuFdW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYyM2QzNDgtODA0Yy0z MGVhLTk4MmItM2JkY2I2NjExYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHM4Se8hXFeSI2UHPMhXT/OEQEoLsrgpx9e4H4Zrrx8cjGXkO7nV 4iOXRGnmT4Zkx2Thf/ff7lFoq+1x7PbhkfJ9jM3/xsXLyFqq7EoBNjEhwPUEMATc Opnql89A5rcpu55ArTSBnHT37GFRGJSktNgkNfZdU67KdqrzN6zGjwZaYkYNfgJ7 eimnphjPx2axQ4h1SyPYAcn0kM60lJ++tyIpfoHnV5/4g5oc6BhULmCFbJtIY6PY txGcQaTnlr0eBGsrL0rlvIH32mYg3SDMHeQaoNeAZ0yN2/2pteYjeEibtld7f9xn 7MFjqmDS0JC8vkfDVAq3goMoKp9iANKDpcU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:31:42 2026 by rpki-client