$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa File: 2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa (raw, json) Hash identifier: DV4xn3g9Sk5EiOjCrQk8EaMBT9a6z7SAEs8aP/KwvKs= Subject key identifier: 37:12:F9:8F:C3:EA:85:BE:38:40:F2:34:F5:B5:6F:D2:98:A9:55:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E7BCA30BC620724649D2A82A0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 393301 IP address blocks: 2001:470:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:30:bc:62:07:24:64:9d:2a:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=9ff4b9ef-1c0c-4b69-b358-e441959020e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:72:97:cd:c8:40:d9:18:9e:ad:14:5a:e6: 27:cd:8a:be:7a:4f:ca:c0:a0:78:bf:3f:3b:0a:3f: cc:f9:e9:be:a3:b3:d2:13:6e:f4:4a:1f:f0:6d:6e: d6:34:56:63:cc:18:00:86:02:a6:35:e7:8b:f6:91: 98:e4:32:42:e4:bb:f9:35:54:3d:f6:a0:f1:03:92: f0:b8:4c:0c:eb:c2:fb:c3:4f:2d:cf:32:bb:ed:a8: 6b:44:59:9c:c4:1f:52:a5:8c:6f:18:45:d5:07:bf: 14:c5:50:05:95:62:cd:c1:60:2a:69:29:4c:26:83: da:b1:a7:1b:3c:4e:07:7b:54:7a:41:bd:bf:ef:c3: 44:9b:14:01:11:ec:3c:a7:28:a9:69:ac:a0:64:1c: 86:ea:71:fd:e8:5f:a8:28:c5:87:90:55:63:77:ef: 1a:08:fa:d3:bc:31:a2:69:e1:2e:bd:ec:57:17:a0: 33:3c:6c:7f:10:80:7a:b8:09:d9:af:54:ff:e4:74: d7:71:53:30:af:04:44:cd:8c:4a:d2:3e:a5:66:8e: 4f:20:e4:ee:a1:33:46:ae:39:90:9e:32:84:df:f4: 89:45:dd:0d:50:90:8e:68:0c:22:4e:03:03:ef:92: 43:ce:6f:94:2e:f0:63:68:f9:a9:b7:3d:00:81:1f: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:F9:8F:C3:EA:85:BE:38:40:F2:34:F5:B5:6F:D2:98:A9:55:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bc:af:ce:84:1d:80:33:8b:32:53:6f:58:5d:59:d8:8a:21: d9:67:36:9a:a3:5e:b5:15:fb:3d:98:9a:54:50:9b:af:32:8a: f2:54:6b:26:c6:88:c3:6a:48:b7:8d:ec:0b:23:9c:2c:ca:81: 1d:6f:47:a3:e1:f5:de:36:2a:13:dc:d6:7a:98:93:31:90:c2: ce:a5:f4:52:9c:21:3b:6e:a5:83:e0:8a:67:45:dd:8b:2c:3b: f7:8f:68:3e:f9:5d:30:4d:3e:06:56:eb:3a:2d:53:df:31:b9: 4e:fa:b7:ec:2d:94:26:f5:e2:1d:1a:fa:3f:28:13:30:a8:f6: e3:ab:32:da:8e:c1:79:72:d9:37:78:f2:f5:97:f7:0e:2b:7e: e8:26:81:b2:98:2f:46:94:5a:d1:57:72:cc:f5:02:5c:91:f2: 2e:53:a4:15:80:66:c3:46:fa:23:9b:b9:37:5a:e7:29:63:07: 5f:8d:f2:a5:9e:5c:34:4b:25:cf:18:c9:71:bd:37:cd:82:e1: df:08:f7:2a:1f:36:25:52:9b:bd:c0:09:6e:27:57:a1:a1:71: b2:5d:c2:f9:37:90:2c:0e:49:3e:39:35:71:42:14:9d:6f:77: e7:08:b8:2a:c3:c3:67:c8:9e:b9:dc:a5:8d:2c:d8:ea:7a:a8: 2f:40:ac:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE57yjC8YgckZJ0qgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk OWZmNGI5ZWYtMWMwYy00YjY5LWIzNTgtZTQ0MTk1OTAyMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj1yl83IQNkYnq0UWuYnzYq+ek/KwKB4vz87 Cj/M+em+o7PSE270Sh/wbW7WNFZjzBgAhgKmNeeL9pGY5DJC5Lv5NVQ99qDxA5Lw uEwM68L7w08tzzK77ahrRFmcxB9SpYxvGEXVB78UxVAFlWLNwWAqaSlMJoPasacb PE4He1R6Qb2/78NEmxQBEew8pyipaaygZByG6nH96F+oKMWHkFVjd+8aCPrTvDGi aeEuvexXF6AzPGx/EIB6uAnZr1T/5HTXcVMwrwREzYxK0j6lZo5PIOTuoTNGrjmQ njKE3/SJRd0NUJCOaAwiTgMD75JDzm+ULvBjaPmptz0AgR98RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDcS+Y/D6oW+OEDyNPW1b9KYqVXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmNGNiMTItMTY0Mi0z YzdhLTkyMGYtZGE2NjVhY2Y0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEm8r86EHYAzizJTb1hdWdiKIdlnNpqjXrUV+z2YmlRQm68yivJU aybGiMNqSLeN7AsjnCzKgR1vR6Ph9d42KhPc1nqYkzGQws6l9FKcITtupYPgimdF 3YssO/ePaD75XTBNPgZW6zotU98xuU76t+wtlCb14h0a+j8oEzCo9uOrMtqOwXly 2Td48vWX9w4rfugmgbKYL0aUWtFXcsz1AlyR8i5TpBWAZsNG+iObuTda5yljB1+N 8qWeXDRLJc8YyXG9N82C4d8I9yofNiVSm73ACW4nV6GhcbJdwvk3kCwOST45NXFC FJ1vd+cIuCrDw2fInrncpY0s2Op6qC9ArAE= -----END CERTIFICATE-----Generated at Fri Jul 24 06:28:09 2026 by rpki-client