$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78575d5e-b6ee-3d37-a18f-f2f0a27ed766.roa File: 78575d5e-b6ee-3d37-a18f-f2f0a27ed766.roa (raw, json) Hash identifier: ExM/+kw/Do/UY2QdmCOofUN+V0sv6YB/OE0Wwa7fKgU= Subject key identifier: 57:95:FC:EB:17:48:A2:93:A7:56:94:A8:51:52:82:DC:E3:34:D1:25 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E709F6883CCF960183E6D1280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78575d5e-b6ee-3d37-a18f-f2f0a27ed766.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 28773 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:68:83:cc:f9:60:18:3e:6d:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=dc8cf5cc-beb1-4dc1-9817-afa85f7cccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:62:d0:0b:c6:a4:85:5f:c5:db:64:d2:96: 44:76:fc:ed:99:a2:f1:8f:4d:58:59:cf:52:68:59: bf:16:62:33:52:57:f7:fa:77:a5:71:5f:da:71:46: 98:4f:89:28:9b:c2:3d:5a:dc:a6:80:ae:0f:0d:82: 46:18:5c:f1:a1:2e:d8:6c:7c:85:20:23:cf:ea:bb: be:15:23:6d:42:d2:31:b8:f8:71:2a:56:2f:5f:6c: 8e:4a:72:60:41:c5:51:b2:4d:76:90:ee:cf:ee:bc: 43:98:fb:0e:1b:49:bd:8f:4b:ca:3b:6c:94:7e:67: e1:4c:26:25:47:e4:f5:53:9b:e6:6c:24:e3:29:d6: b4:cd:92:b6:21:07:2e:c0:b5:2b:10:d5:db:b9:d3: ce:c6:3e:5e:f6:ce:7e:34:16:ca:a5:c8:f6:42:63: 6c:7d:11:42:ac:b1:e6:e0:c6:50:ee:0b:17:1b:c1: 36:e1:c2:89:17:2e:b5:12:ee:7d:0e:33:48:3c:cc: 67:2a:22:54:66:cf:34:58:72:1a:42:e1:33:ad:9f: 9e:5a:49:a4:e1:84:be:96:81:ed:68:6b:d7:78:3e: 4d:74:95:df:95:e5:91:42:5c:3c:09:76:5b:87:eb: c6:a1:40:34:40:8b:16:e8:9b:42:8f:e9:d5:f0:86: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:95:FC:EB:17:48:A2:93:A7:56:94:A8:51:52:82:DC:E3:34:D1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78575d5e-b6ee-3d37-a18f-f2f0a27ed766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:95:35:e5:aa:11:0f:8c:a3:b5:98:7a:03:03:0e:b2:fb:5f: 0c:26:08:81:46:00:e8:4b:29:e3:88:f3:e0:f9:2f:a1:f6:65: 57:e4:1d:9c:74:14:4c:19:83:11:06:f9:df:84:50:31:d6:fc: 9f:3e:1e:69:6f:1a:5b:a9:b9:c3:fe:ae:ce:68:9e:49:3a:ec: cd:9a:1b:c6:6f:95:8e:da:45:b0:0d:32:60:e7:7f:90:69:24: 78:dc:57:4f:1c:d0:fa:bd:35:f4:e3:51:11:fb:25:24:33:22: 77:32:e3:5d:47:d4:2e:10:6c:da:e6:53:d0:63:f6:31:57:cf: 25:fa:80:ca:5b:54:cd:4f:49:21:82:4a:08:68:8a:90:1f:d1: 1f:5d:12:34:8e:8c:f4:54:11:f1:c5:be:ff:35:e9:55:14:2c: ee:12:52:70:25:0e:b0:1a:22:d5:18:aa:e5:aa:b8:96:f7:4a: 56:57:2b:42:b4:9c:06:3c:51:a3:a9:bd:b9:ca:2e:10:27:6e: b5:15:c3:2c:d0:72:aa:fb:21:e6:a0:41:ab:72:ad:fe:58:70: 4b:4f:9e:de:bc:bc:aa:b2:98:5f:14:19:01:6f:6d:8c:48:78: 6d:d6:ab:7d:9e:18:32:92:e9:92:d2:65:bc:f5:bf:67:6f:4e: ea:69:c4:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5wn2iDzPlgGD5tEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZGM4Y2Y1Y2MtYmViMS00ZGMxLTk4MTctYWZhODVmN2NjY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/9i0AvGpIVfxdtk0pZEdvztmaLxj01YWc9S aFm/FmIzUlf3+nelcV/acUaYT4kom8I9WtymgK4PDYJGGFzxoS7YbHyFICPP6ru+ FSNtQtIxuPhxKlYvX2yOSnJgQcVRsk12kO7P7rxDmPsOG0m9j0vKO2yUfmfhTCYl R+T1U5vmbCTjKda0zZK2IQcuwLUrENXbudPOxj5e9s5+NBbKpcj2QmNsfRFCrLHm 4MZQ7gsXG8E24cKJFy61Eu59DjNIPMxnKiJUZs80WHIaQuEzrZ+eWkmk4YS+loHt aGvXeD5NdJXfleWRQlw8CXZbh+vGoUA0QIsW6JtCj+nV8IZQzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFeV/OsXSKKTp1aUqFFSgtzjNNElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzg1NzVkNWUtYjZlZS0z ZDM3LWExOGYtZjJmMGEyN2VkNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACiVNeWqEQ+Mo7WYegMDDrL7XwwmCIFGAOhLKeOI8+D5L6H2ZVfk HZx0FEwZgxEG+d+EUDHW/J8+HmlvGlupucP+rs5onkk67M2aG8ZvlY7aRbANMmDn f5BpJHjcV08c0Pq9NfTjURH7JSQzIncy411H1C4QbNrmU9Bj9jFXzyX6gMpbVM1P SSGCSghoipAf0R9dEjSOjPRUEfHFvv816VUULO4SUnAlDrAaItUYquWquJb3SlZX K0K0nAY8UaOpvbnKLhAnbrUVwyzQcqr7IeagQatyrf5YcEtPnt68vKqymF8UGQFv bYxIeG3Wq32eGDKS6ZLSZbz1v2dvTuppxMs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:55 2026 by rpki-client