$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa File: 86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa (raw, json) Hash identifier: ZSGvoSGKC+p+s9B0y3sZiRXfqseLfBdt6VdxfQErbys= Subject key identifier: 72:9E:F8:2A:18:5B:25:91:DA:7F:5C:58:AE:42:D7:59:0B:AF:1A:DE Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DA3E568D710559115B15B6980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 399672 IP address blocks: 2001:470:568::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:68:d7:10:55:91:15:b1:5b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=969d3d62-1277-4247-81f4-34c934bc0e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:59:3a:0d:94:60:25:1b:38:b2:7d:8d:91: cc:d1:a3:62:5f:65:93:b1:63:81:69:51:e8:a0:f2: e8:b8:ba:27:d1:76:ca:4a:f1:5c:e3:99:f9:e0:52: 89:8c:9b:0d:7e:3d:c9:2a:c2:0b:d6:b8:7f:f6:50: bf:29:86:79:1c:3c:b1:67:fc:69:5a:1f:67:63:09: cd:3e:ef:ac:44:a2:bd:14:d4:d3:33:4d:a2:1c:b3: 94:33:f3:75:69:de:cf:9a:32:9f:08:ef:5c:e5:b5: f0:4b:3d:08:11:92:6f:1a:71:88:4f:c8:40:27:11: 48:82:94:af:c2:4c:9e:b7:62:98:3f:af:5d:f7:e8: ac:b5:12:05:65:6a:a6:c8:6f:ca:98:1a:e2:a9:e5: b8:3a:74:6d:75:1e:36:a1:53:ea:ee:10:3d:a9:8d: aa:26:6c:f1:5b:fe:04:fd:7c:63:d9:83:67:f0:1f: c7:85:90:1e:f3:4c:60:99:20:54:1c:ca:08:64:1a: 64:1a:55:f2:4b:f8:dd:eb:1b:15:a6:65:21:f0:95: 0b:47:33:ad:75:ec:09:66:51:33:e9:6e:84:af:f8: 9b:3e:30:e1:f6:87:8a:db:9d:a5:bb:d4:76:16:94: 83:03:8e:88:22:4c:2f:91:2d:b5:b5:b6:7a:49:79: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:F8:2A:18:5B:25:91:DA:7F:5C:58:AE:42:D7:59:0B:AF:1A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86c2d3fb-1924-3b19-aa0c-66a812c633e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:568::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:5b:b8:08:4d:31:65:19:0f:59:c3:46:f8:7e:0b:9c:1f:21: 0b:72:56:84:2b:77:b0:51:eb:71:91:4d:9e:bf:55:88:36:47: 52:e9:f0:ea:cc:0e:c9:09:cf:a4:63:46:40:d9:7e:03:43:ef: dc:10:46:0e:fd:e9:a4:67:43:68:58:8c:79:ae:9d:e5:cf:6e: 82:53:90:18:f7:71:06:33:73:d5:5e:03:c4:9f:a8:6d:fd:61: b1:b9:89:61:c0:bd:42:4d:91:23:b2:a0:57:2f:68:84:ee:83: 3d:29:a2:55:ec:58:71:b8:21:b4:84:2b:79:ac:de:b5:be:56: d0:be:c4:aa:ca:7b:f3:0e:3c:19:0c:4d:93:ef:7a:81:0b:bc: 03:f9:d6:84:c5:41:cb:65:05:44:a4:9f:c5:00:43:0f:59:9b: b8:29:e3:a0:58:5a:e9:69:02:48:4e:a4:5c:91:f1:77:8c:99: 4c:2f:42:b1:ef:22:85:8c:d0:0a:6a:c1:89:32:08:8c:67:2d: 82:7d:89:75:27:6b:eb:07:3c:3c:f7:ba:67:a6:73:85:cf:52: 94:5f:0c:0f:9d:1f:76:39:43:e3:3a:f3:df:92:6f:39:55:e8: ac:80:47:56:75:f8:67:c3:a2:5b:ba:be:5c:39:7d:f8:89:04: ae:01:4e:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2j5WjXEFWRFbFbaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk OTY5ZDNkNjItMTI3Ny00MjQ3LTgxZjQtMzRjOTM0YmMwZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB1ZOg2UYCUbOLJ9jZHM0aNiX2WTsWOBaVHo oPLouLon0XbKSvFc45n54FKJjJsNfj3JKsIL1rh/9lC/KYZ5HDyxZ/xpWh9nYwnN Pu+sRKK9FNTTM02iHLOUM/N1ad7PmjKfCO9c5bXwSz0IEZJvGnGIT8hAJxFIgpSv wkyet2KYP69d9+istRIFZWqmyG/KmBriqeW4OnRtdR42oVPq7hA9qY2qJmzxW/4E /Xxj2YNn8B/HhZAe80xgmSBUHMoIZBpkGlXyS/jd6xsVpmUh8JULRzOtdewJZlEz 6W6Er/ibPjDh9oeK252lu9R2FpSDA46IIkwvkS21tbZ6SXkWGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKe+CoYWyWR2n9cWK5C11kLrxreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODZjMmQzZmItMTkyNC0z YjE5LWFhMGMtNjZhODEyYzYzM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBbuAhNMWUZD1nDRvh+C5wfIQtyVoQrd7BR63GRTZ6/VYg2R1Lp 8OrMDskJz6RjRkDZfgND79wQRg796aRnQ2hYjHmuneXPboJTkBj3cQYzc9VeA8Sf qG39YbG5iWHAvUJNkSOyoFcvaITugz0polXsWHG4IbSEK3ms3rW+VtC+xKrKe/MO PBkMTZPveoELvAP51oTFQctlBUSkn8UAQw9Zm7gp46BYWulpAkhOpFyR8XeMmUwv QrHvIoWM0ApqwYkyCIxnLYJ9iXUna+sHPDz3umemc4XPUpRfDA+dH3Y5Q+M689+S bzlV6KyAR1Z1+GfDolu6vlw5ffiJBK4BThM= -----END CERTIFICATE-----Generated at Wed May 13 07:58:24 2026 by rpki-client