$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa File: 963de827-0eb3-39c8-8bee-3f01a20ec876.roa (raw, json) Hash identifier: vGjG+lI/WFBx4f1CQnEMvvUv0XCkIlj5+lm0+eZnAxg= Subject key identifier: E0:14:09:ED:80:54:34:B8:58:54:3B:F1:5F:2D:B2:F0:23:B6:0C:DD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E3A2F6C8505303C5B906BF480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 212955 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:6c:85:05:30:3c:5b:90:6b:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=b1cabfd2-50c1-4c94-9b4c-d7f0f7723934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:d9:53:56:f0:d0:17:bd:a0:dc:5d:65:7f: a0:32:6d:3e:b9:0a:a8:fc:3a:ea:04:b3:66:3e:55: 20:2d:af:3a:a9:32:4b:6e:b8:04:ef:a4:5b:b8:e0: e2:49:07:20:8c:b7:31:b2:2e:3f:7d:b5:c8:38:92: 60:69:ef:77:84:5b:bd:a6:94:29:eb:d0:41:37:c5: 0c:de:c7:b1:95:9f:a8:cd:91:9f:6d:f0:74:c9:dd: c6:26:ef:48:2f:33:fc:82:01:95:9e:6d:eb:ff:e5: 45:0d:a1:fa:56:6c:ae:e9:cc:45:93:65:7e:11:14: 0b:43:42:79:b3:b2:9d:e0:3d:46:ec:d0:cf:27:db: 4f:18:b4:62:4f:1b:fa:70:32:65:dc:98:e7:61:fc: df:cf:63:cb:d9:4e:07:07:91:5e:c8:8b:6e:b5:9f: 61:35:84:bf:52:02:93:08:04:8f:02:48:5b:db:de: d4:69:7c:37:73:49:bf:cf:a2:61:96:b8:ca:ec:58: e2:44:e1:7c:b3:74:cf:ca:45:5f:a8:a5:ab:cc:ae: a3:6e:2b:ee:e5:b2:73:95:fc:1e:5a:18:4d:62:f9: cb:fe:9b:ce:ac:37:5a:75:f4:46:d8:b6:4d:0c:66: d9:49:e2:66:c8:9e:78:39:32:3f:24:c9:24:6a:dd: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:14:09:ED:80:54:34:B8:58:54:3B:F1:5F:2D:B2:F0:23:B6:0C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:55:43:f8:39:6d:27:b7:85:bf:01:f9:9e:e8:21:65:81:d9: 1e:45:a9:e2:03:b1:91:c2:aa:da:09:51:63:80:2e:e5:0a:c0: 21:75:ce:cb:54:f1:81:92:f1:ec:81:cd:2f:97:e3:21:07:84: 4f:6a:4f:82:ea:08:32:56:78:5a:39:89:ae:f5:06:25:8f:12: 6a:25:10:bc:e8:0c:0f:e5:9d:5b:c8:1f:11:44:8b:66:76:f3: 4d:e3:c6:91:8d:0b:a9:24:bb:bc:57:c1:c3:82:bb:9d:3f:db: 76:1e:76:f3:70:5a:91:b8:bb:09:33:e1:e6:9b:ee:e8:d1:0c: c8:34:c1:64:5e:6d:a5:5b:c0:4c:1f:3b:ed:03:2c:05:25:db: 94:74:9a:df:59:c1:00:cd:ab:23:45:20:60:8c:90:43:01:1c: 8a:37:cc:3e:21:a9:ed:10:cb:a8:8b:a6:f7:96:dd:d5:d7:e1: 12:ae:a2:90:c0:17:f0:c0:de:de:82:20:1b:2b:71:3e:b3:e3: 91:68:f3:40:a0:37:70:e6:41:11:34:3d:f7:87:13:87:d5:de: 69:04:be:62:4d:83:71:b8:b0:0f:81:75:57:22:15:90:1e:16: cb:1e:b6:31:6b:59:ed:e3:b2:46:18:f0:84:cd:e7:90:66:d4: e1:56:f4:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2yFBTA8W5Br9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk YjFjYWJmZDItNTBjMS00Yzk0LTliNGMtZDdmMGY3NzIzOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9/ZU1bw0Be9oNxdZX+gMm0+uQqo/DrqBLNm PlUgLa86qTJLbrgE76RbuODiSQcgjLcxsi4/fbXIOJJgae93hFu9ppQp69BBN8UM 3sexlZ+ozZGfbfB0yd3GJu9ILzP8ggGVnm3r/+VFDaH6Vmyu6cxFk2V+ERQLQ0J5 s7Kd4D1G7NDPJ9tPGLRiTxv6cDJl3JjnYfzfz2PL2U4HB5FeyItutZ9hNYS/UgKT CASPAkhb297UaXw3c0m/z6JhlrjK7FjiROF8s3TPykVfqKWrzK6jbivu5bJzlfwe WhhNYvnL/pvOrDdadfRG2LZNDGbZSeJmyJ54OTI/JMkkat2rUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOAUCe2AVDS4WFQ78V8tsvAjtgzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTYzZGU4MjctMGViMy0z OWM4LThiZWUtM2YwMWEyMGVjODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtVQ/g5bSe3hb8B+Z7oIWWB2R5FqeIDsZHCqtoJUWOALuUKwCF1 zstU8YGS8eyBzS+X4yEHhE9qT4LqCDJWeFo5ia71BiWPEmolELzoDA/lnVvIHxFE i2Z2803jxpGNC6kku7xXwcOCu50/23YedvNwWpG4uwkz4eab7ujRDMg0wWRebaVb wEwfO+0DLAUl25R0mt9ZwQDNqyNFIGCMkEMBHIo3zD4hqe0Qy6iLpveW3dXX4RKu opDAF/DA3t6CIBsrcT6z45Fo80CgN3DmQRE0PfeHE4fV3mkEvmJNg3G4sA+BdVci FZAeFssetjFrWe3jskYY8ITN55Bm1OFW9IE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:22 2026 by rpki-client