$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa File: a60af33c-152e-390c-ad7b-28f10cb41641.roa (raw, json) Hash identifier: pIKqx9hrrshwpT9qEeWWnnlAXB0OvuvLsGJEOUcm0OY= Subject key identifier: 86:3C:6F:BA:F4:19:2F:54:A2:E3:C5:39:EF:B8:6B:0A:0F:1A:6F:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DB0758F37390E8EB5680CA160 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 36286 IP address blocks: 2001:470:472::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:8f:37:39:0e:8e:b5:68:0c:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=948d687b-a8d6-4651-b2fb-6e547c05a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:74:32:aa:7b:02:e7:71:76:db:ca:6e:47: af:cf:01:87:fe:c8:8e:a6:28:32:7e:cb:02:c1:c8: ca:a8:db:6c:94:4a:e4:2a:fc:88:7d:5a:ea:a5:66: c4:a2:b6:7f:5c:e5:36:7f:88:fc:3b:a5:02:ea:92: f1:ab:4c:13:91:21:15:3d:2d:4c:39:ae:f7:35:9d: ab:28:1a:15:e0:a3:99:0b:be:3e:ee:00:71:ae:91: 57:b5:6d:02:b2:63:e8:b1:54:2c:b3:47:8d:5e:53: 67:66:3e:b4:92:80:75:36:e8:ca:ca:cb:04:ce:9d: 36:8e:b2:fe:99:db:8e:3b:b9:39:cb:db:2b:29:78: 3a:d8:34:13:95:bc:b0:88:0f:cc:0b:74:11:91:8b: 72:b9:23:2b:18:90:54:e7:8a:5b:8b:67:48:06:d6: a3:5b:89:4a:1e:d9:ed:f7:d6:1e:96:e9:83:78:8f: f2:82:1e:59:a2:fc:42:14:cb:53:44:d8:cd:9e:db: f7:30:f1:f2:0e:ff:39:25:df:96:5c:a0:07:43:f8: 08:3a:26:18:c1:6d:6f:10:89:ce:4e:20:7e:d1:de: 03:a6:91:5a:dd:00:cd:b9:0d:7a:06:30:2b:28:56: d1:9d:23:71:09:53:a0:e9:b8:53:e0:3e:11:b9:09: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:6F:BA:F4:19:2F:54:A2:E3:C5:39:EF:B8:6B:0A:0F:1A:6F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a60af33c-152e-390c-ad7b-28f10cb41641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:472::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:71:05:55:25:d3:21:1f:6e:1f:0d:0f:b7:4c:ff:dd:c8:2a: 38:b8:99:25:3b:87:28:7b:7e:85:f2:0b:93:8b:b9:c9:4b:93: 8a:7a:24:12:87:f8:a4:46:db:ce:d5:2d:99:8a:44:fa:d4:39: 72:ad:dc:17:c2:58:e6:8b:7c:58:d9:19:49:f2:6a:06:d7:bd: f5:25:65:6f:58:92:94:1a:2d:3c:ac:94:d5:f6:fc:bf:82:6f: 80:f0:54:bf:fb:9a:de:fe:5d:0b:93:57:86:ba:be:14:a0:b9: 02:6b:19:3e:76:03:a1:0c:68:d6:13:df:6a:71:45:2c:93:0e: d4:5e:ae:37:8c:26:be:74:18:13:fa:f2:e5:b5:12:fd:88:cc: 0b:14:7e:e6:2c:94:12:79:1a:20:40:04:a6:81:5d:b3:14:9c: c2:2f:a9:54:92:c9:63:30:1f:63:af:a1:05:af:eb:10:33:7f: 96:da:81:07:8e:f4:a3:dc:6b:d1:ad:6e:9b:47:a4:fd:2c:4f: 52:37:fb:7d:91:a4:b8:a8:1d:df:a7:8e:b3:b4:78:ee:31:06: fa:f2:a8:77:d9:02:f0:45:4c:af:e5:98:53:08:8f:2c:c4:96: 02:a2:38:99:54:91:6d:70:94:ec:69:d6:36:f6:6b:18:e9:9d: 7a:f0:3c:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2wdY83OQ6OtWgMoWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk OTQ4ZDY4N2ItYThkNi00NjUxLWIyZmItNmU1NDdjMDVhNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lx0Mqp7AudxdtvKbkevzwGH/siOpigyfssC wcjKqNtslErkKvyIfVrqpWbEorZ/XOU2f4j8O6UC6pLxq0wTkSEVPS1MOa73NZ2r KBoV4KOZC74+7gBxrpFXtW0CsmPosVQss0eNXlNnZj60koB1NujKyssEzp02jrL+ mduOO7k5y9srKXg62DQTlbywiA/MC3QRkYtyuSMrGJBU54pbi2dIBtajW4lKHtnt 99YelumDeI/ygh5ZovxCFMtTRNjNntv3MPHyDv85Jd+WXKAHQ/gIOiYYwW1vEInO TiB+0d4DppFa3QDNuQ16BjArKFbRnSNxCVOg6bhT4D4RuQnKbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIY8b7r0GS9UouPFOe+4awoPGm9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTYwYWYzM2MtMTUyZS0z OTBjLWFkN2ItMjhmMTBjYjQxNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL1xBVUl0yEfbh8ND7dM/93IKji4mSU7hyh7foXyC5OLuclLk4p6 JBKH+KRG287VLZmKRPrUOXKt3BfCWOaLfFjZGUnyagbXvfUlZW9YkpQaLTyslNX2 /L+Cb4DwVL/7mt7+XQuTV4a6vhSguQJrGT52A6EMaNYT32pxRSyTDtRerjeMJr50 GBP68uW1Ev2IzAsUfuYslBJ5GiBABKaBXbMUnMIvqVSSyWMwH2OvoQWv6xAzf5ba gQeO9KPca9GtbptHpP0sT1I3+32RpLioHd+njrO0eO4xBvryqHfZAvBFTK/lmFMI jyzElgKiOJlUkW1wlOxp1jb2axjpnXrwPP4= -----END CERTIFICATE-----Generated at Wed May 13 12:20:24 2026 by rpki-client