$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8cae996-b9c6-33db-afe8-2452076d4487.roa File: a8cae996-b9c6-33db-afe8-2452076d4487.roa (raw, json) Hash identifier: b/qmOCxtVQHBd6MVrKg13Bm1sYx9U962iyS/zZEWuog= Subject key identifier: 63:3E:48:F0:38:02:86:86:01:EF:FC:9F:1E:E3:25:F4:A3:D2:BA:B3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E4129E8C7DAC7602AEC42C400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8cae996-b9c6-33db-afe8-2452076d4487.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 2734 IP address blocks: 2001:470:58c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e8:c7:da:c7:60:2a:ec:42:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=23380a1c-e068-408d-ada1-0b230dd09ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:04:41:6c:e4:04:45:b8:ef:b4:dc:d8:c3: 7c:a9:47:c3:ef:ac:3f:4a:8e:71:93:1c:02:28:34: 6a:1b:cd:07:d3:97:02:cf:91:c9:74:3c:61:7a:84: 68:f8:f1:f1:20:89:53:54:3a:f8:d6:f5:53:70:35: 17:12:ae:04:e3:a4:72:f2:17:b3:ea:ef:5f:8b:5a: e3:7e:8f:a2:9a:f8:02:46:ef:3d:f9:4b:31:6b:5c: 2a:1d:a6:5f:32:24:1e:00:2b:62:e8:18:d2:7d:ab: 25:4c:e8:c3:a7:03:bc:a4:29:13:7d:44:73:a8:3c: 9d:7b:81:93:28:01:63:c5:38:1f:30:37:63:3c:e7: 73:07:aa:46:12:e3:7d:0e:a5:e0:41:bd:5b:f4:4f: ac:47:28:57:7a:da:10:8e:14:34:51:c8:69:97:fc: 6a:49:da:14:d5:64:7d:d4:07:59:9a:f7:93:bc:53: b5:ef:be:95:24:47:bf:1c:52:37:e8:97:2f:f1:30: 12:81:51:c8:1a:53:af:da:9d:66:b0:3b:e8:0b:d5: cc:83:27:ba:b2:86:40:aa:e3:2a:c1:f4:73:b9:85: d6:f1:d9:d4:33:c9:cb:58:0c:f8:40:28:e1:88:fe: 71:eb:28:36:ae:94:7e:29:f2:80:1b:9a:88:88:b3: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:48:F0:38:02:86:86:01:EF:FC:9F:1E:E3:25:F4:A3:D2:BA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8cae996-b9c6-33db-afe8-2452076d4487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:58c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:57:db:71:33:72:d4:3f:ea:8e:96:fd:3f:d5:77:97:df:3c: ec:4b:eb:29:50:a8:c0:2b:7c:b4:92:f9:53:46:a9:2f:6e:84: 64:12:bf:1f:ad:f9:5c:c9:40:e5:a7:ce:72:f3:2e:1c:76:f5: ca:fe:5c:77:1e:99:ce:05:2e:1f:57:69:78:1b:98:1b:62:f0: cd:b0:3f:9c:bf:a1:c3:9d:46:c8:1c:b4:42:ed:92:91:12:92: 0a:aa:54:5d:dc:1a:5b:2a:6e:0b:a4:71:2e:e9:c4:f0:31:ff: 37:d3:5f:63:a4:a4:3f:b0:52:b3:d5:0b:b3:d7:52:b1:ad:ab: 9c:c7:8c:4c:28:70:63:f5:fa:f3:c4:6e:5a:ff:fc:d2:20:32: e2:ff:d7:6b:48:c8:39:27:ee:46:c5:08:fc:08:26:77:e2:ae: b6:e7:0f:97:55:54:fc:48:68:41:b0:83:77:2a:39:38:22:db: 75:96:17:74:d0:5e:a4:0a:cb:60:c2:9d:bd:4b:ff:3c:e1:75: e1:72:b0:94:1a:e8:33:73:95:61:ff:f1:d0:e6:29:7c:17:b9: fd:a4:7b:21:74:c6:c9:31:1e:02:db:55:10:87:c4:28:d9:a8: 2d:8a:20:af:37:8d:bc:c3:0e:eb:ad:9a:5d:0d:ea:3d:fb:f5: c6:61:12:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5BKejH2sdgKuxCxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MjMzODBhMWMtZTA2OC00MDhkLWFkYTEtMGIyMzBkZDA5ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4EQWzkBEW477Tc2MN8qUfD76w/So5xkxwC KDRqG80H05cCz5HJdDxheoRo+PHxIIlTVDr41vVTcDUXEq4E46Ry8hez6u9fi1rj fo+imvgCRu89+Usxa1wqHaZfMiQeACti6BjSfaslTOjDpwO8pCkTfURzqDyde4GT KAFjxTgfMDdjPOdzB6pGEuN9DqXgQb1b9E+sRyhXetoQjhQ0Uchpl/xqSdoU1WR9 1AdZmveTvFO1776VJEe/HFI36Jcv8TASgVHIGlOv2p1msDvoC9XMgye6soZAquMq wfRzuYXW8dnUM8nLWAz4QCjhiP5x6yg2rpR+KfKAG5qIiLPqeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGM+SPA4AoaGAe/8nx7jJfSj0rqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYThjYWU5OTYtYjljNi0z M2RiLWFmZTgtMjQ1MjA3NmQ0NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEEcAWM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJX23EzctQ/6o6W/T/Vd5ffPOxL6ylQqMArfLSS+VNGqS9uhGQS vx+t+VzJQOWnznLzLhx29cr+XHcemc4FLh9XaXgbmBti8M2wP5y/ocOdRsgctELt kpESkgqqVF3cGlsqbgukcS7pxPAx/zfTX2OkpD+wUrPVC7PXUrGtq5zHjEwocGP1 +vPEblr//NIgMuL/12tIyDkn7kbFCPwIJnfirrbnD5dVVPxIaEGwg3cqOTgi23WW F3TQXqQKy2DCnb1L/zzhdeFysJQa6DNzlWH/8dDmKXwXuf2keyF0xskxHgLbVRCH xCjZqC2KIK83jbzDDuutml0N6j379cZhEpA= -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:46 2026 by rpki-client