$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa File: afe4b7b2-223b-38b1-8752-565def625b63.roa (raw, json) Hash identifier: 4JOCW2wkFETcLzg/rWQ28o7nJmzbuucxFyCYH1RLANA= Subject key identifier: 1D:12:3B:D0:97:13:F5:1E:E7:21:73:F8:C2:ED:1A:D8:27:26:71:3A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E3A2F51EE5F658BF4B494CA40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 132046 IP address blocks: 2001:470:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:51:ee:5f:65:8b:f4:b4:94:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=fdb76aa7-7b3d-4db7-a645-79386290ad96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:9c:8b:0f:74:b9:ba:64:0a:f0:b5:22:17: b5:cf:a4:0f:c9:7c:8b:d1:95:e3:83:05:54:da:db: ed:6a:3e:e9:02:16:61:88:36:7a:fd:3a:50:6d:52: c9:88:c6:e6:53:af:52:a7:aa:a7:f1:e7:3b:2e:5f: df:a8:ee:b0:a6:47:c6:eb:9a:f9:e8:de:dd:c7:90: f9:ba:a1:8d:6f:c6:70:d6:01:ea:7f:67:b9:b0:ef: 46:4c:98:7a:62:17:f6:2e:a2:92:1b:f3:bc:45:e4: 9e:21:6c:12:38:5e:ca:fa:15:ea:26:0c:e4:cc:fe: 67:d4:a6:b9:36:3a:a3:3c:b1:e1:27:0f:81:a3:88: 7d:17:84:c2:a1:ec:5b:be:68:aa:d1:e3:1d:be:8a: 80:d2:2d:67:40:36:19:7c:a8:f8:c0:a0:13:e3:8b: a1:a6:37:37:75:9c:c3:23:44:c8:5c:62:0b:80:63: bd:2c:a0:54:d9:7a:ac:31:6e:60:e1:f7:e1:43:65: e7:58:ca:58:73:73:ce:47:d5:c2:02:ac:b2:f7:ed: ff:eb:59:79:74:b1:1f:ad:2f:a9:b2:7a:ff:f5:0d: 21:f3:04:67:e2:f1:5a:c1:af:9c:26:1f:0e:21:d5: 45:34:cc:5b:6c:7f:7c:86:17:2c:b9:98:67:60:b0: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:12:3B:D0:97:13:F5:1E:E7:21:73:F8:C2:ED:1A:D8:27:26:71:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f4:66:84:2d:83:a6:c0:5f:e1:70:e5:4c:ee:3f:2d:c8:46: 37:56:56:52:0c:d2:17:5e:79:cd:33:2e:b0:6d:53:ad:3e:43: 84:b3:ba:45:84:df:da:21:3c:43:18:4a:f1:f1:e7:b1:8c:4a: 95:b4:a5:61:83:dc:62:d7:a1:74:e9:5f:de:dc:3e:d7:eb:2e: d4:de:dd:05:d8:de:8c:64:3b:18:b9:80:80:85:a9:68:72:38: 5f:95:da:8b:76:db:da:19:f8:6d:bf:d2:10:1c:ef:9f:48:c1: 3e:36:2f:5f:74:eb:a6:c6:5c:74:25:32:1a:5b:fa:3d:38:66: 45:b8:36:18:f1:0c:2e:a1:52:dd:ba:8f:af:34:1d:d8:45:6d: b8:7e:02:29:98:7a:5d:65:2f:16:a8:78:2c:7d:23:c1:e3:c6: af:02:ff:a9:0d:5c:a0:99:db:b5:24:dd:b4:8a:84:52:15:56: 97:c0:6f:ed:12:88:0f:66:d0:ee:0d:57:6e:8a:e2:ed:f5:a0: 2a:78:83:db:85:2d:82:4c:54:54:50:c9:df:64:55:91:1b:6a: 17:67:b4:88:03:34:fb:e8:03:1e:a6:d7:f5:5a:40:30:76:5a: b7:fb:af:db:65:76:9b:c1:d7:a9:0a:42:ae:4b:e3:ca:a5:48: 07:53:97:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L1HuX2WL9LSUykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmRiNzZhYTctN2IzZC00ZGI3LWE2NDUtNzkzODYyOTBhZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHCciw90ubpkCvC1Ihe1z6QPyXyL0ZXjgwVU 2tvtaj7pAhZhiDZ6/TpQbVLJiMbmU69Sp6qn8ec7Ll/fqO6wpkfG65r56N7dx5D5 uqGNb8Zw1gHqf2e5sO9GTJh6Yhf2LqKSG/O8ReSeIWwSOF7K+hXqJgzkzP5n1Ka5 NjqjPLHhJw+Bo4h9F4TCoexbvmiq0eMdvoqA0i1nQDYZfKj4wKAT44uhpjc3dZzD I0TIXGILgGO9LKBU2XqsMW5g4ffhQ2XnWMpYc3POR9XCAqyy9+3/61l5dLEfrS+p snr/9Q0h8wRn4vFawa+cJh8OIdVFNMxbbH98hhcsuZhnYLAJ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0SO9CXE/Ue5yFz+MLtGtgnJnE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWZlNGI3YjItMjIzYi0z OGIxLTg3NTItNTY1ZGVmNjI1YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJL0ZoQtg6bAX+Fw5UzuPy3IRjdWVlIM0hdeec0zLrBtU60+Q4Sz ukWE39ohPEMYSvHx57GMSpW0pWGD3GLXoXTpX97cPtfrLtTe3QXY3oxkOxi5gICF qWhyOF+V2ot229oZ+G2/0hAc759IwT42L19066bGXHQlMhpb+j04ZkW4NhjxDC6h Ut26j680HdhFbbh+AimYel1lLxaoeCx9I8Hjxq8C/6kNXKCZ27Uk3bSKhFIVVpfA b+0SiA9m0O4NV26K4u31oCp4g9uFLYJMVFRQyd9kVZEbahdntIgDNPvoAx6m1/Va QDB2Wrf7r9tldpvB16kKQq5L48qlSAdTl4U= -----END CERTIFICATE-----Generated at Fri Jul 24 10:22:26 2026 by rpki-client