$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cee6aa41-1a6e-3daf-8410-90b58e78f240.roa File: cee6aa41-1a6e-3daf-8410-90b58e78f240.roa (raw, json) Hash identifier: /8C8CerdAifXy2miEL4iHT+Zm1wL+bAZ9sVIPhSf33Y= Subject key identifier: 86:3C:32:33:47:DD:10:CE:E4:03:FE:FE:0D:52:71:A8:64:08:35:2C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DCF2B1E047F50FFA0F4D58480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cee6aa41-1a6e-3daf-8410-90b58e78f240.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 41033 IP address blocks: 2001:470:572::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1e:04:7f:50:ff:a0:f4:d5:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=4dc7083b-86b1-4cb4-aa8f-fa06686d1a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:c3:d3:80:36:e7:1f:3f:f5:24:cf:02:5e: c8:9d:a9:39:94:e5:12:ca:25:e5:5c:3c:ea:10:84: ec:24:d5:0d:50:2c:13:50:c8:a8:00:ec:65:aa:97: 6d:39:ca:86:7b:98:91:5c:3e:ae:6f:ba:22:2c:dc: 92:db:ae:16:19:c7:00:fd:65:62:b0:5e:5d:29:ff: fd:2e:dc:a4:a6:0c:79:f3:38:f5:6d:f7:13:2c:b9: c6:c3:bf:01:60:4c:20:76:59:64:23:e5:1c:34:81: 7b:3d:f8:53:90:d4:9a:53:59:1b:fa:bc:af:3d:bd: 2d:6a:a5:ae:1b:cd:35:44:f9:55:ee:35:3b:b1:4b: 50:de:56:8a:8c:2a:22:36:d1:d3:19:f2:a8:3a:79: f4:fa:95:e7:70:85:d8:d1:eb:34:26:84:a4:53:8c: 69:f6:e5:1b:ef:be:5f:d1:68:16:56:b8:f1:22:47: 03:fa:45:c7:2b:00:7d:3a:31:39:fe:db:54:f3:1f: 7f:77:42:27:43:8c:c0:53:8f:5c:90:24:80:3d:1c: 4b:21:76:83:8f:e3:aa:fe:e9:23:2e:93:52:33:5b: c5:fb:1b:a3:49:8e:55:08:96:08:c4:4f:84:13:57: c8:9f:df:7a:da:6d:98:b0:de:9d:a8:62:98:39:a4: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:32:33:47:DD:10:CE:E4:03:FE:FE:0D:52:71:A8:64:08:35:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cee6aa41-1a6e-3daf-8410-90b58e78f240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:572::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:60:0d:2f:04:12:67:4a:0a:47:92:80:fb:a1:a5:74:f5:63: 04:61:0f:9c:89:f7:68:85:4e:6a:b1:fb:bd:b4:e0:b1:2a:9f: 4e:34:2d:4e:ec:13:eb:3c:42:98:f1:96:b5:85:a0:dc:80:73: 41:a8:55:d9:eb:e4:ec:37:c9:82:e4:29:0e:58:32:ca:ad:75: be:81:42:56:4f:a3:4c:7d:5c:12:ca:3e:1b:b6:b6:36:bc:86: 88:7f:8b:28:9b:38:7b:fa:b1:1f:6a:70:1b:d2:57:b8:e1:cf: a0:24:b0:8a:a6:56:36:62:87:5f:29:5e:18:5a:f7:84:f6:a6: fe:7f:78:79:bc:1e:cb:03:1b:88:85:54:45:0f:da:f2:d0:20: 86:35:05:b5:1a:dd:8c:a5:68:95:da:3c:f9:f3:55:a6:ae:de: 78:d7:57:59:fd:8d:de:e2:59:55:c9:1e:c3:9b:0f:b6:43:43: 49:18:ee:21:8b:61:87:27:dc:3a:d2:7a:df:84:ad:13:53:3f: d1:7b:6b:46:72:08:60:73:4f:bf:67:cd:08:90:15:fc:63:df: 56:cb:cd:52:2b:42:c3:e4:9e:07:52:0b:42:37:3f:34:69:bb: c0:9c:21:5f:1d:a9:fb:a6:a4:68:46:98:1b:d0:80:07:99:2d: ee:10:8c:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3PKx4Ef1D/oPTVhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NGRjNzA4M2ItODZiMS00Y2I0LWFhOGYtZmEwNjY4NmQxYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dzD04A25x8/9STPAl7Inak5lOUSyiXlXDzq EITsJNUNUCwTUMioAOxlqpdtOcqGe5iRXD6ub7oiLNyS264WGccA/WVisF5dKf/9 Ltykpgx58zj1bfcTLLnGw78BYEwgdllkI+UcNIF7PfhTkNSaU1kb+ryvPb0taqWu G801RPlV7jU7sUtQ3laKjCoiNtHTGfKoOnn0+pXncIXY0es0JoSkU4xp9uUb775f 0WgWVrjxIkcD+kXHKwB9OjE5/ttU8x9/d0InQ4zAU49ckCSAPRxLIXaDj+Oq/ukj LpNSM1vF+xujSY5VCJYIxE+EE1fIn9962m2YsN6dqGKYOaQ0bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIY8MjNH3RDO5AP+/g1ScahkCDUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2VlNmFhNDEtMWE2ZS0z ZGFmLTg0MTAtOTBiNThlNzhmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALdgDS8EEmdKCkeSgPuhpXT1YwRhD5yJ92iFTmqx+7204LEqn040 LU7sE+s8QpjxlrWFoNyAc0GoVdnr5Ow3yYLkKQ5YMsqtdb6BQlZPo0x9XBLKPhu2 tja8hoh/iyibOHv6sR9qcBvSV7jhz6AksIqmVjZih18pXhha94T2pv5/eHm8HssD G4iFVEUP2vLQIIY1BbUa3YylaJXaPPnzVaau3njXV1n9jd7iWVXJHsObD7ZDQ0kY 7iGLYYcn3DrSet+ErRNTP9F7a0ZyCGBzT79nzQiQFfxj31bLzVIrQsPkngdSC0I3 PzRpu8CcIV8dqfumpGhGmBvQgAeZLe4QjHo= -----END CERTIFICATE-----Generated at Wed May 13 09:18:47 2026 by rpki-client