$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa File: 66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa (raw, json) Hash identifier: rYCr/MLnL9zdcwp/+2bCTSh/c99CIbVQ2Mf2xnmQHuY= Subject key identifier: F0:5A:39:41:D1:BC:2F:69:53:6A:39:20:CB:90:43:FA:2A:83:9A:34 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DEDE0B1D7952F8E6CBF902300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 44901 IP address blocks: 2001:470:28f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b1:d7:95:2f:8e:6c:bf:90:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=c8d9d6d4-dc2d-4395-8727-9e30f20bf87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:31:a4:02:04:b6:d3:14:22:ea:2f:7a:0e: 45:62:09:26:b1:57:56:5f:ba:96:c8:8b:62:2f:e4: 30:9b:86:35:2e:0b:ae:49:5c:dc:11:a7:65:84:74: e3:38:2e:22:fa:f4:e6:70:b6:09:c2:5f:43:3f:05: f4:db:96:ac:ec:68:39:bb:af:56:31:1b:77:fe:b3: 39:25:d9:9b:c3:57:84:ac:fc:e1:d2:64:0a:e4:84: 9c:d6:b5:30:3f:b1:5f:8a:e9:d9:db:6d:8d:cb:25: ba:f5:d2:9e:39:6e:e2:c3:33:0d:c7:23:f2:95:f4: e4:16:1e:3f:22:a8:64:ca:74:da:f5:93:c1:c6:a8: d9:02:57:9a:fa:07:88:9f:4e:ac:52:f9:ab:06:2b: f8:73:1c:2e:8b:f1:80:4f:4b:cb:80:16:e2:8c:06: 55:2b:8f:fb:4b:ed:fc:9a:80:53:3f:e5:ae:dd:87: f4:fa:fd:a9:29:ed:4b:ff:04:4f:9f:04:f9:54:1e: c4:73:19:92:86:65:da:3d:7e:c1:3c:ee:4f:df:99: ad:b3:46:0e:2f:57:f0:5c:53:3e:02:2c:3b:3a:ed: 95:36:1f:2b:23:f4:08:34:b5:5c:cf:8c:bd:5f:fa: 03:56:26:16:a7:d8:d0:17:dc:ef:dc:7e:b7:1d:e7: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5A:39:41:D1:BC:2F:69:53:6A:39:20:CB:90:43:FA:2A:83:9A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:28f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cf:21:d1:5d:55:0b:06:bb:7c:10:23:0e:5c:5a:f3:17:ca: a1:f5:c8:b4:5c:18:9e:23:ec:c4:43:53:06:9c:ea:75:d3:85: 9e:4a:97:bc:38:93:1e:81:1c:4f:34:64:c3:9c:2d:81:9d:d1: cf:63:1a:df:fd:eb:17:c9:4d:05:e7:9c:c3:8e:09:2b:80:77: 71:17:30:67:6a:f1:79:16:06:b9:1e:f3:df:99:80:56:c2:c3: e3:46:1e:5b:0f:e2:b6:e5:69:4b:a3:70:4b:60:ea:92:ec:69: 76:71:32:09:6e:02:05:7e:5f:ee:ff:16:da:e5:3d:c5:4b:f7: 9c:75:3f:e0:b6:b3:db:df:2a:07:f8:56:70:df:e4:1c:59:ff: 01:b2:26:84:aa:d5:4f:39:c3:35:96:6d:08:e6:d0:fd:91:6f: c0:19:93:e1:f9:2a:39:88:0c:d1:6f:9f:aa:b5:42:fe:1b:11: 9f:8d:d3:97:ee:0b:a1:7f:0d:4a:6e:1d:56:c6:06:d4:5f:c7: c1:3f:51:64:64:9f:a9:8b:fe:c5:91:d8:74:9c:b9:5e:63:73: 80:5e:f8:c4:a1:79:bc:ea:73:05:f9:a7:7b:04:66:60:5f:0f: 89:cb:c1:2b:1f:a8:5d:91:84:8d:0b:e9:83:c1:2a:49:45:98: a8:02:18:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4LHXlS+ObL+QIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk YzhkOWQ2ZDQtZGMyZC00Mzk1LTg3MjctOWUzMGYyMGJmODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq68xpAIEttMUIuoveg5FYgkmsVdWX7qWyIti L+Qwm4Y1LguuSVzcEadlhHTjOC4i+vTmcLYJwl9DPwX025as7Gg5u69WMRt3/rM5 Jdmbw1eErPzh0mQK5ISc1rUwP7FfiunZ222NyyW69dKeOW7iwzMNxyPylfTkFh4/ IqhkynTa9ZPBxqjZAlea+geIn06sUvmrBiv4cxwui/GAT0vLgBbijAZVK4/7S+38 moBTP+Wu3Yf0+v2pKe1L/wRPnwT5VB7EcxmShmXaPX7BPO5P35mts0YOL1fwXFM+ Aiw7Ou2VNh8rI/QINLVcz4y9X/oDViYWp9jQF9zv3H63HeeMgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBaOUHRvC9pU2o5IMuQQ/oqg5o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjY4NTdiODYtYmM1ZC0z Y2YwLWJmOTMtNmYyYTczZTgzNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPPIdFdVQsGu3wQIw5cWvMXyqH1yLRcGJ4j7MRDUwac6nXThZ5K l7w4kx6BHE80ZMOcLYGd0c9jGt/96xfJTQXnnMOOCSuAd3EXMGdq8XkWBrke89+Z gFbCw+NGHlsP4rblaUujcEtg6pLsaXZxMgluAgV+X+7/FtrlPcVL95x1P+C2s9vf Kgf4VnDf5BxZ/wGyJoSq1U85wzWWbQjm0P2Rb8AZk+H5KjmIDNFvn6q1Qv4bEZ+N 05fuC6F/DUpuHVbGBtRfx8E/UWRkn6mL/sWR2HScuV5jc4Be+MShebzqcwX5p3sE ZmBfD4nLwSsfqF2RhI0L6YPBKklFmKgCGGA= -----END CERTIFICATE-----Generated at Sat Jun 13 10:13:50 2026 by rpki-client