$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa File: 686a3bc1-b910-3fad-b45e-507aac425894.roa (raw, json) Hash identifier: 3HTbsFDOFYgnpZJJRgwhbiyq9APjYrA8w1C7UJAixzo= Subject key identifier: BB:23:A4:DD:1D:A4:31:B5:C8:7C:18:BF:CC:41:61:1A:12:BC:18:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA0155A837BE20FE014118D30 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 397376 IP address blocks: 2001:470:254::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:5a:83:7b:e2:0f:e0:14:11:8d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=e9f9c5ab-3a92-42f4-b045-fdd57992aeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1d:4c:6d:6a:d0:c6:a9:fc:76:10:00:3c:ce: 24:bc:1f:eb:96:5b:39:45:08:4b:0d:ce:4b:74:01: f4:df:25:70:14:5f:89:3a:08:42:b2:16:48:14:f3: 47:53:88:40:7c:71:92:26:28:43:01:aa:be:4c:25: dd:b8:0e:de:59:ea:dd:dc:d9:94:1a:b2:3f:ec:12: 45:87:0f:63:f6:0c:1e:5d:c8:d1:55:c1:64:f4:9e: aa:10:4c:24:20:c8:3e:ed:13:ee:4d:25:9c:28:2b: f0:24:09:4c:02:e9:f6:27:9f:72:8e:ef:12:e3:8c: ac:49:61:30:03:f5:87:db:7f:ac:d6:7e:38:77:99: 37:b4:8d:14:44:1d:42:c6:0b:87:39:13:b3:c7:83: 06:7a:68:17:cb:4c:41:48:97:7b:29:f6:cc:d5:33: b8:8c:43:7c:16:7f:60:14:2a:a6:7d:d7:54:53:20: 96:1c:9a:6a:3d:d5:81:7c:33:88:81:19:58:45:4c: 7c:42:c9:24:f6:fe:f0:de:02:48:a7:6d:c2:74:55: 60:2a:93:eb:99:76:3a:5c:8a:6d:8d:74:12:79:0c: d9:62:4c:06:7b:7d:03:eb:3f:a9:7b:2b:65:29:49: f6:bb:dc:57:80:ee:44:74:ac:23:c7:f8:9e:41:a3: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:A4:DD:1D:A4:31:B5:C8:7C:18:BF:CC:41:61:1A:12:BC:18:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/686a3bc1-b910-3fad-b45e-507aac425894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:254::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f5:21:da:f3:d1:3d:ad:a2:83:8a:f7:77:8c:51:ab:05:dd: 47:28:3e:c1:c9:96:f0:45:35:7a:49:aa:4d:f7:d5:a6:79:16: 3d:97:ac:89:4e:99:07:d7:e4:db:51:f8:4c:ce:b1:9e:05:ad: 57:ae:55:b4:67:08:6a:de:3a:f2:30:6d:c5:16:9e:59:78:d1: f5:d3:e0:13:e8:30:6c:a7:ea:98:8d:be:d1:49:ab:64:39:6c: b7:9b:3b:bd:05:1d:b4:9a:4a:c6:a1:aa:ca:48:3a:bf:61:77: e1:51:8e:6a:d2:37:c7:62:33:b6:03:42:df:e9:65:7d:c3:20: e5:34:89:7d:18:0b:45:99:2f:d6:cf:e3:ce:c5:e4:f9:37:97: a3:ba:26:3f:96:28:91:5d:33:c3:31:af:66:06:73:e1:e1:0d: 5f:a5:75:da:a8:d1:a2:4f:7d:d0:19:8b:c9:8e:a9:ad:49:f1: a8:b4:3c:a7:ca:85:e1:3b:5a:60:10:95:c4:5e:82:08:7d:04: 4d:f2:61:55:4c:77:ff:62:b9:8c:dd:67:a2:34:57:83:5f:0b: 03:56:3e:9f:d3:d4:bd:72:81:01:3f:42:d4:09:e8:93:00:f8: c5:c9:7b:8c:7d:3d:b2:bf:be:0b:76:25:c3:34:01:99:bf:21: 23:5f:62:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6gFVqDe+IP4BQRjTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTlmOWM1YWItM2E5Mi00MmY0LWIwNDUtZmRkNTc5OTJhZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B1MbWrQxqn8dhAAPM4kvB/rlls5RQhLDc5L dAH03yVwFF+JOghCshZIFPNHU4hAfHGSJihDAaq+TCXduA7eWerd3NmUGrI/7BJF hw9j9gweXcjRVcFk9J6qEEwkIMg+7RPuTSWcKCvwJAlMAun2J59yju8S44ysSWEw A/WH23+s1n44d5k3tI0URB1CxguHOROzx4MGemgXy0xBSJd7KfbM1TO4jEN8Fn9g FCqmfddUUyCWHJpqPdWBfDOIgRlYRUx8Qskk9v7w3gJIp23CdFVgKpPrmXY6XIpt jXQSeQzZYkwGe30D6z+peytlKUn2u9xXgO5EdKwjx/ieQaOJ0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsjpN0dpDG1yHwYv8xBYRoSvBhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg2YTNiYzEtYjkxMC0z ZmFkLWI0NWUtNTA3YWFjNDI1ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIn1Idrz0T2tooOK93eMUasF3UcoPsHJlvBFNXpJqk331aZ5Fj2X rIlOmQfX5NtR+EzOsZ4FrVeuVbRnCGreOvIwbcUWnll40fXT4BPoMGyn6piNvtFJ q2Q5bLebO70FHbSaSsahqspIOr9hd+FRjmrSN8diM7YDQt/pZX3DIOU0iX0YC0WZ L9bP487F5Pk3l6O6Jj+WKJFdM8Mxr2YGc+HhDV+lddqo0aJPfdAZi8mOqa1J8ai0 PKfKheE7WmAQlcReggh9BE3yYVVMd/9iuYzdZ6I0V4NfCwNWPp/T1L1ygQE/QtQJ 6JMA+MXJe4x9PbK/vgt2JcM0AZm/ISNfYjc= -----END CERTIFICATE-----Generated at Tue Jul 28 19:52:10 2026 by rpki-client