$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa File: 857f8519-5259-3051-b3a3-cbed201e7089.roa (raw, json) Hash identifier: UKZnIyn3YYnJ7m31xrq1TPkdsvoMAJHDzC1BPYM8Tig= Subject key identifier: 98:CD:CC:00:DE:5A:9A:C9:E2:1B:30:ED:36:64:C3:EE:DD:9C:07:07 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E18AEFFA3BB0EE48B524E8260 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 213291 IP address blocks: 2001:470:453::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:ff:a3:bb:0e:e4:8b:52:4e:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=dc843a6e-cb0a-4746-84fc-20b82d5242ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:84:85:f9:25:59:c4:be:47:db:38:37:e5: e9:44:91:4b:5d:55:82:4c:84:0e:ec:b8:be:82:c0: 95:81:dd:c6:d1:66:c4:98:6d:12:97:19:31:77:47: b2:1e:b4:d0:1f:c8:39:e5:ad:32:19:cb:f2:01:19: 84:f5:a8:db:b2:0f:5d:1d:f5:c3:0c:e7:44:a8:91: 40:64:75:6b:b8:f8:08:a6:19:7c:26:4c:d2:1a:ce: 3f:ff:a1:cb:e8:15:8f:c3:d5:14:6b:cf:dc:80:ed: 8e:41:fd:ba:45:20:ba:b9:d3:89:45:a6:65:ba:85: 13:9c:d0:85:94:1f:aa:fc:a9:28:78:52:dd:7c:fa: fe:45:58:28:b9:68:b8:7b:3e:df:8c:aa:7b:37:54: ce:80:89:88:f9:f4:16:81:c3:dc:5f:8e:7a:4d:c5: 23:40:f9:87:54:27:3c:3b:4f:1c:9b:7e:d3:9c:f8: 37:61:d3:05:92:a5:e5:61:07:09:2b:b7:a7:bd:9d: 9f:90:76:22:d9:b7:c2:45:86:e6:a9:bd:1b:26:4b: 05:9e:42:a2:8e:3f:55:6b:02:ae:cb:a3:a6:7b:43: 5c:58:c9:56:c4:f4:93:a9:f9:10:ea:84:a1:73:88: 2e:5b:38:ed:d4:93:07:60:89:9c:63:f5:87:c0:eb: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:CC:00:DE:5A:9A:C9:E2:1B:30:ED:36:64:C3:EE:DD:9C:07:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:453::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:73:7d:5b:9d:7d:be:d9:ff:12:c2:93:98:43:4d:a2:a6:71: 6a:6c:e6:16:0d:45:43:4a:93:6e:5b:63:ab:55:83:66:1e:04: 28:d9:ef:74:f8:09:d8:5e:93:c2:06:f6:7f:2f:fe:30:84:95: 29:2a:a3:de:47:9e:e6:20:16:c6:2d:9f:ac:c3:61:b1:22:e0: d2:91:fe:fd:f6:4e:a7:18:59:da:dc:8c:26:61:31:59:3d:ef: a7:92:2c:32:5a:ad:21:a1:b0:f0:6b:1d:54:24:0b:b6:c1:7f: 29:be:e5:ff:4a:33:8f:76:06:5f:e4:f2:91:9f:c5:f1:7e:63: e8:35:af:f4:fd:b8:b0:70:9d:fb:17:d6:33:ae:a1:54:3d:16: 0d:2a:61:aa:e1:b1:0a:3e:f4:de:6d:d5:74:8d:08:05:5d:cf: 43:dc:ab:78:1f:8c:f5:42:da:a1:ee:d3:ab:42:ff:ba:77:53: 09:1d:40:16:8a:69:19:53:9c:2f:66:dc:96:4e:9a:31:bc:fb: 87:5f:5e:f3:57:4c:4c:c2:59:b8:79:c4:bb:89:ff:98:44:4e: b5:fe:88:de:0c:4f:71:24:7b:51:15:0d:e8:8a:da:73:18:81: 58:9f:e4:22:e7:dd:6b:20:e2:53:5c:9d:0d:2f:42:44:42:2a: f9:ad:03:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Yrv+juw7ki1JOgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk ZGM4NDNhNmUtY2IwYS00NzQ2LTg0ZmMtMjBiODJkNTI0MmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSSEhfklWcS+R9s4N+XpRJFLXVWCTIQO7Li+ gsCVgd3G0WbEmG0Slxkxd0eyHrTQH8g55a0yGcvyARmE9ajbsg9dHfXDDOdEqJFA ZHVruPgIphl8JkzSGs4//6HL6BWPw9UUa8/cgO2OQf26RSC6udOJRaZluoUTnNCF lB+q/KkoeFLdfPr+RVgouWi4ez7fjKp7N1TOgImI+fQWgcPcX456TcUjQPmHVCc8 O08cm37TnPg3YdMFkqXlYQcJK7envZ2fkHYi2bfCRYbmqb0bJksFnkKijj9VawKu y6Ome0NcWMlWxPSTqfkQ6oShc4guWzjt1JMHYImcY/WHwOvoRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJjNzADeWprJ4hsw7TZkw+7dnAcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU3Zjg1MTktNTI1OS0z MDUxLWIzYTMtY2JlZDIwMWU3MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcART MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpzfVudfb7Z/xLCk5hDTaKmcWps5hYNRUNKk25bY6tVg2YeBCjZ 73T4Cdhek8IG9n8v/jCElSkqo95HnuYgFsYtn6zDYbEi4NKR/v32TqcYWdrcjCZh MVk976eSLDJarSGhsPBrHVQkC7bBfym+5f9KM492Bl/k8pGfxfF+Y+g1r/T9uLBw nfsX1jOuoVQ9Fg0qYarhsQo+9N5t1XSNCAVdz0Pcq3gfjPVC2qHu06tC/7p3Uwkd QBaKaRlTnC9m3JZOmjG8+4dfXvNXTEzCWbh5xLuJ/5hETrX+iN4MT3Eke1EVDeiK 2nMYgVif5CLn3Wsg4lNcnQ0vQkRCKvmtA04= -----END CERTIFICATE-----Generated at Sat Jun 13 16:49:07 2026 by rpki-client