$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a707a0fe-77df-3841-810e-32f82a16e817.roa File: a707a0fe-77df-3841-810e-32f82a16e817.roa (raw, json) Hash identifier: 5LgVqh+hYsv6clKTYpgnlK83aaS6PYmbqGrs/OmqXCk= Subject key identifier: 89:9F:69:F3:94:89:84:D9:08:D5:74:22:CD:29:09:19:7D:E1:74:E5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DEDE0B51A6D2CD032F826A900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a707a0fe-77df-3841-810e-32f82a16e817.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 58945 IP address blocks: 2001:470:389::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b5:1a:6d:2c:d0:32:f8:26:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=03b769b3-a7d5-4b74-b6a4-001fe743ebb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:80:f2:7b:14:ab:ff:67:01:13:2c:bd:6d: 80:8a:7f:2c:8b:69:ff:af:0e:a1:c4:41:43:92:56: 0b:76:d5:2a:bd:71:e7:68:7a:59:89:27:de:d6:59: 74:bc:46:2e:3f:e8:d9:e1:c7:0a:e9:05:cf:b3:46: 4d:66:e2:af:60:fb:92:2f:c7:c7:b1:d2:67:60:72: fd:6f:47:87:bd:1d:90:a5:21:3d:a2:cf:40:07:ab: 54:55:0e:d5:31:36:17:9f:96:50:57:99:ac:95:bd: c3:e5:e2:86:b9:72:f3:1f:93:e3:52:bd:29:08:f3: 03:8a:2c:e4:38:85:9b:a8:c4:2b:d9:81:55:c8:10: db:cd:39:fb:bf:4f:a8:00:e9:59:17:f0:b9:88:86: 6b:a4:a1:a5:fa:af:ad:46:b7:6d:4d:76:ed:56:26: 48:47:ac:71:80:7c:f0:e9:46:61:f2:19:02:33:30: 87:27:ea:10:40:1f:04:3e:f0:88:f3:2a:da:1f:d6: bd:8c:63:48:dd:24:37:70:5b:f5:4f:c5:a5:69:32: ba:09:4b:b3:a9:0d:13:ac:d0:75:e6:05:f3:05:1e: 84:b2:8e:f3:f7:2f:16:22:ea:2d:01:f7:fa:07:e3: 50:6a:87:93:57:be:e6:8b:d1:6f:2d:f3:18:02:c5: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9F:69:F3:94:89:84:D9:08:D5:74:22:CD:29:09:19:7D:E1:74:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a707a0fe-77df-3841-810e-32f82a16e817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:389::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:90:5d:5e:ca:c8:ab:92:30:af:2e:43:84:d5:2c:73:a5:01: b6:03:0e:49:17:4b:2e:9b:1f:51:6b:22:28:32:4d:f5:02:43: 77:ab:fe:db:d6:c4:4e:32:de:36:ad:dc:72:ed:3f:01:1e:5d: 76:64:8e:bb:1b:7a:29:d3:ae:03:67:57:40:8a:05:ef:a5:46: 1f:a4:17:78:bf:2d:9e:47:74:07:d0:8a:18:fc:66:5e:bd:28: eb:4a:37:ff:18:9e:c6:9d:f2:4c:f2:6e:cf:e1:74:fa:6b:11: 28:6b:5a:0f:7c:d7:b4:d9:35:9b:06:a6:43:8d:56:53:65:36: 61:fa:ee:53:07:82:71:20:7a:27:46:c5:81:ea:28:10:fd:6a: b8:65:b8:e4:3b:6f:5a:7f:88:76:75:5c:e3:d5:58:f7:9f:28: 44:7a:fb:84:84:2c:f6:0f:71:d2:4c:44:a9:a1:9f:d6:52:8f: 13:b2:cc:c2:e6:41:b1:0e:59:62:92:84:8f:9d:ef:98:62:7c: 63:13:61:61:47:3a:ac:29:9c:ec:dc:e1:fd:3a:38:e6:85:e7: 0e:d9:4d:a4:ca:e5:38:a7:30:1b:14:a3:dc:71:17:96:a2:65: 51:af:54:ca:8e:02:ad:07:24:c2:53:d9:39:a9:a7:6e:08:d2: 0d:a2:da:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4LUabSzQMvgmqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk MDNiNzY5YjMtYTdkNS00Yjc0LWI2YTQtMDAxZmU3NDNlYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ6A8nsUq/9nARMsvW2Ain8si2n/rw6hxEFD klYLdtUqvXHnaHpZiSfe1ll0vEYuP+jZ4ccK6QXPs0ZNZuKvYPuSL8fHsdJnYHL9 b0eHvR2QpSE9os9AB6tUVQ7VMTYXn5ZQV5mslb3D5eKGuXLzH5PjUr0pCPMDiizk OIWbqMQr2YFVyBDbzTn7v0+oAOlZF/C5iIZrpKGl+q+tRrdtTXbtViZIR6xxgHzw 6UZh8hkCMzCHJ+oQQB8EPvCI8yraH9a9jGNI3SQ3cFv1T8WlaTK6CUuzqQ0TrNB1 5gXzBR6Eso7z9y8WIuotAff6B+NQaoeTV77mi9FvLfMYAsU4iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImfafOUiYTZCNV0Is0pCRl94XTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTcwN2EwZmUtNzdkZi0z ODQxLTgxMGUtMzJmODJhMTZlODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqQXV7KyKuSMK8uQ4TVLHOlAbYDDkkXSy6bH1FrIigyTfUCQ3er /tvWxE4y3jat3HLtPwEeXXZkjrsbeinTrgNnV0CKBe+lRh+kF3i/LZ5HdAfQihj8 Zl69KOtKN/8Ynsad8kzybs/hdPprEShrWg9817TZNZsGpkONVlNlNmH67lMHgnEg eidGxYHqKBD9arhluOQ7b1p/iHZ1XOPVWPefKER6+4SELPYPcdJMRKmhn9ZSjxOy zMLmQbEOWWKShI+d75hifGMTYWFHOqwpnOzc4f06OOaF5w7ZTaTK5TinMBsUo9xx F5aiZVGvVMqOAq0HJMJT2Tmpp24I0g2i2ig= -----END CERTIFICATE-----Generated at Sat Jun 13 19:49:58 2026 by rpki-client