$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cca8dd-b63e-3112-a744-7e4f8d434084.roa File: d3cca8dd-b63e-3112-a744-7e4f8d434084.roa (raw, json) Hash identifier: KLAakSFayOzZpcFbMKHlQQ6q8P5M1iKrG79X8vbwAS0= Subject key identifier: 95:14:B3:B6:8F:0C:06:41:EF:E7:40:E1:69:4A:3A:7B:B2:6A:B0:A9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA793FD74F8377ECF5AC2D9C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cca8dd-b63e-3112-a744-7e4f8d434084.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 57455 IP address blocks: 2001:470:3a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:fd:74:f8:37:7e:cf:5a:c2:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=59bfc471-2bc9-4468-8796-0d4f8c9466bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:d3:b0:cd:91:6a:ab:04:fb:9a:72:55:b7: 2e:44:8c:66:9b:c7:31:7f:bc:a0:be:76:d9:12:58: 88:dc:74:a7:3e:5f:f3:a6:a7:cb:16:aa:17:77:23: 38:2d:c1:f1:e1:c6:11:ab:94:dd:c2:45:09:dc:b8: c8:22:39:4e:c8:15:4d:35:bf:e3:d4:9b:73:61:04: 6e:f9:e6:b0:d9:1e:0f:b0:26:c6:d8:50:66:18:d1: 43:cf:c6:cc:51:24:e3:f8:e8:0d:84:f1:0b:e9:88: 0e:f5:fa:5a:eb:ec:7b:f3:b2:e2:2a:41:46:69:a0: 3d:57:0d:72:d2:5e:64:9a:2b:4b:71:62:a6:b4:05: 07:17:89:42:8a:d7:68:18:00:e6:a7:2e:d5:76:43: 2a:f5:49:5a:b2:7d:42:4e:8e:ca:66:60:89:a3:37: 4a:48:95:e3:d1:1c:b9:31:af:1e:9b:95:5a:96:24: aa:b6:de:5e:a8:c8:96:06:7d:12:21:f0:ad:33:7b: 67:0d:48:89:79:3f:63:b1:1e:c7:c9:ea:56:90:7b: e7:7a:ac:b9:50:c7:2c:11:c8:84:68:27:43:69:69: a0:1d:ff:6e:85:30:d8:ee:3a:ad:05:1a:81:06:f7: ba:a0:d7:20:43:5e:7d:3f:99:63:88:32:45:09:ac: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:14:B3:B6:8F:0C:06:41:EF:E7:40:E1:69:4A:3A:7B:B2:6A:B0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cca8dd-b63e-3112-a744-7e4f8d434084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:78:28:9a:90:16:79:a4:14:cb:b7:89:07:c7:fe:d5:b9:bc: 16:43:23:45:c2:4d:98:5a:f8:ee:d7:7f:8e:11:8e:e3:2f:6e: eb:87:ac:cf:71:63:f4:d6:49:b7:fc:48:85:6d:ce:a7:86:e6: af:1a:b7:d5:2c:55:a4:b4:60:ad:d8:d7:76:b8:c3:0a:7e:b4: 5b:e8:cd:0c:7c:36:9e:33:08:b9:42:c1:f3:a4:5a:30:a2:83: db:78:2d:bd:1f:c5:8e:eb:43:26:d8:0f:f0:fd:4e:ae:d8:2b: 45:2f:c3:32:b3:2e:25:73:5f:5f:2b:6e:97:62:90:63:44:51: 50:30:a9:3d:11:5d:6b:7b:c6:34:ee:37:81:d6:a9:7d:46:bd: c9:c7:e1:8d:b3:16:34:08:12:3c:f9:5e:5b:f6:2d:ec:91:80: 8d:ea:72:eb:ad:d7:06:6c:b2:36:d1:b2:bd:14:fd:1d:f5:2d: 55:49:ae:af:6a:a7:07:c1:21:2d:e4:4c:8c:a2:30:41:d8:90: db:18:69:65:7f:58:94:4e:22:b4:d1:c7:cd:24:2f:79:55:af: 3e:33:00:ba:2b:72:1a:5b:36:eb:56:d9:5c:17:81:d3:59:1b: 27:55:b2:4a:9a:db:de:f7:27:44:ac:07:c4:1c:d0:45:71:b7: 5b:6a:1d:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nk/10+Dd+z1rC2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTliZmM0NzEtMmJjOS00NDY4LTg3OTYtMGQ0ZjhjOTQ2NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0/TsM2RaqsE+5pyVbcuRIxmm8cxf7ygvnbZ EliI3HSnPl/zpqfLFqoXdyM4LcHx4cYRq5TdwkUJ3LjIIjlOyBVNNb/j1JtzYQRu +eaw2R4PsCbG2FBmGNFDz8bMUSTj+OgNhPEL6YgO9fpa6+x787LiKkFGaaA9Vw1y 0l5kmitLcWKmtAUHF4lCitdoGADmpy7VdkMq9Ulasn1CTo7KZmCJozdKSJXj0Ry5 Ma8em5ValiSqtt5eqMiWBn0SIfCtM3tnDUiJeT9jsR7HyepWkHvneqy5UMcsEciE aCdDaWmgHf9uhTDY7jqtBRqBBve6oNcgQ159P5ljiDJFCaxQ1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJUUs7aPDAZB7+dA4WlKOnuyarCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDNjY2E4ZGQtYjYzZS0z MTEyLWE3NDQtN2U0ZjhkNDM0MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALN4KJqQFnmkFMu3iQfH/tW5vBZDI0XCTZha+O7Xf44RjuMvbuuH rM9xY/TWSbf8SIVtzqeG5q8at9UsVaS0YK3Y13a4wwp+tFvozQx8Np4zCLlCwfOk WjCig9t4Lb0fxY7rQybYD/D9Tq7YK0UvwzKzLiVzX18rbpdikGNEUVAwqT0RXWt7 xjTuN4HWqX1GvcnH4Y2zFjQIEjz5Xlv2LeyRgI3qcuut1wZssjbRsr0U/R31LVVJ rq9qpwfBIS3kTIyiMEHYkNsYaWV/WJROIrTRx80kL3lVrz4zALorchpbNutW2VwX gdNZGydVskqa2973J0SsB8Qc0EVxt1tqHV8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:33 2026 by rpki-client