$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa File: d821af19-f830-30b5-968e-4e50cdc1f536.roa (raw, json) Hash identifier: +gqNLeu6BFfNppWfAeQVOcO+76foi1w5jc8gShxpACU= Subject key identifier: 56:10:DF:BC:65:9A:2B:44:E5:86:0E:DB:8D:35:97:98:38:F9:91:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E147EEAC6566394C815062300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 19661 IP address blocks: 2001:470:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:ea:c6:56:63:94:c8:15:06:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=040e567c-fe58-4d3e-888d-9a9886040857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:20:e5:f4:67:29:cd:17:67:6e:23:19:dc: 3d:cd:05:ff:6f:90:1b:c5:f9:4e:da:34:2d:72:fd: 56:8e:9d:08:7f:d8:c7:9a:a7:cb:af:f2:28:e4:01: bd:ef:1f:b1:bd:f3:10:18:96:5f:b3:22:71:3f:02: 57:6f:19:05:3b:55:cf:db:b3:ee:3a:10:0b:51:bf: 48:21:1c:1e:2f:dc:3f:46:35:43:f2:75:b5:1c:16: 3a:7b:d4:4e:4f:f9:34:f9:54:12:60:22:94:ad:60: 3f:28:18:e6:8f:02:eb:a3:7f:ab:b0:07:46:7c:10: 57:47:80:04:8d:62:83:2b:41:db:8d:e0:ef:78:ec: 12:94:ae:64:46:37:00:ae:89:92:fc:ac:df:3e:7e: 7d:1e:51:73:95:d6:f9:0a:a4:9e:24:4c:f7:c3:4d: d8:29:ff:ea:de:e9:8b:91:84:d6:91:4b:36:46:64: 6d:6f:d0:5f:6e:f6:b0:73:08:36:10:42:a8:57:4b: 33:72:3a:85:de:d9:08:ed:1e:46:8c:e8:16:5b:ec: e2:fc:b8:81:68:e7:dd:c1:9b:da:d3:8e:38:e3:35: 89:39:d4:7b:82:40:f2:e6:d6:5f:8c:a8:2a:1a:fe: c8:94:1c:40:c2:8f:ea:be:e3:98:7b:84:43:d4:29: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:DF:BC:65:9A:2B:44:E5:86:0E:DB:8D:35:97:98:38:F9:91:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f3:89:5e:de:29:a6:a4:5e:f9:6d:71:9a:86:c2:46:7f:69: a1:80:1d:7e:13:70:1b:51:4b:a5:1c:e3:5f:a7:91:bf:a6:47: d2:c5:56:1e:2a:32:d7:84:79:10:37:bc:e7:9d:5b:07:dd:4d: 77:71:e2:bd:d3:b7:6b:91:51:d4:17:fa:90:0e:70:f9:b9:65: 86:24:93:99:88:44:f4:5b:73:bc:12:f4:e2:92:b3:80:8e:66: 26:eb:e5:1d:2c:cc:75:8b:3a:a6:0d:4c:41:e2:e1:e3:ca:f1: ef:aa:4f:bd:01:fb:dd:25:b9:f8:c9:26:8f:84:be:4f:32:ef: fc:52:39:9f:aa:e9:7b:4e:26:a8:54:85:3c:b5:0f:d1:44:f9: c0:c0:88:32:e3:88:89:a1:dd:5a:75:70:81:e6:35:be:b6:1a: 47:6a:4f:32:89:ce:6f:16:0a:ab:d1:5d:8d:57:36:6a:49:e1: 96:5f:78:59:04:54:48:7b:cc:e6:66:b2:f6:e1:c3:7b:c7:a9: 4c:6f:cf:49:e8:d4:32:83:36:d1:84:de:57:70:66:a0:fd:14: 8b:d5:0f:f0:69:6b:73:36:42:4d:34:8a:1a:28:11:eb:63:9b: ab:0c:14:2c:91:fc:d9:19:26:9a:11:55:18:e7:a9:fb:d7:d5: 22:f4:be:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4UfurGVmOUyBUGIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk MDQwZTU2N2MtZmU1OC00ZDNlLTg4OGQtOWE5ODg2MDQwODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPAg5fRnKc0XZ24jGdw9zQX/b5AbxflO2jQt cv1Wjp0If9jHmqfLr/Io5AG97x+xvfMQGJZfsyJxPwJXbxkFO1XP27PuOhALUb9I IRweL9w/RjVD8nW1HBY6e9ROT/k0+VQSYCKUrWA/KBjmjwLro3+rsAdGfBBXR4AE jWKDK0HbjeDveOwSlK5kRjcAromS/KzfPn59HlFzldb5CqSeJEz3w03YKf/q3umL kYTWkUs2RmRtb9Bfbvawcwg2EEKoV0szcjqF3tkI7R5GjOgWW+zi/LiBaOfdwZva 04444zWJOdR7gkDy5tZfjKgqGv7IlBxAwo/qvuOYe4RD1CnErQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFYQ37xlmitE5YYO2401l5g4+ZHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMWFmMTktZjgzMC0z MGI1LTk2OGUtNGU1MGNkYzFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3ziV7eKaakXvltcZqGwkZ/aaGAHX4TcBtRS6Uc41+nkb+mR9LF Vh4qMteEeRA3vOedWwfdTXdx4r3Tt2uRUdQX+pAOcPm5ZYYkk5mIRPRbc7wS9OKS s4COZibr5R0szHWLOqYNTEHi4ePK8e+qT70B+90lufjJJo+Evk8y7/xSOZ+q6XtO JqhUhTy1D9FE+cDAiDLjiImh3Vp1cIHmNb62GkdqTzKJzm8WCqvRXY1XNmpJ4ZZf eFkEVEh7zOZmsvbhw3vHqUxvz0no1DKDNtGE3ldwZqD9FIvVD/Bpa3M2Qk00ihoo Eetjm6sMFCyR/NkZJpoRVRjnqfvX1SL0vhw= -----END CERTIFICATE-----Generated at Sat Jun 13 22:01:12 2026 by rpki-client