$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa File: 0f38d040-0898-3d13-8906-989c5555da9b.roa (raw, json) Hash identifier: 6vCCCTwVPQC+QcDa1fr89LDK72mjVeeE4nv/rgtSBgE= Subject key identifier: 88:94:1B:41:87:E6:97:8C:5F:CA:3A:50:71:76:A1:17:E3:F4:74:87 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E0A700E6E8AE5EBBED3279940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 25957 IP address blocks: 2001:470:4da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:0e:6e:8a:e5:eb:be:d3:27:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=4d1d9893-9383-4daa-8986-be5fe8a20364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:ab:cf:78:29:19:f1:7d:6f:63:6e:f9:8a: b9:dd:77:5c:58:7a:96:4d:4d:dd:dc:0e:17:80:5c: ed:1d:5f:d0:df:b5:37:c0:ae:e8:c8:5e:90:57:12: 5c:c2:8d:23:e9:88:9d:7d:f9:40:c4:16:0b:d0:0b: 6b:16:a8:93:9a:c8:68:f9:02:0a:53:e0:81:f0:d7: fc:a1:3a:35:ae:38:f2:3d:dd:0d:1d:a7:3f:97:8d: 62:57:b3:a1:be:24:bd:dd:04:23:df:9b:81:0a:2a: 7a:83:87:38:e9:5c:d7:a9:6c:90:72:6d:b9:d7:34: 78:91:d3:14:01:f9:69:e8:0d:0e:6f:78:63:f4:5b: 7f:a4:9e:ae:66:2b:a9:d9:29:c8:fc:43:19:0e:eb: 13:fb:98:ab:3f:2e:1b:c2:39:f1:9f:db:80:ad:31: e2:b6:75:f4:d2:84:3f:45:67:88:3c:22:c6:35:de: 1f:ee:87:12:c3:93:dd:a9:d9:2b:e6:ab:3c:3e:65: a3:12:03:81:9e:09:9b:fe:40:07:f9:14:37:58:dc: a2:7d:fa:bc:6d:c5:1f:7c:38:05:22:59:95:f0:3d: cf:56:e7:3b:3d:c8:e6:02:e1:f8:86:61:5c:1e:f5: 31:b7:a6:c9:19:2d:9a:32:4d:03:79:af:7f:44:83: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:94:1B:41:87:E6:97:8C:5F:CA:3A:50:71:76:A1:17:E3:F4:74:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f38d040-0898-3d13-8906-989c5555da9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:49:e3:4a:21:cb:a0:53:b8:fc:03:eb:eb:3b:22:cf:5e:a9: 69:4d:31:34:4d:1c:83:7a:f6:55:b4:54:e5:f3:51:7d:1a:2a: 02:72:49:e7:f7:0c:37:72:b3:c0:23:23:9a:4e:c0:fa:3e:44: 09:48:a7:a5:6c:fa:ff:4c:14:8c:19:3a:64:59:4f:7c:90:0e: e7:e4:38:39:f4:d8:51:7b:15:70:87:b7:50:a6:17:9e:6a:86: 11:d9:2a:94:fe:63:17:9c:e5:0d:f3:3d:ad:e1:8f:4f:c7:e5: e7:ae:dd:f0:4c:5b:32:62:51:f7:ba:55:1e:d4:3b:30:27:43: ef:6c:6e:8a:7a:3f:64:ee:6f:9f:bd:17:d3:e4:f6:96:71:94: 47:5a:85:49:a6:ee:40:78:76:b7:ae:c3:03:ff:f5:65:d7:31: 73:ea:79:9c:07:f2:c5:e0:90:bb:28:89:a3:db:16:83:4f:02: de:7c:de:61:bc:92:0b:b5:e5:d5:d5:7a:5a:4e:b1:38:13:13: 42:d2:fe:42:09:42:f0:60:92:a6:f5:61:b4:f0:11:b8:f6:af: 3a:30:15:fd:78:8a:dd:d5:b9:70:0f:67:96:71:88:ef:ef:55: bf:96:f4:4b:cf:3d:f0:71:19:0f:36:aa:24:96:cb:8d:10:03: ba:31:93:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4KcA5uiuXrvtMnmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NGQxZDk4OTMtOTM4My00ZGFhLTg5ODYtYmU1ZmU4YTIwMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK2rz3gpGfF9b2Nu+Yq53XdcWHqWTU3d3A4X gFztHV/Q37U3wK7oyF6QVxJcwo0j6YidfflAxBYL0AtrFqiTmsho+QIKU+CB8Nf8 oTo1rjjyPd0NHac/l41iV7OhviS93QQj35uBCip6g4c46VzXqWyQcm251zR4kdMU Aflp6A0Ob3hj9Ft/pJ6uZiup2SnI/EMZDusT+5irPy4bwjnxn9uArTHitnX00oQ/ RWeIPCLGNd4f7ocSw5Pdqdkr5qs8PmWjEgOBngmb/kAH+RQ3WNyiffq8bcUffDgF IlmV8D3PVuc7PcjmAuH4hmFcHvUxt6bJGS2aMk0Dea9/RIPN0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiUG0GH5peMX8o6UHF2oRfj9HSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGYzOGQwNDAtMDg5OC0z ZDEzLTg5MDYtOTg5YzU1NTVkYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxJ40ohy6BTuPwD6+s7Is9eqWlNMTRNHIN69lW0VOXzUX0aKgJy Sef3DDdys8AjI5pOwPo+RAlIp6Vs+v9MFIwZOmRZT3yQDufkODn02FF7FXCHt1Cm F55qhhHZKpT+Yxec5Q3zPa3hj0/H5eeu3fBMWzJiUfe6VR7UOzAnQ+9sbop6P2Tu b5+9F9Pk9pZxlEdahUmm7kB4dreuwwP/9WXXMXPqeZwH8sXgkLsoiaPbFoNPAt58 3mG8kgu15dXVelpOsTgTE0LS/kIJQvBgkqb1YbTwEbj2rzowFf14it3VuXAPZ5Zx iO/vVb+W9EvPPfBxGQ82qiSWy40QA7oxk+0= -----END CERTIFICATE-----Generated at Fri Jun 5 16:37:51 2026 by rpki-client