$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa File: 21f8c037-912c-328c-a5e2-5442a3d1b99f.roa (raw, json) Hash identifier: LVEUfy8HFytH2mLFkqsv5pWqcIvUHoer+yHP/M17DJw= Subject key identifier: D8:70:BC:35:4D:35:89:4A:86:9E:51:CA:EC:2D:B0:F0:55:46:AD:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E3A2F553F56FA8CF0AA992E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 25687 IP address blocks: 2001:470:2a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:55:3f:56:fa:8c:f0:aa:99:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=9e8bb8a3-134d-44e0-8f8a-a72a7978724a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:ae:11:4a:7b:f1:f6:f9:ba:c9:43:db:ce: 42:3b:b6:5a:15:f3:3d:3c:55:be:2f:da:04:2b:f9: cb:2d:0f:e5:b3:c1:48:0f:62:9a:67:9c:76:13:0b: 4b:3d:47:75:83:a2:c3:76:a7:08:89:af:a4:7a:5a: df:69:16:b5:4f:4b:d7:bb:0b:6f:09:79:23:86:92: b4:00:4f:7f:d0:3f:4a:69:63:b5:77:84:93:32:63: fd:80:f8:56:7a:e0:55:16:fc:e6:58:19:78:d3:99: 0e:79:9b:2c:28:4f:6e:a0:3a:d4:9d:0c:23:7b:4a: af:49:8c:fe:26:28:92:19:a3:f3:a1:64:39:20:3b: d3:0e:22:d7:fc:cd:5d:92:3d:47:0f:04:a1:01:40: 68:27:0a:ec:06:f4:f8:12:a4:5a:6f:18:1c:63:82: fa:d4:fb:18:1a:24:0d:50:10:8e:68:b3:25:09:44: 2f:eb:b7:f2:fc:fe:6c:c9:f2:1d:ce:f6:c1:28:1f: 6a:2f:f7:85:3b:b6:97:ba:fc:88:8f:7f:ae:a0:af: 0c:a2:79:0c:1d:c5:d6:e7:b6:3f:f4:d6:c4:36:08: 4d:3b:7e:b5:0c:31:e5:96:45:4b:e0:26:ff:c7:52: 91:7d:3a:a1:26:a0:74:56:80:f7:76:09:ab:86:ee: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:BC:35:4D:35:89:4A:86:9E:51:CA:EC:2D:B0:F0:55:46:AD:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:57:6b:11:05:8f:73:20:9c:6a:fd:d0:41:38:13:0d:be: 60:dd:f3:b2:a3:e4:bb:48:02:f9:a4:c3:6c:64:85:3f:da:28: 4e:82:ef:6b:15:4a:02:70:0b:ec:e7:2d:53:ff:d1:40:40:b1: 43:10:e2:f2:30:db:2f:d8:50:75:ff:06:54:b5:2b:8d:5a:fa: bd:47:68:13:ed:1c:bf:0f:1d:f0:22:88:e6:80:df:f6:19:86: fc:c0:97:76:87:1d:b9:1e:41:27:47:e0:68:f7:f0:0d:aa:c6: 5c:77:d2:96:b2:2e:d0:f4:0e:79:0f:18:74:18:5e:e8:19:65: bd:44:10:19:a4:09:c4:d0:f0:f9:42:2e:f2:9c:02:ab:4b:95: 37:8b:4f:59:b0:c2:f5:6e:a8:70:f8:b9:43:d3:f3:31:64:c9: e2:c0:ac:5e:65:a7:4d:59:2e:29:21:9c:63:68:c9:25:01:59: cf:95:a4:35:83:fa:35:10:a5:bb:af:00:0b:a9:32:91:c1:e1: 39:df:44:8d:ec:40:bb:bd:1e:83:bb:8a:08:0e:94:3e:3e:8f: cd:8c:e7:56:bf:fd:5a:d0:6e:1a:c9:6a:48:ae:be:c9:0f:d2: 6e:7f:c8:b9:dd:6d:3e:bb:86:94:fb:3c:bc:6c:44:9e:00:fd: 1c:12:dc:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L1U/VvqM8KqZLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk OWU4YmI4YTMtMTM0ZC00NGUwLThmOGEtYTcyYTc5Nzg3MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlquEUp78fb5uslD285CO7ZaFfM9PFW+L9oE K/nLLQ/ls8FID2KaZ5x2EwtLPUd1g6LDdqcIia+kelrfaRa1T0vXuwtvCXkjhpK0 AE9/0D9KaWO1d4STMmP9gPhWeuBVFvzmWBl405kOeZssKE9uoDrUnQwje0qvSYz+ JiiSGaPzoWQ5IDvTDiLX/M1dkj1HDwShAUBoJwrsBvT4EqRabxgcY4L61PsYGiQN UBCOaLMlCUQv67fy/P5syfIdzvbBKB9qL/eFO7aXuvyIj3+uoK8MonkMHcXW57Y/ 9NbENghNO361DDHllkVL4Cb/x1KRfTqhJqB0VoD3dgmrhu74LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhwvDVNNYlKhp5RyuwtsPBVRq1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFmOGMwMzctOTEyYy0z MjhjLWE1ZTItNTQ0MmEzZDFiOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMbV2sRBY9zIJxq/dBBOBMNvmDd87Kj5LtIAvmkw2xkhT/aKE6C 72sVSgJwC+znLVP/0UBAsUMQ4vIw2y/YUHX/BlS1K41a+r1HaBPtHL8PHfAiiOaA 3/YZhvzAl3aHHbkeQSdH4Gj38A2qxlx30payLtD0DnkPGHQYXugZZb1EEBmkCcTQ 8PlCLvKcAqtLlTeLT1mwwvVuqHD4uUPT8zFkyeLArF5lp01ZLikhnGNoySUBWc+V pDWD+jUQpbuvAAupMpHB4TnfRI3sQLu9HoO7iggOlD4+j82M51a//VrQbhrJakiu vskP0m5/yLndbT67hpT7PLxsRJ4A/RwS3LE= -----END CERTIFICATE-----Generated at Fri Jul 3 19:14:28 2026 by rpki-client